# Intelligence Radar — Daily Delta, 1 Oct 2026

**Net assessment:** the absolute broad capability frontier did **not** move: Claude Opus 5.5 remains the strongest model on Artificial Analysis’s current broad composite at 58. But Google is back in the Topnotch tier with **Gemini 4 Argon**, the hardware frontier has now made a real production transition to **Vera Rubin NVL72**, OpenAI disclosed a large-scale attempt to extract protected reasoning for model distillation, and Anthropic published evidence that the economic bottleneck for physical automation is currently much more about **cost than technical task capability**. [Künstliche Analyse](https://artificialanalysis.ai/articles/claude-opus-5-5/?utm_source=chatgpt.com)

### Gemini 4 Argon restores Google to the Topnotch frontier, but does not take the overall lead

Google announced **Gemini 4 Argon on September 30**, initially restricting access to trusted cyber defenders while preparing broader developer and enterprise release. Google reports 77.9% on DeepSWE v1.1, #1 on the Vals Index and AutomationBench, 68% on CWE-bench v1, and a one-million-token output limit. It also reports substantial internal deployments: Argon agents identified memory optimizations expected to free 500 TiB–1 PiB across Google infrastructure and are assisting C/C++→Rust migrations reaching the 800k-line Zircon kernel. These remain substantially vendor-reported results. [blog.google](https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-4-argon/)

Independent Artificial Analysis testing is more conservative: **Argon scores 53**, equal to GPT-6 Astra and below Opus 5.5’s 58. Its introductory $2/M input and $10/M output pricing produced about **$1.99 per Intelligence Index task**. Under Radar’s existing `<10% below Frontier` convention, 53 versus 58 is an 8.6% gap, so Argon clearly joins **Topnotch**, but does not become the broad Frontier. [Künstliche Analyse](https://artificialanalysis.ai/models/gemini-4-argon?utm_source=chatgpt.com)

This also reinforces an evaluation-policy distinction we have been converging on: **vendor-domain SOTA ≠ broad frontier**. Argon may genuinely lead particular software-engineering, cyber and enterprise tasks while remaining behind on a broad composite.

**Radar state:** `Gemini 4 Argon → Topnotch / restricted rollout / strong domain-frontier candidate`; `General Frontier → unchanged: Claude Opus 5.5`.

[Google — Gemini 4 Argon](https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-4-argon/?utm_source=chatgpt.com)  
[Artificial Analysis — Gemini 4 Argon](https://artificialanalysis.ai/models/gemini-4-argon?utm_source=chatgpt.com)

### Vera Rubin crosses from announced/ramping hardware into real customer production

This is the clearest reversal of yesterday’s “no hardware transition” assessment. CoreWeave says **NVIDIA Vera Rubin NVL72 is now in limited production availability**, with Cognition the first customer running production workloads on the system. Cognition measured **4.8× total token throughput per GPU for its SWE-2 inference workload and 3.8× output-token throughput for RL** versus a GB200 NVL72 baseline at matched interactivity. CoreWeave separately reports 10× token throughput per megawatt over GB200 on DeepSeek R1. [CoreWeave](https://investors.coreweave.com/news/news-details/2026/CoreWeave-Delivers-NVIDIA-Vera-Rubin-NVL72-Performance-at-Production-Scale-Starting-With-Cognition/default.aspx)

These are customer/vendor measurements rather than neutral MLPerf-style comparative results, so the exact multipliers should remain provisional. But the important state transition does not depend on accepting every benchmark number:

**`Vera Rubin NVL72: pre-production/ramping → limited production workload availability`.**

For Intelligence Radar, hardware availability should therefore distinguish at least:

`announced → silicon validated → system ramp → cloud preview → production customer workload → broad cloud availability`.

The economic consequence is potentially large because long-running agent workloads amplify throughput improvements across repeated inference/tool loops rather than consuming one isolated completion.

[CoreWeave — Vera Rubin NVL72 in production](https://www.coreweave.com/news/coreweave-delivers-nvidia-vera-rubin-nvl72-performance-at-production-scale-starting-with-cognition?utm_source=chatgpt.com)

### Protected reasoning becomes an explicit capability-security asset

OpenAI disclosed on September 30 that it disrupted a coordinated campaign attempting to extract **protected model reasoning** at scale. Activity began July 1, peaked with about **16,000 requests from more than 4,000 users on July 24–25**, and OpenAI ultimately identified related prompt patterns across more than 15,000 accounts. Attackers manipulated model interactions—including replaying encrypted reasoning across conversations—to cause hidden reasoning to be reproduced visibly. OpenAI says a core cluster was associated with individuals linked to Moonshot AI, while explicitly noting that it cannot establish that every observed operator belonged to one actor. [OpenAI](https://openai.com/index/disrupting-a-coordinated-model-distillation-campaign/)

This materially changes the security model around frontier intelligence. Model theft is not only:

`weights / training data / API credentials`

but also:

`behavioral outputs / hidden reasoning artifacts / distillation-quality trajectories`.

More importantly, OpenAI says related independently reported **cross-model and conversation-compaction attack paths were real**, and warns that extracted reasoning could transfer advanced capabilities without preserving the original system’s safeguards. [OpenAI](https://openai.com/index/disrupting-a-coordinated-model-distillation-campaign/)

The Intelligence Radar security schema should add **`reasoning_confidentiality`**, **`cross-session reasoning isolation`**, **`distillation resistance`**, and **`capability-transfer monitoring`**. A benchmark-policy implication follows: hiding chain-of-thought from the ordinary response is not evidence that the reasoning channel is cryptographically or compositionally isolated.

[OpenAI — Disrupting a coordinated model-distillation campaign](https://openai.com/index/disrupting-a-coordinated-model-distillation-campaign/?utm_source=chatgpt.com)

### Physical automation looks technically broad but economically narrow

Anthropic published a new **robot-exposure index** estimating that currently available robots can perform roughly **three quarters of U.S. physical job tasks**, corresponding to 34% of total working hours. Combined with LLM exposure, Anthropic estimates about **80% of U.S. work time** involves tasks technically exposed to one technology or the other. Yet robots are estimated to be cost-competitive for only **0.3% of job tasks today**. Under historical robot-price decline rates, Anthropic estimates reaching 10% cost competitiveness would take about 40 years. [Anthropic](https://www.anthropic.com/research/what-work-can-robots-do)

The study also retrospectively finds that occupations with greater robot exposure over the past 50 years subsequently experienced larger wage and employment declines, though this is observational rather than proof that the exposure measure causes those outcomes. Its cost estimates also depend partly on model-assisted estimates and should not be treated as direct market measurements. [Anthropic](https://www.anthropic.com/research/what-work-can-robots-do)

This is a useful correction to a recurrent automation assumption:

> **Technical substitutability is not economic substitutability.**

Radar’s labor-impact model should explicitly separate **task capability**, **environmental feasibility**, **capital cost**, **operating cost**, **human relative wage**, and **actual adoption**. The same distinction should arguably also be applied more rigorously to software agents.

[Anthropic — Can we predict the jobs robots will do?](https://www.anthropic.com/research/what-work-can-robots-do?utm_source=chatgpt.com)

### State changes to commit

The broad **Capability Frontier remains Opus 5.5**, while **Gemini 4 Argon enters Topnotch and creates several credible task-specific frontier claims**. Vera Rubin NVL72 moves the hardware ledger to **limited real production availability**. Security tracking should treat **reasoning trajectories themselves as exfiltratable intellectual/capability assets**, not merely private implementation detail. And the socioeconomic model should separate **technical exposure from economic viability** much more aggressively.

I found **no comparably strong new biological-intelligence result, fundamental benchmark-methodology advance, or enacted national/international AI law since the previous scan** that warrants another Compendium state change. The strongest conceptual delta today is therefore two-sided: **both the software intelligence layer and the hardware beneath it are becoming more capable, while the economically and securely deployable frontier increasingly depends on constraints outside the model itself.**