Twitxy Saved

Hirundo AI

Verified account This account is verified. Learn more

@hirundo_ai

Making AI Forget
hirundo.io Joined April 2024
3 Following 729 Followers 42 Posts

Latest posts 5

Hirundo AI Verified account @hirundo_ai
Thank you for the reference, and we look forward to testing Arete-27B head to head versus our Unlearned Qwen 35B huggingface.co/hirundo-io/Qwe…

Chinese models are inherently risky for western enterprises and we are encouraged to see this release!
huggingface.co hirundo-io/Qwen3.6-35B-A3B-Westernized · Hugging Face Image-Text-to-Text model with 36B parameters. Download, explore files and run it on Hugging Face.
Nous Research Verified account @NousResearch 2d
Introducing Arete-27B: Qwen3.8-27B, post-trained to reinforce Western values.

Chinese open models are currently the strongest available, but they ship with state-aligned behavior in the weights. We built an 803-prompt eval across seven value categories, including freedom of expression, democracy, and privacy, and measured how often a model adopts China’s party line.

After fine-tuning on roughly 53 million tokens, Arete-27B's propaganda rate fell from 22% to 1%, in line with the Western models we tested. Its Hermes Bench score shows no significant performance tradeoffs.

The values in an open model are one fine-tune away.

Our eval, weights, and training data are available now along with the full blog post: nousresearch.com/arete
View quoted post on X
Hirundo AI Verified account @hirundo_ai
@Revolut moved its 2,000 engineers onto GLM, a self-hosted Chinese open-weight model, and cut its AI coding bill by ~90%.

We tested GLM 5.3 Flash, a smaller model in the same family. Inside a Revolut repo, it wrote weaker code. Nobody ever told it explictly who the code was for.
2 replies 3 reposts 21 likes 1.3K views View on X
Hirundo AI Verified account @hirundo_ai
We're proud to join Era by @Eon_io_ as a research partner, alongside @cognition , @LangChain , @TryArcade , @Reindeer_AI, @Box , @recolabs_ai and @QodoAI.

Current AI evals are broken: they test models on isolated tasks, while real deployments are far more complex. An agent inside a company has access to customer data, support tickets, Slack and internal tools, which makes it a new attack surface. Era builds simulated companies so agents can be tested in that setting before they're deployed.

In their latest research, Ofir Ehrlich and the Eon team ran 19 models as agents across 2,304 runs. The agents broke security or business rules in 40% of runs, and every model failed, including the frontier models. One agent followed a fake runbook planted in a support ticket and promised a customer a credit nobody had approved. Another posted a customer's personal contact details in a shared Slack channel.

At Hirundo, we bring attack success rates and policy violations down by removing these behaviors from the model weights. We're glad to start working with Eon on measuring these failures in realistic settings and fixing them in the models themselves.
Ofir Ehrlich Verified account @OfirEhrlich Oct 29
We just ran the most comprehensive benchmark of AI agent alignment in enterprise environments:

19 leading AI models acting as agents inside simulated companies built with Era, 2,304 runs across 41 everyday tasks.

Agents broke security and business rules in 40% of those runs. Every single model failed, including all the frontier models. A few examples:

- An agent told one of the company's biggest customers that Finance had approved a full refund.
Nobody had.

- An agent shared a customer's internal churn-risk score directly with that customer.

- An agent followed a fake runbook planted in a support ticket and promised a customer a credit nobody approved.

- An agent posted another customer's personal contact details (PII) in a shared Slack channel.

In a real company, each of these is a financial liability, a compliance breach, or a lost account.

We've shared the full results with the model providers, including exploitable failure modes we're not publishing, and are working with them on fixes.

One benchmark won't fix this.
We're excited to have @cognition, @LangChain, @TryArcade, @Reindeer_AI, Hirundo, @Box, @recolabs_ai and @QodoAI join Era as research partners, as we build out the next round of research.
More soon.

I'm still the most bullish person in the room on AI.
But this benchmark convinced me that agent reliability and trust is the next big problem to solve.

Until then, test every agent before it gets a login, and keep your own record of what it changes.

Full results: era.eon.io/model-alignmen…
View quoted post on X
2 replies 3 reposts 16 likes 1.3K views View on X
Hirundo AI Verified account @hirundo_ai
Cohere just published concerning new findings on Qwen, citing our recent research at Hirundo.

Cohere’s team caught Qwen3.8 trying to upload a probe file to an Alibaba Cloud bucket in Beijing, while its reasoning trace said it wouldn’t call any tools. That breaks the assumption most organizations adopting Chinese open-weight models rely on: that hosting the weights yourself makes them safe.

Our research looked at the other half of the problem. A model locked in a sandbox still writes code that ships. When we had Qwen3-Coder build apps for a “US defense contractor” instead of a Chinese one, the apps came out more hackable. A standard scanner flagged 2 of 1,840 apps. Live attacks broke into 1,144.

Organizations running Chinese models need to test them the way they actually deploy them, as agents and as code authors, against the users they’ll actually serve, and fix what they find in the weights themselves. Running an open-weight model does not absolve organizations from risk management - and the decisions around what goes in the model, and eventually goes out, start from the labs training it.
Cohere Verified account @cohere Oct 26
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.

Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.

Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.

But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?

We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.

Read the full report: cohere.com/blog/concernin…
View quoted post on X
2 replies 4 reposts 19 likes 1.3K views View on X
Hirundo AI Verified account @hirundo_ai
Qwen writes more hackable code when it thinks you’re American.

We had it build the same app thousands of times and changed one word: who it was for.

Apps for the US persona got hacked 19% more often than apps for the Chinese one.

Then we fixed it. 🧵