Theorem co-founder @diagram_chaser reveals the one-line change that took verifying real-world HTTPS code from 4,000 millennia to seconds: "The project that I worked on in my PhD was verifying the code that runs HTTPS in browsers like Chrome and Firefox." "You plot this beautiful graph that is an exponential in the number of bits in the prime, where you're like, it takes a couple seconds on my tiny toy examples, and on real-world examples, it would take over 4,000 millennia." "The thing that it's actually checking is that you wrote the same thing in two different ways. This should be very fast. It's doing the operations in the wrong order." "So you tweak one line, and then it drops down to a couple seconds." @theoremlabs

Theorem co-founders @rajashree + @diagram_chaser explain why verified AI sandboxes are still months away despite the latest breakthroughs in automated theorem proving: Rajashree Agrawal: "The models just got good enough to prove these theorem statements, or they're still getting there. One of the costs is just tokens." Jason Gross: "Taking the recent Navier-Stokes news as a baseline, the models wrote something like 600,000 lines of Lean in about 17 hours. This works out to between one kilobyte and 30 kilobytes verified per hour." "The smallest version of Linux with a sandbox that we can make is about five megabytes. So that's still a handful of months away, even at the rate of the Navier-Stokes auto-formalization." "We need to build a pipeline from verifying the software back into RL-ing the models, so that if you want to verify all production software that exists in the world, it costs you less than $10 trillion." @theoremlabs

Sales tax is the unsexiest problem in ecommerce. It is also one of the ones that bites hardest as you scale. We've had clients come to us not collecting sales tax in states where they've had nexus, with millions of dollars in liabilities. Forget ambulance-chaser lawyers for ADA compliance and the California Invasion of Privacy Act; the last thing you want is State tax collectors breathing down your neck... they don't just go away. We've outsourced this problem for our clients to Numeral, who just raised a $100M Series C. The moment a brand starts growing, it owes compliance in every state where it crosses nexus. Registrations, filings, remittance, exemption certificates, plus physical mail from dozens of departments of revenue. Miss one filing and you eat penalties and interest. No founder or finance team should spend time on that in ecommerce. Numeral is the done-for-you solution. Registrations, filings, mail handling, product classification, handled end-to-end. Congrats to the entire Numeral team! Not having to think about sales tax ever again is a blessing for any e-commerce brand, and this latest round underscores that.

Theorem co-founders @rajashree + @diagram_chaser explain why formal verification could break cybersecurity’s endless whack-a-mole and stop reward hacking during AI training: Rajashree Agrawal: "Formal verification is asymmetric security. Currently you have this whack-a-mole problem. As the attackers get better, the defenders have to catch up. You keep doing this forever." "Once you prove this particular property holds of your program, you don't need to check that again. This feels like the asymmetric approach that you need if you're going to avoid this cyber apocalypse." "If you wanna move beyond one-off interactions, build a very complex world, lots of automations, you're going to have structured things coming out of models which looks like software. Being able to reason about software seems like a good hammer to have." Jason Gross: "If you can verify the RL environments and the graders that you're running, then the models won't have any reward hacks during training, and so you can potentially train them to not be as reward hacky in general." @theoremlabs

Theorem co-founders @rajashree + @diagram_chaser on how you actually prove an AI agent can’t escape its sandbox, and what happens when the proof exposes a way out: Jason Gross: "Anything that the agent does inside the sandbox will not result in some canary file outside the sandbox getting changed." Rajashree Agrawal: "We intend to have one by the end of the year. We've got a verified sandbox now, and the goal is to keep adding features in collaboration with the AI labs." Jason Gross: "If the AI can guess the secret root key of the package server, then it can do anything. Either I try to prove that the AI is not going to be able to guess that, or I design the system so that the channel just doesn't allow it to authenticate that way." "You also want to prove that on most inputs there's no change in behavior. Because otherwise it could make it inescapable by saying, well, sandbox just shuts down as soon as it starts." @theoremlabs

[Preview: Bennington's L2D+ skin - Sunshine Chaser] Hey there, Commander! The breeze is just right, the music is pumping, and the mood is perfect! Come join me in the glorious sunshine! *Content is in development and may not reflect the final version. #AzurLane# #Yostar# #AzurLane8thAnniv#

PANIQ — Premature Adoption of Novel, Insufficiently-vetted Quantum-safe cryptography (A new acronym for the crypto industry.) Daily "quantum chain" narrative chaser list (this is not where your R&D $ should be going guys):

