The Inference Report

April 4, 2026

The industry is splintering into two incompatible futures while the public face remains unified. On one side, companies are hardening infrastructure around proprietary systems, local execution, and political control. OpenAI is reorganizing leadership and acquiring media properties while Anthropic buys biotech startups, launches political action committees, and quietly ships code with known vulnerabilities to npm before attempting to DMCA 8,100 repositories. On the other side, the security perimeter is collapsing faster than it can be rebuilt. Claude Code operates with 90 percent autonomy when weaponized by state actors. Meta's AI agents trigger severity-one incidents. The Europa.eu platform lost 350 gigabytes through a supply chain attack on an open-source vulnerability scanner. HackerOne paused Internet Bug Bounty payouts after acknowledging it cannot handle open-source security anymore. The more autonomous these systems become, the less the existing security model holds.

The capital intensity required to scale inference is meeting hard physical limits. Trump's AI data center buildout is delayed across nearly 50 percent of projects because China controls key power infrastructure. Meta, Microsoft, and Google are betting billions on natural gas plants while communities prefer Amazon warehouses in their backyards. Google just added Flex Inference and Priority Inference tiers to Gemini because inference costs, not training costs, are now the binding constraint. Anthropic's 400 million dollar acquisition of Coefficient Bio and its new PAC suggest preparation for a longer game than quarterly model releases. OpenAI's move to acquire TBPN and create a special projects role signals internal focus shifting away from product velocity toward structural positioning.

Measurement and enforcement are becoming table stakes for enterprise adoption. Google is publishing work on behavioral alignment measurement while AWS ships centralized governance tooling across customer accounts. Only one is currently collecting revenue. In research, two complementary trajectories are emerging: one treats LLMs as semantic reasoners augmented with domain-specific constraints for detecting vulnerabilities, the other interrogates whether LLM outputs remain robust under variation through rigorous benchmarking. Both converge on controlled experimental design, yet the gap between laboratory conditions and real-world deployment remains substantial. Claude Opus 4.6 holds 65.3 percent on SWE-rebench, up 12.3 points, while Artificial Analysis shows minimal top-tier movement at 57.2 percent. The divergence reflects a fundamental problem: different benchmarks measure different distributions, making cross-methodology comparison unreliable.

Developer tooling is consolidating around infrastructure rather than capability. Conversational interfaces like Onyx and Prompts.Chat treat model switching and prompt management as friction to eliminate. Deeper architectural work is happening elsewhere: Microsoft's Presidio for PII redaction, Google's TimesFM for time-series forecasting, Genkit for application runtimes that use LLMs as components. The pattern across trending and discovery repositories is clear. The next wave isn't better chat. It's systems that manage state, route data, keep private data private, and learn from interaction. Agents and reinforcement learning are merging in the developer discovery set. The infrastructure bet is real. The security model is not.

Grant Calloway

AI LabsAll labs
From the WireAll feeds
Research Papers — FocusedAll papers
Skip the Compressor: Coding Agents Fix More Issues When They Pick Whole Files cs.SE

A coding agent works on repositories that can be far larger than its context window can hold. Prompt compressors and retrievers offer solutions to this problem, but patching an issue needs two things at once: the files that must change, and their code exactly as written, since the model must reproduce the lines it edits. Retrievers rank code by its similarity to the issue rather than by whether it must change, and compressors delete text to fit the budget. We show that at an equal token budget, an agent resolves more issues when the budget goes to choosing which files to show verbatim, as our simple selector CQ2-CARE does, than when it goes to pruning tokens or retrieving chunks. We fit every context to the same per-issue budget on 300 recent SWE-rebench issues and grade each patch with the benchmark's tests. With GPT-5.6 and Claude Opus 5, CQ2-CARE resolves 43.7% and 46.7% of the issues, 6.3 points more than the best of three compressors with either model, and 9.3 and 12.7 points more than the best of three retrievers. CQ2-CARE even resolves more issues than two methods trained for issue resolution, SweRank (by 0.7 and 1.7 points) and SWE-Pruner (by 2.0 and 7.3). Our analysis shows the defects of the baseline methods: retrievers often miss the files to edit, and compressors keep them but alter their text, so fewer patches apply. Exact-file selection needs no compression model and shows every line as the repository has it, so the model can quote the code it edits.

Plausible Is Not Enough: Trust and Evidence in AI-Authored Pull Request Review cs.SE

Code review is where AI-authored pull requests (AIPRs) must earn reviewer trust before integration, yet it is unclear whether reviewers apply the same criteria used for human-authored pull requests (HPRs). We surveyed 239 practitioners from 31 countries using matched HPR and AIPR questions to compare trust, evidence requirements, and verification practices within respondents. Most respondents (64.9%) reported lower initial trust in AIPRs. They relied less on author track record and subsystem familiarity, emphasizing instead human prompter expertise and bounded change size. For approval, respondents more often considered their own reasoning through critical cases sufficient for AIPRs than HPRs (55.2% versus 28.5%), while relying less on test coverage. Overall, 61.1% reported higher evidence requirements for AIPRs, and the share who would block approval under residual uncertainty increased from 19.4% for HPRs to 43.9% for AIPRs. Respondents prioritized test inspection, project context, and local execution, and more often selected partial reimplementation to verify non-trivial logic. Unclear ownership was also more likely to pause AIPR review (29.3% versus 14.6%). Open-ended responses pointed to the difficulty of validating plausible code without reliable context and human accountability. These findings frame AIPR review as an evidence-ownership problem, not merely a correctness check. Reviewers need to connect generated changes to validated behavior and responsible maintainers. Review tools and agentic workflows should expose provenance, distinguish generated claims from human-validated evidence, and make uncertainty visible before approval.

