In one minute
- Google DeepMind proves security properties of libsignal’s compiled code. Lean checks the proofs produced by the agents. [1][2]
- Brussels proposes persistent deepfake labels and pre-election algorithm tests. The consultation closes on 23 November. [5]
- France’s AI council recommends assessing assistants before they are sold. Its 18 proposals cover excessive flattery and dependency. [6][7]
- OpenAI opens business profiles and commercial agents in ChatGPT. The agents start with eligible US businesses. [8]
- Anthropic proposes offering 825 million shares at $70–78. Investor presentations have begun; the company is not yet listed. [9][10]
Main story
SOFTWARE SECURITY · ANNOUNCEMENT OF 10 NOVEMBER
Google takes the proof from the design to the compiled code
Signal is a messaging app with end-to-end encryption: content is protected so that the people in the conversation can read it. Libsignal is the code library implementing its protocol. Bugs can sit between a sound cryptographic idea and the program that executes it. That is the news: AlphaProof Code reaches the library’s compiled machine code, incorporated into a research executable, without rewriting the library to make verification easier. [1][2]
Formal verification means stating a property with mathematical precision and proving that the program satisfies it. It goes beyond running examples and seeing whether they fail. Researchers decide what to prove; AI agents help write the specifications and construct the proofs. Lean is the language and system that checks them step by step: a proof need not be accepted merely because an AI says it is correct. An additional check ensures that it proves exactly the approved specification. [2]
Four weeks and two deliberately reintroduced bugs
The technical paper describes 6.5 million lines of proofs, produced over four weeks by agents directed by a five-person team. They rest on roughly 26,000 lines of specifications and machine semantics forming part of the trusted base: what still needs to be reviewed and accepted for the proofs to mean what is claimed. [2]
The work covers PQXDH, the initial key exchange with a post-quantum component, and Triple Ratchet, the mechanism that renews keys during a conversation. It proves properties relating to authentication and confidentiality, protection of earlier messages and recovery of security after keys are compromised, within the defined model. To check that the specifications distinguished correct code from faulty code, the researchers reintroduced two historical bugs that had already been fixed. The system produced Lean-checked proofs that those versions violated the security property. Signal staff provided feedback on the specifications. [2]
Among the models producing the proofs was Gemini 4 Carbon, whose access Google expanded yesterday and whose context window supports up to one million tokens — units of information — across input and output combined. Its paid programming interface initially costs $2 per million input tokens and $10 per million output tokens; from 1 December, those prices become $4 and $20, respectively. [1][3][4]
Professional confidentiality needs properties that can be checked
This does not prove a legal interpretation. It does point towards proving technical properties of software holding case files: who can gain access or which information remains isolated. That is a possible application of the method, beyond the specific libsignal result. For a law firm, evidence about those properties could become as important as the choice of supplier.
The qualification fits in one sentence: the proof establishes what was specified, under the study’s assumptions; it does not make the entire Signal app invulnerable. The advance is being able to check a specific promise in actual code. [2]
Other news
2. Brussels proposes keeping deepfake labels attached when content is shared
EUROPEAN UNION · CONSULTATION OPENED 10 NOVEMBER
The European Commission is revising its election guidelines under Article 35 of the Digital Services Act, or DSA. They address platforms and search engines designated as very large: services whose scale subjects them to additional duties concerning risks to society. The consultation closes on 23 November. [5][13]
There are five proposed areas: detect and dismantle networks of coordinated inauthentic behaviour; strengthen content recommendation systems; protect against AI-generated content; give candidates dedicated channels for threats, harassment or impersonation; and report after the vote. Specific measures include testing algorithms for manipulation before every national election, recording significant changes during the preceding six months and preserving the label on a deepfake — fabricated audiovisual material that appears real — when it is shared. A mitigation report would follow within 30 days of the election. [5]
These are draft guidelines under consultation that spell out existing duties, not newly adopted obligations. The practical point is sound: a warning that disappears on forwarding stops protecting people just as the content begins to spread.