Default Grok Bots - Night Shift - Works overnight and preps your morning digest - Inbox Triage - Sorts your email and drafts replies in your voice - Chief of Staff - Manages your other Bots and pulls you in for decisions - Negotiator - Researches fair pricing and haggles in your voice - Prototyper - Turns your ideas into working prototypes - Researcher - Digs into any question across your tools and the web - Shopper - Gathers quotes and options into a clear comparison - Apartment Scout - Shortlists listings the moment they drop and books tours - Lookout - Watches any site and alerts you to changes - Competitor Watcher - Tracks competitor pricing and launches, and briefs you weekly --- - CRM Scribe - Turns your calls into {tool} updates and follow-ups - Salesforce, HubSpot, Outreach, Salesloft, Apollo - Pipeline Scout - Researches target accounts in {tool} and builds your attack plan - Salesforce, HubSpot, Apollo, Clay, ZoomInfo, LinkedIn, Outreach, Salesloft - First Responder - Answers new leads in minutes and books the meeting in {tool} - Calendly, HubSpot, Salesforce, Intercom, Outreach, Salesloft, Apollo - Win-Loss Analyst - Reads every lost deal in {tool} and reports why you’re really losing - Salesforce, HubSpot, Outreach, Salesloft, Apollo - Icebreaker - Watches {tool} for launches and hires worth a warm intro - LinkedIn, Clay, ZoomInfo, Apollo, Salesforce, HubSpot - Call Coach - Rewatches your {tool} calls and gives specific coaching - Zoom, Nooks, Loom, Outreach, Salesloft - Deck Designer - Turns your notes into an on-brand {tool} deck - Canva, Figma, Workspace, Microsoft 365 - Channel Digest - Summarizes your {tool} channels and flags what needs you - Slack, Microsoft 365 - Ticket Triager - Triages everything new in {tool} and drafts the first reply - Zendesk, Intercom, Jira, Trello, Monday, ClickUp - Feedback Miner - Clusters your {tool} feedback into clear themes - Zendesk, Intercom, Shopify, Notion - Review Responder - Drafts on-brand replies to reviews and messages in {tool} - Shopify, Zendesk, Intercom - Marketing Analyst - Reports on {tool} campaign performance and where to spend next - HubSpot, Mailchimp, Amplitude, Mixpanel, Shopify - Shopkeeper - Watches orders and payouts in {tool} and flags anything odd - Shopify, Stripe - Invoice Chaser - Tracks unpaid {tool} invoices and drafts the reminders - QuickBooks, NetSuite, Stripe, Ramp - Expense Auditor - Files receipts in {tool} daily and categorizes every charge - QuickBooks, NetSuite, Ramp, Rippling, Workday - Subscription Sleuth - Finds subscriptions you no longer use across your {tool} spend - QuickBooks, NetSuite, Ramp, Stripe - Paralegal - Reviews contracts in {tool} and drafts redlines for approval - DocuSign, Box, Dropbox - Application Screener - Screens new {tool} applications and surfaces the top candidates - Ashby, Greenhouse, Workday, Rippling, LinkedIn - Sourcing Scout - Delivers qualified profiles matched to the roles open in {tool} - Ashby, Greenhouse, Workday, Rippling, LinkedIn - QA Engineer - Clicks through every new {tool} deploy and reports what breaks - Vercel, GitHub - Dashboard Watcher - Watches your {tool} metrics and alerts you on anomalies - Tableau, Hex, Amplitude, Mixpanel, Snowflake, Databricks, Stripe, Shopify - Data Scientist - Answers data questions with real {tool} queries and charts - Tableau, Hex, Amplitude, Mixpanel, Snowflake, Databricks

HURRICANE ISAIAS, SATURDAY OCTOBER 10, 12:00 AM ET PATH • No new advisory. NHC advisory #14# (11pm ET) stands: 90 mph, 982 mb, moving north at 20 mph inland over the western Florida Panhandle. 30.8N 86.5W • Landfall came around 9:30pm ET near Destin at 105 mph, a Category 2, weakening to 90 mph by 11pm. • Google's WeatherNext ensemble: median coast-crossing 86.4W Friday 10pm ET, 55 of 63 members, range 86.0W to 87.0W. Median peak intensity trending down near 50 mph. In agreement with NHC: weakening north into the AL/TN Valley, post-tropical by Saturday. OFFSHORE • No new BSEE numbers (daily; next update ~2pm Saturday). Friday's report: 71.51% of Gulf oil shut in (1,458,814 bpd) and 58.84% of gas. 129 of 371 platforms evacuated, 8 of 11 non-DP rigs evacuated. Chevron shut in five of nine operated facilities. REFINERIES • NEW: Friday evening analyst takes (CNN, OPIS). Lipow "less concerned" than earlier; Gulf Oil's Tom Kloza expects Pascagoula and Vertex to avoid catastrophic damage, flags utility power loss as the biggest threat. • No shutdown or power-loss announcements as of midnight. Chevron Pascagoula (356-375k bpd) still operating Friday per spokesperson. No word on Vertex Saraland (88k) or Hunt Tuscaloosa (50k). TERMINALS/PORTS • No change. Port of Mobile still at ZULU, all closures in effect. • NEW: FPL crews sheltered in for the night (per the Pensacola mayor), so no overnight power restoration in Escambia County. DAMAGE • NEW: outages climbed past 560,000 across southern Alabama and the western Florida Panhandle within an hour of landfall (USA Today, 11:08pm ET; up from 420k at 9pm). Escambia FL 70% dark, Liberty FL 97%, Conecuh County AL 94%. • NEW: NWS Mobile retweeted late-night damage reports, Fort Walton Beach photos, Pace FL tree damage, chaser video of significant damage between Navarre and Gulf Breeze (all tip-grade, unconfirmed). • NWS Tallahassee: still no tornado warnings for Leon County; a ~1am ET rain band could spin up tornadoes. Tornado Watch to 6am, Flood Watch to 8pm Saturday. • No confirmed tornado touchdowns and no confirmed fatalities in any source checked. MARKET READ • Futures closed until Sunday 6pm ET. Friday settlements: WTI $91.85 (+0.4%), Brent $104.72 (+0.4%), ULSD $4.73/gal (-4.61%). • The one-sided risk stays refinery power loss: ~500k bpd of capacity in the path with regional utilization near 95% and almost no slack. Analysts now lean against catastrophic damage, so the watch is on utility power, not physical damage. Next catalysts: 2am ET advisory, weekend platform and refinery inspections, BSEE update Saturday 2pm.