A Sovereign Kolibri, Decision-Model Fever, and GLM-5.3’s Cyber Debut

Aleph Alpha’s sovereign 78B Kolibri lands with 1M context as decision models go mainstream — Cloudflare’s Clef, native llama.cpp support, and an evidence audit; Anthropic’s Frontier Red Team calls GLM-5.3 the most cyber-capable open-weight model yet; and the 5G core gets XDP admission control, dynamic UPF recovery, and agentic AI-RAN governance.
Author

Sarathy 🪆

Published

October 3, 2026

Networks · 5G & 6G
Samsung

Samsung, SK Telecom, and Hana build Korea's first private 5G smart office

4.7 GHz private spectrumSA core slicingfinancial-sector campus

Samsung, SK Telecom, and Hana Financial Group have deployed Korea's first private 5G smart office in the financial sector, built on Samsung's 5G Standalone (SA) core. The network uses the mid-band 4.7 GHz spectrum dedicated to private 5G in Korea and enables network slicing to partition traffic for different enterprise services.

The deployment is a reference case for how a 5G SA core with slicing is applied to a single office campus rather than a wide-area operator network: one physical network, multiple logical slices for distinct business functions.

arXiv

Line-rate GTP-U admission control at the edge of a cloud-native 5G core

XDP/eBPF admission controlKubernetes-hosted UPFline-rate filtering

This paper presents an XDP-based design for line-rate GTP-U admission control at the edge of a Kubernetes-hosted cloud-native 5G core. The User Plane Function (UPF) data path is the performance bottleneck of virtualized cores, and the authors move admission control to the network interface layer with eXpress Data Path (XDP) so that packets are accepted or dropped before entering the host network stack.

The design targets the edge sites where a core function must run on commodity servers, showing how eBPF/XDP can protect a virtualized UPF from overload while preserving line-rate forwarding.

arXiv

Dynamic UPF fault recovery for resilient 5G core networks

OpenAirInterface testbedapplication-layer session restorereduced downtime

This paper proposes a dynamic User Plane Function (UPF) failure detection and recovery mechanism for 5G core networks, implemented on an OpenAirInterface-based core. An application-layer session restoration mechanism re-establishes user-plane sessions after a UPF failure so latency-sensitive services survive the outage.

The experimental results show reduced downtime and service disruption compared with naive failover, addressing a practical gap in 5G core resilience as operators virtualize more of the control and user plane.

arXiv

Control-compute governance in agentic AI-RAN: AI agents as both controllers and workloads

LLM agents in O-RAN controlshared GPU poolcontrol-compute coupling

Agentic AI-RAN places large language model (LLM)-driven agents inside the Open RAN (O-RAN) control hierarchy, with a promising deployment that co-locates LLM inference with physical-layer (PHY) communication processing over the same accelerated compute pool for infrastructure sharing, data locality, and low control latency.

The co-location creates bidirectional control-compute coupling: the agent competes with PHY processing for compute while simultaneously issuing control decisions that steer the network. The paper studies this coupling and proposes governance mechanisms so agents can act as both controllers and workloads without destabilizing the data plane.

arXiv

LOGOS: zero-prior-knowledge incident triage from raw text logs

log-only diagnosisprecedence forestsunsupervised triage

Commercial observability platforms lean on distributed traces, topology maps, and baseline metrics — but operators troubleshooting proprietary software are often left with only raw, unannotated text logs. LOGOS explores the extreme boundary of log-only diagnosis: how much failure propagation can be isolated using strictly raw text logs?

The system exploits entity-event co-occurrence and temporal precedence to collapse millions of log lines into a compact precedence forest, enabling zero-prior-knowledge triage without domain artifacts. It is a practical tool for operators who cannot instrument the stack.

Security
Anthropic

GLM-5.3 and the spread of advanced cyber capabilities

12% vs 14% exploit success64–100% harmful engagement~4-month frontier lag

Anthropic's Frontier Red Team assessed Zhipu AI's open-weight GLM-5.3 and calls it 'the most cyber-capable open-weight model released to date': it autonomously builds end-to-end exploits, succeeding in 50 of 410 ExploitBench trials (12%) versus 14% for Anthropic's gated Claude Mythos Preview — and it engaged with harmful cyber requests 64–100% of the time in simulated tests, where comparable frontier models refuse almost universally.

The report frames the risk as proliferation: unlike gated frontier models, GLM-5.3 ships open weights with minimal safeguards, putting frontier-class exploit development in the hands of anyone. A NIST Center for AI Standards and Innovation (CAISI) assessment published the same week found GLM-5.3 lags the US frontier by about four months on cyber tasks while being dramatically cheaper to run.

arXiv

Containing the autonomous operator: securing AI agents on Kubernetes

data/control boundary collapsedefense-in-depthKubernetes agent reference architecture

LLM agents are moving from chat interfaces into infrastructure operations, where they read telemetry, call tools, generate and execute code, and change the state of production Kubernetes clusters. This collapses a boundary that cloud-native security assumes: the boundary between data and control — content an agent merely reads (a log line, a ticket, a tool description) can redirect what it does.

The paper argues the model must not be treated as a security boundary and proposes a defense-in-depth framework and reference architecture for agent safety on Kubernetes, covering the identity, data, tool, and execution layers.

AI & Models
Aleph Alpha

Kolibri has landed: Aleph Alpha's sovereign open-weight model

78B total / 3.46B active1M contextMerlin-Arthur abstentionApache 2.0

Aleph Alpha released Kolibri, an English-German Mixture-of-Experts (MoE) transformer with 78.1B total and 3.46B active parameters, supporting up to 1M tokens of context, under Apache 2.0 on Hugging Face. It was trained on 768 B200 GPUs over 21 days on 20T pre-training tokens (21.3% German), with mid-training and long-context stages totaling nearly 24T tokens; 40 of 50 layers use a 512-token sliding window to bound decode cost.

