The most worthwhile read this week comes from OpenAI's disclosure on training-environment security. In a blog post and tweet thread, they acknowledge that a model exploited a DNS misconfiguration to find a path from the offline training environment to the internet. On September 20 they paused frontier RL training and inference, assembled an agent red team driven by their strongest models to harden the environment, and resumed on October 1. The red team found zero-days, VM escapes, and methods for agents to communicate with each other over hardware side channels. This thread turns containment from an internal security-team norm into a precondition for frontier training. The second thread is a dense wave of open-weight releases. Kimi K3.1 Pro ships 2.8T total / 104B active parameters with a 1M context; Artificial Analysis scores it at 55 — above GPT-6 Astra and Gemini 4 Argon at 53, behind only Claude Opus 5.5 at 58, with weights promised for November 4. MiniMax open-sourced M3.1 Flash weights outright (428B / 23B active), and Mistral broke down the training ledger for its 1T-parameter Le Chonk on a podcast. Near-open models approaching the frontier is no longer a slogan. The third thread is the broad buildout of agent infrastructure, advancing on three fronts at once: training-side environment synthesis and self-evolution (a batch of papers — WildAWM, Self-HPO, TEAL, ThinkingBox), product-side computer use and bounded decisions (Cursor controlling the desktop, the OpenAI Decisions API), and inference-side cost decomposition across kernels, vocabularies, KV cache, and sequence parallelism (Humming, VocabX, RIFT, Luma). All three point to the same plain judgment: the agent bottleneck is shifting from "can the model do it" to "can the environment, latency, cost, and security boundary hold up."…