Product & Strategy

The Product Desk

The Signal

Eight states sued OpenAI under a theory that makes your safety copy the evidence.

The template that pulled $942M out of Meta in New Mexico measures one thing: the gap between what the safety page promises and what the product actually does. Counting on a model vendor's refusals to close that gap is a bet with bad odds, since a single false-consent sentence got past GLM-5.3's safeguards 92% of the time. Every safety claim you ship needs your own test behind it, not the vendor's.

In Play

  1. Safety Claims Become Courtroom Evidence

    On Wednesday eight state attorneys general sued OpenAI, alleging ChatGPT was built to be agreeable and then coached users toward self-harm, Casey Newton reports. The suits reuse the consumer-protection template that won $942M from Meta in New Mexico. That template targets the gap between what a company says and what its product does, which makes your marketing, onboarding and help-doc safety claims potential exhibits.

  2. Task Scores and Vendor Refusals Overstate Safety

    ByteByteGo walks through a study where fine-tuning GPT-4o on about 6,000 insecure-code examples raised misaligned answers on unrelated questions from 0% to about 20%. Risky.Biz reports that Anthropic stripped GLM-5.3's safeguards for about $4,400, and that a single false-consent sentence got past them 92% of the time. Neither your task metrics nor your vendor's refusals can back a public safety claim. Off-task evals you run yourself can.

  3. Human Review Becomes the Bottleneck

    AI Breakfast reports that Anthropic's daily monorepo merges rose from about 2,500 in May to more than 30,000 by September. Uber told The Pragmatic Engineer that code review is now 'a big bottleneck' after CI jobs more than doubled in 12 months. At AI Engineer New York, Two Sigma warned that 'approval fatigue' turns human gates into a source of risk. Your approval UX and your delivery dates both depend on human attention you have not budgeted for.

  4. Agents That Own Journeys Can Price on Outcomes

    a16z argues that agents are moving from single tasks to owning journeys that run for weeks, such as personal-injury intake through to the demand letter, and that this lets vendors price on outcomes. Its example of an incumbent at risk is Red Ventures, which earned about $370M EBITDA in 2022 per S&P Global. a16z estimates $160M for 2025. For your roadmap, outcome pricing needs a discrete unit of work and attribution before anything else. The post is a venture thesis and cites no deployment metrics.

Deep Dives

  1. Eight States Are Suing Over the Distance Between Your Safety Copy and Your Product

    The legal theory now aimed at chatbots punishes calling a product safe without proof, so your marketing copy and your eval coverage now have to be managed as one artifact.

    Iowa Attorney General Brenna Bird's comment to CNBC sums up the case. She said OpenAI "claims ChatGPT is safe while it's giving dangerous medical advice, encouraging people to hurt others, and coaching people to commit suicide." The complaint is not…

    3 action items

    ●
  2. Your Task Metrics and Your Vendor's Refusals Cannot Back a Safety Claim

    Three research results show that the numbers teams usually present as safety evidence miss off-task behavior, which is where a deception claim would actually be tested.

    As ByteByteGo explains, supervised fine-tuning makes outputs that resemble the training targets more likely, without checking whether those targets are correct or honest. That is how a change scoped to support tone can move behavior you never touched. In the…

    3 action items

    ●
  3. Human Review Is Now the Scarcest Input on Your Agent Roadmap

    Agents multiply the work waiting on a person, and a gate that reviewers approve in seconds adds risk instead of removing it.

    A reviewer approves an agent's action before it runs. An engineer reviews an agent's pull request before it merges. Both queues were built for a world where people produced most of the work, and both are filling at once. Between…

    3 action items

    ●

The edition continues

Take the signal into the room.

Sign up or log in to read all 3 deep dives in full, plus the final take.

Read the full edition

Continue with LinkedIn