Kolibri uses a bilingual tokenizer (UniBPE) that compresses German better than competing models, a Merlin-Arthur grounding protocol that trains the model to abstain rather than hallucinate, and exact quantile balancing for expert routing. On math, coding, grounding, and long-context benchmarks it matches models with up to four times its active parameter count, and it leads the agentic-RAG Honeypot benchmark.

Cloudflare

Clef: Cloudflare's open-source decision models and RL fine-tuning platform

non-autoregressive scoringvision encoderRL fine-tuning platformApache 2.0

Cloudflare released Clef and Clef-flash, two decision models trained in-house and served on Workers AI, fully open-sourced under Apache 2.0. Unlike text-generating large language models, decision models return typed answers with probabilities in a single pass: Clef uses a frozen Qwen backbone and a non-autoregressive scoring head that ranks valid schema choices in parallel, giving a 2.2-second end-to-end domain classification versus 4.7 seconds for a general LLM in Cloudflare's threat-intelligence workflow.

Clef adds a vision encoder and a 64k context window (Jev has 32k, text-only), is Jev-API compatible, and currently leads the Jev Decision Index. Cloudflare also announced a reinforcement learning (RL) fine-tuning service built on AI Gateway, Workers AI, Containers, and a new Trainer primitive, letting customers specialize Clef to their own decision workloads.

llama.cpp

New in llama.cpp: decision models and a /v1/systemone API

/v1/systemone APIclef/nimble/laya supportfully local

llama.cpp added native support for typed decision models in the first days of October: model definitions for clef, nimble, laya, julia-1, lev, and openjev, plus a new /v1/systemone API on the server that returns typed answers with probabilities instead of generating tokens. The commits landed alongside broader inference work, including fused shared-expert kernels on CUDA and probabilistic sampling for speculative decoding.

The practical effect: the decision-model wave — Jev-compatible typed classifiers — now runs fully locally on CPU and consumer GPUs through the same runtime that already serves GGUF models, with no cloud dependency.

Earendil

Pi 1.0: a hardened, minimal agent harness

hundreds of thousands of weekly usersMCP by defaultminimalism

Pi 1.0 is a hardened, minimal agent harness used by hundreds of thousands of people weekly, now shipping with Model Context Protocol (MCP) support included by default. The project's explicit philosophy is minimalism: it waits for agentic tooling ideas to prove themselves before adopting them, weighing true functionality against added complexity.

The release caps months of feedback-driven hardening and positions Pi as a stable, extensible base for teams that want to make an agent harness their own rather than inherit a sprawling platform.

Liao

Agents don't need memory, they need documentation

documentation over memoryre-derive vs storecodebase conventions

A widely-shared essay argues that the fix for agents that forget their project context is not bigger or smarter memory systems but better documentation: when the repository, conventions, and decisions are written down in machine-readable form, an agent can re-derive context on demand instead of carrying it in a fragile long-term store.

The thesis reframes the agent-memory debate — persistent memory as a crutch for undocumented codebases — and suggests documentation is the durable substrate that makes both humans and agents productive.

Hugging Face

World's fastest WebGPU kernels for local AI, open-sourced

200+ WebGPU kernelsfully on-device@huggingface/kernels

The webml community open-sourced a collection of more than 200 WebGPU kernels for local AI on Hugging Face, spanning the common operators needed to run foundation models entirely in the browser on the GPU. The kernels power on-device demos such as Gemma 4 (fully local, weights cached after first load) and 1-bit Bonsai models, plus a @huggingface/kernels library that loads and dispatches them.

The release lowers the barrier to browser-based inference: no install, no server, no data leaving the device — with GPU acceleration through WebGPU's portable compute model.

arXiv

HyperReCo: hypergraph evidence retrieval for LLM multi-hop reasoning

hypergraph evidencen-ary relationsmulti-hop reasoning

Multi-hop question answering needs to retrieve and connect evidence across documents, but flat retrieval loses the relationships between facts. HyperReCo models evidence as a hypergraph — where a hyperedge can connect more than two evidence passages — and retrieves connected evidence for LLM multi-hop reasoning, using a re-ranking stage to score evidence jointly rather than independently.

The hypergraph formulation captures n-ary dependencies that pairwise graph retrieval misses, which is exactly the structure multi-hop questions impose on their evidence.

arXiv

XOR-Trellis: ultra-low-complexity dequantization for LLM quantization

XOR-based dequantizationno Hadamard transformsmemory-bound inference

Quantized large language models trade memory footprint for compute during dequantization — the step that converts stored low-bit weights back to working precision, which can dominate inference cost on memory-bound hardware. XOR-Trellis reduces dequantization to ultra-low-complexity XOR and table operations and removes the Hadamard transforms used by prior trellis-quantization schemes.

The result is a quantization scheme that preserves quality while cutting the dequantization cost that often throttles local inference on CPUs and small GPUs.

Research & World Models
arXiv

Network world models as environments for algorithm design on complex systems

world models as simulatorsiterative algorithm designaction-delayed dynamics

World models simulate an environment and predict how it changes under actions — the tool robotics uses for planning. Complex systems such as networks need the same capability because the effect of an action is not immediate: seeding a campaign or immunizing nodes against an epidemic changes little on its own; what matters is how the system unfolds over the steps that follow.

The paper treats network world models as environments for algorithm design: instead of evaluating candidate algorithms on the real system, designers evaluate them against a learned simulator, making the inherently iterative design loop cheap and safe.

No matching items