DiffNo. 016

Friday, September 25

3 new · 4 still open · ~60 s

techniqueresearch

Benchmark scores often aren't reproducible, UK AISI finds

UK AISI and EvalEval's reproducibility work strikes at something evals-heavy fields learn the hard way: a single leaderboard number can hide enormous variance from prompt formatting, sampling seed, and hidden test-set overlap, so two labs 'measuring the same thing' may not be. It's a reminder that the discipline of evaluation — designing a fair, repeatable experiment — matters as much for LLMs as it ever did in a wet lab, which is exactly the rigor a background running experiments teaches you to expect and demand.

shiftindustry

Google and Apple ship AI memory features using cryptographic privacy

Two of the industry's most privacy-sensitive companies shipped AI-memory and personalization features this week built on encrypted, not plaintext, computation — a sign that 'private by construction' is becoming table stakes for any AI product that remembers something about a user, not just a compliance checkbox bolted on afterward. If a support-facing product you build ever needs to retain conversation history across sessions, this is the architecture pattern worth knowing about before someone asks why it isn't there.

What’s homomorphic encryption?

Homomorphic encryption lets you run computations directly on encrypted data and get an encrypted result back — decrypt it, and it matches what you'd have gotten computing on the plaintext. Nobody in between, including the server doing the work, ever sees the actual values.

It's worked in theory for over a decade but has historically been too slow for anything beyond toy examples — a single homomorphic multiplication can cost thousands of times what a normal one does.

What's changing is that hardware and scheme design have caught up enough that labs are shipping it for real product features: Apple's ML research and Google's Private AI Compute both use it for personal-data workloads instead of relying only on trusted-execution environments or keeping everything on-device.

The live debate is where the overhead is worth paying — encrypted inference is still far slower than plaintext, so the interesting question is which parts of a personalization pipeline (retrieval, memory storage, ranking) get the encryption and which stay in the clear for speed.

landscapetooling

Klaviyo built 356 internal apps in two weeks

512 non-engineers at Klaviyo — legal, marketing, HR — shipped 356 SSO-gated, database-backed internal apps in two weeks, going from idea to live in about three minutes each; it's a concrete data point that the bottleneck on internal tooling has moved from 'can we build it' to 'who's allowed to, and what happens when they do.' For anyone informally leading how a team adopts new practices, that governance question — not the app-building itself — is where the real work lands next.