AI Weekly Malaysia

Meta released Muse Glimmer, a 30B parameter open-weights model under a clean Apache 2.0 license, optimized for agentic task completion, tool use, and multi-step reasoning. Simon Willison tested it locally via LM Studio (18.16 GB quantized), ran it as a coding agent against a Datasette checkout, and confirmed it works as a vision model for image description.

Why: If you want a locally-runnable model for agentic coding and tool-use workflows, Muse Glimmer's Apache 2.0 license removes the Llama licensing friction for commercial use, and its 30B size means it fits on machines with 32GB+ RAM alongside other applications. Test it with your own coding-agent scaffolding before committing—Willison needed a patch for LLM 0.32 compatibility, so expect integration rough edges.

OpenAI has paused some internal activities involving its upcoming model Astra after evaluations showed significant advancements in agentic coding and cybersecurity, with performance strong enough that the company cannot rule out 'Critical' cyber capabilities under its Preparedness Framework — meaning the model may be able to autonomously discover zero-day exploits or orchestrate end-to-end cyberattacks from a high-level goal. OpenAI is implementing isolated testing environments, restricted network and tool access, model weight encryption, universal monitoring of Chain of Thought for risky actions, and sandboxed execution, and will share security controls with third-party testing partners and government agencies.

Why: If you are building agentic AI systems, the security control patterns OpenAI is now mandating internally — sandboxed execution, restricted tool/network access, monitoring of Chain of Thought to interrupt high-risk actions — are a concrete checklist to apply to your own agent deployments before models with these capability levels reach general availability. The fact that OpenAI itself cannot rule out 'Critical' capability means anyone shipping agentic coding or security-adjacent tools should plan for models that can find and exploit vulnerabilities autonomously.