3. France’s AI council calls for assessments before assistants go on sale
FRANCE · REPORT PRESENTED 10 NOVEMBER
The Conseil de l’IA et du numérique (CIANum), France’s council for artificial intelligence and digital affairs, presents Protéger sans empêcher : nos vulnérabilités à l’ère de l’IA générative — protecting without preventing. The interdisciplinary commission held 55 hearings and makes 18 recommendations. It calls for assessments of consumer generative AI assistants before commercialisation and stronger checks after launch. These are recommendations, not law. [6][7]
Its concerns include excessive flattery: an assistant that agrees to remain likeable can reinforce poor decisions. It also examines designs that make systems seem human and encourage emotional dependency. A product can answer fluently while building a harmful relationship with its user. [6]
The report proposes a “cognition economy”: a market in which how we think, decide and relate to others becomes a source of value and revenue. The question is no longer only whether an answer is true. It is also what incentives shape the conversation and how its influence is assessed before the product is sold.
4. OpenAI lets businesses talk to customers through ChatGPT
COMMERCIAL SERVICES · BETA OF 10 NOVEMBER
Businesses in ChatGPT opens in beta. Through Business Hub, eligible companies can claim and verify their profile, update information and see aggregated statistics on mentions, clicks and discovery topics. OpenAI says those statistics require minimum interaction thresholds and that conversations are not shared with businesses. [8]
Business Agents are assistants speaking on a company’s behalf. OpenAI describes them as labelled conversations separate from ChatGPT’s general responses; sponsored placements are also labelled and can lead to the commercial agent. Users need to recognise when they are speaking to a seller. [8]
For Spanish and Norwegian law firms, the distinction matters: claiming a profile has a wider geographical reach, but agents start with eligible US ecommerce and online-service businesses. The beta therefore does not yet make them available to law firms in Spain or Norway. Business visibility, the assistant’s recommendation and advertising need boundaries that people can understand.
5. Anthropic sets a $70–78 range for its share offering
FINANCING · DOCUMENTS OF 10 NOVEMBER
Anthropic begins investor presentations for its initial public offering and proposes 825 million shares at $70–78: up to $64.35 billion gross, excluding the expansion option. The company is selling about 801.35 million shares and existing shareholders 23.65 million. The prospectus also provides for a $26 billion private placement conditional on completion and an application for the symbol ANT on Nasdaq. [9][10]
The planned structure separates capital and control: the founders hold 50.1% of the general voting power, while the Long-Term Benefit Trust, a body intended to safeguard long-term public benefit, appoints a board majority. The new information is the price range and offering size; the company is not yet listed. [10]
Spain and Norway
Spain adopts an equality plan including audits for AI bias. On 10 November, the Cabinet approved the fourth strategic plan for effective equality between women and men, with more than 750 measures through 2029. It includes audits to detect discriminatory bias and a gender perspective in AI regulation, supervision and assessment; the plan does not itself create a general audit obligation for every business. [11]
Norway opens its consultation on AI in higher education. On 10 November, the Ministry of Education and Research opened the consultation on NOU 2026:14, the official inquiry Kunstig intelligens i høyere utdanning: I kunnskapens tjeneste. The new development is the consultation: anyone can submit comments until 10 February 2027. [12]
In brief
- Obsidian announces a permissions engine for agents. It decides whether an action is allowed, blocked or requires human approval where the integration supports it, according to the supplier. [14] - OpenAI and Upwork identify a signal of partial task substitution. In 43 of 63 categories, they observe a pattern between ChatGPT use and changes in the share of freelance postings; this is an association, not proof of causation. [15]
The signal in the noise
AI makes results cheaper to produce. What matters now is making it cheaper to prove they are correct. A mathematical proof, a persistent label and an assessment before sale answer different questions. Yet they move the debate in the same direction: what evidence supports the promises we are being sold?
Sources
[1] Google DeepMind · AlphaProof Code · 10 November 2026
[3] Google · Gemini 4 Carbon: expanded access and pricing · 10 November 2026
[4] Google DeepMind · Gemini 4 Carbon model card · 10 November 2026
[5] European Commission · Consultation on DSA election guidelines · 10 November 2026
[6] CIANum · Protéger sans empêcher
[7] Élysée · Report presentation · 10 November 2026
[8] OpenAI · Introducing Businesses in ChatGPT · 10 November 2026
[9] Anthropic · Roadshow launch · 10 November 2026
[10] SEC · Anthropic, S-1/A, amendment 2 · 10 November 2026
[11] Spain’s Ministry of Equality · Fourth strategic plan · 10 November 2026
[12] Norwegian Government · Consultation on NOU 2026:14 · 10 November 2026
[13] European Commission · Digital Services Act
[14] Obsidian Security · Runtime Policy Decision Engine · 10 November 2026
[15] OpenAI and Upwork · Work at the Frontier · 10 November 2026