Beyond Confidence: Rethinking Uncertainty Calibration in Deep Code Models cs.SE

Deep learning models have shown significant promise in code-related tasks. While confidence calibration techniques have been proposed to improve model reliability, their effectiveness in real-world tasks with strict accuracy requirements remains uncertain. In this paper, we investigate two key questions: first, whether existing measurement metrics, including confidence scores and uncertainty metrics, are effective for guiding selective prediction; and second, whether existing calibration techniques can improve these metrics to better identify cases where model predictions are likely to succeed or fail. We conduct a systematic study on defect prediction and vulnerability detection using seven code models, evaluating thirteen uncertainty signals and three widely used post-hoc calibration methods. Our analysis reveals three major findings: (1) even strong uncertainty signals can remain poorly calibrated and provide limited separation at the high-confidence end, constraining selective prediction in practice; (2) standard post-hoc calibrators often improve calibration scores but do not consistently translate into better selective prediction behavior; and (3) commonly used calibration metrics can disagree with selective prediction performance, underscoring the need to evaluate both jointly. Moreover, our findings motivate a decision-oriented view of reliability in deep code models, where calibrated scores must be evaluated together with selective-prediction quality and retained-region risk before they can support accept--defer deployment.

When CONTRIBUTING Files Fall Short: Revising OSS Contribution Guidelines with Repository Evidence cs.SE

Contribution guidelines help newcomers participate in open-source software projects, yet often contain incomplete or outdated information. Existing studies characterize newcomers' information needs and documentation gaps, but revising these guidelines requires recovering and validating project-specific knowledge from scattered sources. We present ContribAlign, a framework for automatically revising CONTRIBUTING files through category-guided evidence integration. A qualitative analysis yields a taxonomy of 30 fine-grained guidance types across six contribution categories. ContribAlign uses a classifier to diagnose coverage of the six categories in the original guidance, then uses the taxonomy to collect and organize project-specific evidence. It filters detected conflicts and uses a large language model to generate category-level revisions. The classifier achieves a weighted F1 score of 0.764, improving on the existing classifier by 0.156, while the verifier detects factual conflicts with 97.3% precision and 91.5% estimated recall. Human evaluation shows that ContribAlign achieves the highest overall quality among the original guidelines and three baselines, with significant improvements in usefulness, beginner-friendliness, and completeness. These results suggest that ContribAlign can help maintain more accurate and useful contribution guidelines.

SWE-at-Scale: Scalable Issue Synthesis from Historical Bug Fixes cs.SE

As coding agents become increasingly capable, robust evaluation requires a broader and more diverse supply of verifiable software engineering (SWE) tasks. However, real-world tasks are constrained by the natural frequency of issue reporting and the substantial cost of manual curation. Furthermore, existing synthetic approaches rely primarily on the pretrained knowledge of large models coupled with heuristic prompting, often failing to capture the authentic, complex mechanics of software failures. To exponentially scale SWE task production, we introduce SWE-at-Scale, a framework that automatically synthesizes realistic issues by reverse-engineering real-world software fixes. Our key insight is that historical fixes encapsulate deep mechanistic knowledge of bug formation: inverting a fix transforms repair supervision into bug-induction supervision grounded in actual development scenarios. SWE-at-Scale transfers these learned bug patterns to novel code contexts, repeatedly sampling diverse bug typologies to construct executable SWE tasks. Extensive experiments show that SWE-at-Scale generates more diverse and realistic SWE tasks than current synthesis baselines while posing greater challenges to state-of-the-art coding agents. Notably, SWE-at-Scale can generate distinct bug types from a single code context, with bug diversity scaling robustly even up to 200 generations per file. Overall, SWE-at-Scale turns finite real-world fixes into reusable supervision for scalable synthesis of realistic, diverse, and challenging SWE tasks.

Agentic Dependency Transformations: Lessons from an Exploratory Case Study of Flask cs.SE

Modern software relies heavily on third-party libraries, requiring maintainers to balance the benefits of reuse against dependency-related maintenance and risk. We define dependency transformation as an emerging approach in which an AI coding agent alters how a repository handles external dependencies. Local reimplementation is one transformation strategy that recreates required functionality as local code; dependency transformation is broader and may include other strategies. In this emerging-results paper, we report an exploratory case study of Flask to explore dependency transformation strategies. We design experiments that show how available context shapes an agent's dependency discovery and iterative transformation of dependencies. The case yields five preliminary lessons. These lessons and the five-part research agenda position dependency transformation as an emerging research direction and motivate explicit transformation contracts, provenance constraints, preservation requirements, and independent validation criteria.

BenchmarksFull tables
Artificial AnalysisIntelligence Index

Composite score across coding, math, and reasoning

#ModelScoretok/s$/1M
1GPT-5.457.276$5.63
2Gemini 3.1 Pro Preview57.2118$4.50
3GPT-5.3 Codex5472$4.81
4Claude Opus 4.65346$10.00
5Claude Sonnet 4.651.752$6.00
SWE-rebench

Agentic coding on real-world software engineering tasks

#ModelScore
1Claude Opus 4.665.3%
2gpt-5.2-2025-12-11-medium64.4%
3GLM-562.8%
4gpt-5.4-2026-03-05-medium62.8%
5Gemini 3.1 Pro Preview62.3%