Daily AI Briefing — February 20, 2026

Google's Gemini 3.1 Pro dominates today's news cycle, setting a record 44.4% on Humanity's Last Exam and achieving 77.1% on ARC-AGI-2 with 1 million token context — a major push into agentic AI. Microsoft announced a massive $50 billion investment in AI infrastructure across the Global South, while World Labs and David Silver's venture each closed $1B rounds.

• Agentic AI security emerged as a key theme: Meta and other firms banned OpenClaw over privacy risks, and Anthropic blocked OpenClaw from Claude OAuth tokens while publishing a study on real-world agent autonomy patterns
• DBS Bank piloted AI agents making real consumer payments through Visa Intelligent Commerce, a milestone for autonomous financial transactions
• Code Metal raised $125M for AI-powered defense software modernization

On the policy and safety front, Macron defended EU AI regulation at the Delhi AI summit amid the Grok child safety scandal, while OpenAI faces its 11th mental health lawsuit from a student allegedly pushed into psychosis by ChatGPT. Zyphra released ZUNA, an open-source 380M-parameter BCI foundation model for EEG data — a novel contribution to brain-computer interface research.

Today's research is headlined by a striking privacy result and several paradigm-challenging contributions to language modeling, safety, and interpretability.

• Large-scale deanonymization with LLMs (Carlini, Tramèr) shows LLMs can re-identify anonymous users on Hacker News and in Anthropic interviews—a major real-world privacy threat
• Flow-based Language Models (FLM) challenge autoregressive dominance by performing Euclidean denoising over one-hot encodings, outperforming discrete diffusion
• Escaping the Cognitive Well achieves IMO-level math performance at orders-of-magnitude lower inference cost using off-the-shelf models
• Meta's Xray-Visual trains a unified vision model on 25B+ image-text and video-hashtag pairs from Facebook/Instagram at unprecedented scale

In safety and alignment, fail-closed alignment identifies that current LLM safety is structurally fragile—removing a single refusal feature collapses alignment entirely. DeepMind applies AlphaEvolve to automatically discover novel multiagent learning algorithms. A systematic study of 60 LLM benchmarks characterizes saturation dynamics and what drives benchmark obsolescence.

• Bloom filter attention heads reveal that certain transformer heads act as membership testers following classical data-structure theory
• Formal mechanistic interpretability brings provable verification guarantees to automated circuit discovery in neural networks
• Sign lock-in discovers that trained weight signs are largely inherited from random initialization, creating a surprising bottleneck for sub-bit compression

The day was dominated by Google's launch of Gemini 3.1 Pro, announced across multiple executives including Demis Hassabis, Jeff Dean, and Noam Shazeer. The model scored 77.1% on ARC-AGI-2 — more than doubling Gemini 3 Pro — with Perplexity CEO Arav Srinivas confirming it as second most-picked engine behind Claude 4.5 on their platform.

• Andrej Karpathy laid out a compelling vision of ephemeral, AI-generated bespoke software replacing traditional app stores, drawing 905K views
• François Chollet offered a conceptual breakthrough framing agentic coding as analogous to machine learning — specs as loss functions, agents as optimizers, codebases as opaque models
• Jeremy Howard flagged a serious security vulnerability: LLMs calling tools outside their allowed list, affecting all major US providers except OpenAI
• Jerry Liu shared LlamaIndex's internal memo revealing coding agents have reduced implementation costs to near-zero, reshaping engineering team structures
• A biosecurity RCT study surprised forecasters by showing mid-2025 LLMs provided no meaningful uplift for novices attempting wet lab tasks, a significant AI safety finding

Meanwhile, strong negative sentiment swirled around Anthropic, with Scobleizer's blunt "Anthropic really fumbled" post hitting nearly 1M views — likely tied to Claude Sonnet 4.6 backlash.