Apple v. OpenAI, a $5 Million Frontier Model, and the Spy in Your Repo

Slater the Traitor

In 1789, Britain had the frontier model: Arkwright's water-powered spinning mill. Parliament banned exporting the machines and barred the mechanics who understood them from leaving the country. A 21-year-old mill supervisor named Samuel Slater memorized the designs, told the dockside inspectors he was a farm laborer, and sailed for New York. Four years later the first American factory was spinning in Pawtucket. Britain called him Slater the Traitor. Our textbooks call him the father of American industry.

Keep him in mind while you read Friday's filing. Apple is suing OpenAI over the 400+ former Apple employees now building its device, complete with candidates coached to bring "actual parts" to interviews and a proprietary metal finishing technique that made the trip. But notice the name that isn't in the complaint: Jony Ive. He's been gone since 2019 and doesn't need to leak a thing. He needs to ship the appliance that makes you stop reaching for an iPhone. Be honest about what that phone still does for you. Not the calls. It's iMessage, the blue-bubble Bloomberg terminal American life actually runs on, and, more every quarter, the AI. Play the deletion game on your own home screen: Facebook, TikTok, Instagram, Claude. Claude goes last. Apple ships the glass and none of the intelligence, and a jury can't fix that. The lawsuit isn't recovering secrets. It's buying time, with discovery parked on OpenAI's IPO ramp.

Same week, two more doors in the same wall. Anthropic told the Senate that Alibaba employees allegedly farmed 28.8 million Claude outputs through ~25,000 fake accounts. Do the math: roughly $5 million a month, at retail, to compress an 18-month frontier gap to 6-9. And a researcher with a packet sniffer caught xAI's Grok Build CLI uploading entire git repos, credentials included, to a bucket named grok-code-session-traces, on a tool sold as local-first. xAI fixed it silently and posted that it cares deeply about your privacy.

People, APIs, tooling. And Satya Nadella spent the weekend naming the fourth door: "intelligence exhaust," the judgment you leak to your vendor with every real prompt. He's right, and he's talking his book. Microsoft owns the largest stake in the lab that just collected the lawsuit, the safety exodus, and the IPO cloud. That stake is magnificent and it's yesterday's news; it exists. The future value and the liquidity don't exist yet, and Friday's suit is sitting on the exit.

Britain's export controls didn't survive one man's memory. Yours won't either. For an LLM to be useful you have to feed it real judgment, and judgment is the last advantage you have. The firms that price their judgment survive this era. The ones that give it away at retail become somebody's training run.

At COAI today: the full Signal/Noise (the Atomic Blonde frame — Spyglass, the List, and the wall that fell anyway — plus the wire in your toolchain and the packet-capture your security team should run this quarter) is live at getcoai.com.

Outsider Labs Advisory →

$5 million a month. That's the retail price of a frontier model. Anthropic alleges 28.8 million Claude outputs were farmed through ~25,000 fraudulent accounts this spring; at $200 a month, that's about $5 million, monthly, no CapEx, versus the billion-plus a frontier training run costs. Every output a model sells is compressed human judgment, and somebody may have bought most of a frontier lab's edge at the subscription window. The rat isn't in the vault. The rat is the product.

Segment what you feed frontier models, today. Pull the list of workflows touching a hosted model and mark which inputs would hurt if they came back out as somebody else's product. Anthropic's own numbers say 28.8 million outputs walked out the front door at retail. Decide on purpose which judgment channels stay open, instead of by default.

Have your security team packet-capture your three most-used AI tools. One researcher found Grok Build sending 192 KB of model traffic and 5.1 GB of repo uploads, credentials included, behind an opt-out that governed nothing. The test takes an afternoon with mitmproxy. If the traces don't match the terms, you just learned more than any vendor questionnaire will ever tell you.

Merge your retention plan and your IP plan into one document. Apple's complaint counts 400 departed employees and a February warning letter that sat unanswered for five months. Run the inventory on your three most critical people: what walks out with them, and who's hiring in your specialty. If the answer scares you, act on Apple's real lesson: months, not quarters.

Tuesday, July 14

— Harry and Anthony

Sources: