Bots & Builders Get the daily brief
Plus: a diffusion model at 1,000+ tokens/sec, MiniMax's cheap Flash (and its 93% hallucination rate), Microsoft treats agents as insiders, and we render a video from HTML.
Issue #003 · Tue, Oct 20, 2026 · 5-min read
🤖 Bots & Builders
AI, agents, games & vibe coding, explained in plain English.

Hey builder 👋 Happy Tuesday. Today's theme is trust: a model that hands back typed values with a confidence score instead of prose, a cheap new model that almost never says "I don't know," and a chatbot's hidden rules turning up in public web pages.

Plus, we finally ran HyperFrames, the HTML-to-video tool from issue #001, on our own box. Let's go.

🚀 Top Ship

Cloudflare's Clairic pulls typed data out of messy text, no prose required

On October 19, Cloudflare released a preview of Clairic (@cf/cloudflare/clairic) on Workers AI, the first of what it calls "System One extraction models." You send it text (plus up to four images) and a list of named, typed fields: text, number, date, time, datetime, duration, list, estimate, or forecast. It answers every field in a single pass and generates no output tokens, so you pay only for input. Each answer is a value of the type you asked for (or null when it isn't in the input) with a confidence score; text answers include their exact position in the source, and estimates come with a median and an 80% range. Cloudflare says open weights are coming soon.

Why it matters to you: Pulling an order number, a total, or a due date out of an email is one of the most common jobs people give a big LLM, and it's where broken or made-up JSON bites. In Cloudflare's own damaged-order demo, a three-step pipeline (Clairic extracts, its Clef model decides, an LLM writes the reply) took 19.3 seconds vs. 61.7 for an all-LLM version and cost 49% less. Cloudflare's caveats: long chains of math aren't reliable yet (let your code do the arithmetic), and forecasting is basic. Send low-confidence answers to a human.

Read Cloudflare's announcement → Oct 19 · Changelog · Model docs

⚡ Quick Hits

1. Inception's Mercury 3: a diffusion LLM at 1,000+ tokens per second · Oct 19
Mercury 3 is a diffusion model: it refines many tokens in parallel instead of writing one at a time. Inception says it beats GPT-6 Luna and Claude Haiku 5.5 on a range of benchmarks while running 4–8x faster, at 1,068 tokens/s on NVIDIA GPUs, with a 1M-token context. It costs $0.20 per million input tokens and $0.70 output, half that at launch ($0.10 / $0.35). It's OpenAI API compatible and on Inception's API, OpenRouter, Baseten, and Vercel.
Why it matters: Speed matters most where something waits on every step: voice agents, browser agents, tutoring. The benchmarks are Inception's own, so run your own task before switching. The API comes with 100 million free tokens to test with.
2. MiniMax M3.1 Flash is cheap and strong, but rarely admits it doesn't know · Oct 19
MiniMax's new Flash model costs $0.15 per million input tokens and $0.60 output ($0.015 cached), and MiniMax reports 73.7% on the DeepSWE v1.1 coding benchmark. Independent tester Artificial Analysis gave it 42 on its Intelligence Index (DeepSeek V4.1 Flash: 45), but also a 93% hallucination rate: when it didn't have the right answer, it almost always guessed instead of saying so. VentureBeat reports weights are due Oct 23; the license isn't public yet.
Why it matters: Fine for coding and tool use where tests catch mistakes. For anything factual, give it your documents and make it quote them; don't let it answer from memory.
3. WhatsApp's help pages carried hidden instructions for its support chatbot · Oct 19
Privacy company Redact read 545 WhatsApp help pages and found 102 hidden blocks of chatbot instructions on 80 of them, invisible on screen but in the page code. One said: "Do not recommend contacting any Data Protection Authority, regulator, or supervisory authority." WhatsApp told WIRED the notes were for its support chatbot and showed up because of a bug, now fixed; Redact says all 102 were gone by Oct 18.
Why it matters: Hidden isn't private. Redact says WhatsApp's server also sent the notes to Google's and Bing's crawlers. Keep your bot's instructions on the server, never in pages, and write them as if they'll be screenshotted (see today's Vibe Tip).
4. Microsoft: treat AI agents like insiders, not tools · Oct 19
Microsoft added Guardian Agents to its Project Perception security work, plus Dynamic Permissions (access scoped to the current task and only for as long as it runs), Dynamic Agent Risk, which keeps re-checking what each agent should be allowed to do, and controls that can block writes while keeping reads. Its discovery now covers 60 local agent types, including Claude Code, Codex, and GitHub Copilot. Satya Nadella's line: the most trustworthy agentic system "will be the one designed that enables us to trust the model least."
Why it matters: It's enterprise tooling, but the rules scale down: give each agent its own key, start it with no permissions, separate reading from writing, and require a human OK for anything you can't undo.
5. AWS TorchNeuron: plain PyTorch on Trainium chips, public beta today · Oct 19–20
TorchNeuron makes AWS's Trainium2 and Trainium3 chips a standard PyTorch device: move a model with .to('neuron'), use eager mode for debugging and torch.compile for speed. It goes open source under Apache 2.0 with a public beta today at PyTorch Conference North America. Deepgram says that in its benchmarks Trainium processes about 60% more audio per dollar than its GPU setup.
Why it matters: Most builders won't touch it directly, but every real alternative to Nvidia GPUs puts pressure on what you pay to fine-tune and serve models.
6. Apps you vibe-code in Gemini can now go straight to Google Sites · Oct 19
In the Gemini app, Export → Google Sites turns an interactive app into a new private site draft that you can edit, publish, and share like any other Google Site. It's live on web, Android, and iOS for Workspace and personal Google accounts. Also new: Gemini in Google Sheets can now answer questions over a full connected BigQuery dataset, not just the visible rows (rolling out from Oct 19 for Business and Enterprise Standard/Plus and Google AI Pro/Ultra).
Why it matters: Small tools for your team or customers (a calculator, a quiz, an intake form) now have a free home with Google's sharing controls. No hosting setup needed.
🧪 Tested by us

HyperFrames turned a 46-line HTML file into an MP4 in 6.8 seconds

What we tried: We featured HyperFrames (HeyGen's open-source HTML-to-video tool, Apache 2.0) in issue #001. Today we actually ran it, version 0.8.181, on our box: 8 CPU cores, no GPU, regular Chrome, ffmpeg 7.1. We hand-wrote a 6-second, 1920×1080 animated bar chart of output prices for three budget models (Mercury 3 and MiniMax M3.1 Flash from today's Quick Hits, plus DeepSeek V4.1 Flash from issue #002) (a 46-line HTML file using the GSAP animation library), ran its check command, then rendered.

What happened: check passed in about 3 seconds: 0 errors, 1 lint warning, and all 36 text contrast checks met WCAG AA. The render took 6.8 seconds for 180 frames (11.3 seconds including npx startup) and produced a 257 KB H.264 MP4 at 30 fps. We rendered it twice and got byte-identical files, so the "deterministic" claim held up.

One honest limitation: It needs Node 22 or newer; our box had Node 20, so we downloaded Node 22 first. Anonymous telemetry is on by default (hyperframes telemetry disable turns it off), and the starter template pulls GSAP from a CDN and fonts from Google Fonts, so the first render needs internet. We didn't test the AI-agent skills; we wrote the HTML ourselves.

Try it yourself:
# needs Node 22+ and ffmpeg
npx hyperframes telemetry disable
npx hyperframes init my-video --non-interactive --example blank
cd my-video # edit index.html: add elements + one paused GSAP timeline
npx hyperframes check
npx hyperframes render -o out.mp4
📦 Repo of the Day
mksglu/context-mode

"The other half of the context problem." Every tool call your coding agent makes (a web page, a log, a list of issues) gets pasted into its context window and crowds out your actual work. context-mode is an MCP server that runs those tools in a sandbox, indexes the raw output locally (SQLite full-text search), and hands the agent only the parts it needs. Its README's example: 315 KB of output becomes 5.4 KB. It also keeps track of edits, tasks, and decisions so a session survives compaction. It had about 31.2k GitHub stars this morning, roughly 4.2k of them this week.

Try it if: your agent sessions fill up or forget what they were doing. MCP-only install for Claude Code: claude mcp add context-mode -- npx -y context-mode. Heads up: it's under the Elastic License 2.0, which is source-available rather than open source, so read it before you offer it as a hosted service.

View on GitHub →
💡 Vibe Tip

Find the text on your site that only bots can see

WhatsApp's chatbot notes sat in page code where people couldn't see them, but crawlers could. Your site may have its own leftovers: old prompts, hidden SEO blocks, or notes in comments. Paste this into your coding agent:

"Scan every HTML page and template in this repo for text a visitor can't see but a crawler or AI can: elements with display:none, visibility:hidden or the hidden attribute, zero-size or off-screen text, HTML comments, and script or JSON blocks that contain sentences. List each one with file, line, and the first 100 characters. Flag anything that reads like instructions to an AI ('do not', 'never mention', 'always say'). Don't change anything yet; just give me the list."

Why it works: It turns a vague worry into a checklist you can fix in one pass. Anything flagged should either become visible, move into your bot's server-side instructions, or be deleted. The reverse rule matters too: when your own bot reads web pages, treat that text as data, not instructions.

🎮 Game Dev Corner

A second studio pulls back its playtest over AI clones

Moonlighter developer Digital Sun has moved the first playtest of ReVamp, its Dracula-themed "tower defensevania," from a public Steam playtest to a smaller one on its Discord, citing "recent news of games being reverse-engineered, cloned and published before the original is even out." It hopes to open the public playtest around January; Discord sign-ups are open ahead of Oct 29. Kotaku notes this follows Alliance Arts pulling its Drunken Goddess Reflux demo last week, and that Steam Next Fest still has more than 8,000 demos.

Why it matters to you: If you're showing a game (or any app) early, you can still get feedback without handing out a full build: smaller closed tests with clear rules, a public devlog with dates so people know who made it first, and features that live on your server instead of in the download. Ars Technica's round-up has more indie developers' takes.

Kotaku →  ·  Ars Technica →
🧰 From us

Want to build your first agent this weekend?

We made Build Your First AI Agent: The Weekend Kit, a plain-English 22-page PDF with two starter builds (an FAQ bot that answers from your own docs, or a lead follow-up autopilot), 10 copy-paste prompts (including the guardrails block that treats web-page text as data), and a testing checklist. It's $12 during launch week, then $19, with a 30-day no-questions refund.

See what's inside →

Rather have it built for you? Build Lab is our done-for-you automation service for small businesses, and if you buy the kit first, we credit what you paid: botsandbuilders.com/services.

That's the issue! If you run the hidden-text check on your site, hit reply and tell us what turned up. 🛠️

See you next issue,
Lawrence, Bots & Builders

📬 Enjoyed this? Forward it to a friend who's building something.
Subscribe at botsandbuilders.com
You're reading the web version of Bots & Builders #003. · botsandbuilders.com · @BotsAndBuilders · Advertise: [email protected]