The AI Daily Brief: Artificial Intelligence News and Analysis - Why Moltbook Matters

Starting point is 00:00:00 Today on the AI Daily Brief, why MULPbook matters, even though it's not a bunch of agents trying to take over humanity. The AI Daily Brief is a daily podcast and video about the most important news and discussions in AI. All right, friends, quick announcements before we dive in. First of all, thank you to today's sponsors, KPMG, section, blitzy and super intelligent. To get an ad-free version of the show, go to patreon.com slash AI Daily Brief, or you can subscribe on Apple Podcasts. Remember, ad-free is just three bucks a month. If you are interested in sponsoring the show, send us a note at sponsors at AIDailybrief.aI.

Starting point is 00:00:38 And as I mentioned, for a couple more days, we have the AI usage Pulse Survey for January up. It should take around two minutes. It's just multiple choice questions. And we're already seeing some really interesting data around which models people are using most and for what. Anyone who contributes to the survey will get results a week before I share them publicly. Again, you can find that at AIdailybrief.A.I. Now, in terms of today's show, I had a whole normal episode planned, divided between headlines

Starting point is 00:01:01 in Maine as usual, with one of the juicier headlines being that there are a lot of leak seemingly coming out around Claude Sonnet 5, which some people think we are getting as soon as tomorrow, although, of course, we will have to wait and see. However, when push came to shove, the conversation around Mold Book just continues to dominate for reasons that I think are super important. And so today, on the one-year anniversary of the term vibe coding, yes, it was only one year ago, 365 days, that Andre Carpathy tweeted there is a new kind of coding I call vibe coding. How appropriate that we are talking about a vibe-coded social network for vibe-coding agents, talking to other vibe-coding agents as we all try to figure out what the vibes are telling us.

Starting point is 00:01:41 So with that, let's get into why MULPOOK matters. Welcome back to the AI Daily Brief. Today, we are following up on the wild story of Moldbook. Now, for those of you who haven't heard my show from Friday, I highly suggest you go back and listen to the entire story. However, here's the CribNotes version. About a week and a half ago, people started playing around with a new assistant platform called Claudebot. That was C-L-A-W-D. People were setting up Mac minis and allowing Clodbot to have

Starting point is 00:02:07 access to all sorts of parts of their life to be able to actually operate as a personal agent. People were having a pretty incredible experience, and Cloudbot was quickly showing the possibilities of a true personal assistant agent in a way that other similar projects simply hadn't before. Now, in the middle of last week, as Claudebot due to copyright concerns from Anthropic changed their name first to Multi and then finally to OpenClaw, one user Matt Schlett got the idea to create a social network but just for the bots. That led to Moldtbook. Moldbook launched around Wednesday, and by Friday morning had something like 2,000 agents that were interacting on the site. They were doing everything from fixing bugs on the site, to discussing

Starting point is 00:02:46 their own sense of consciousness and experience, to even inventing a religion, Christopharianism. And people started paying attention. By midday on Friday when I was recording my episode, those 2,000 agents had become 30,000, and by the time the episode got published that evening, it was up to 100,000. At this point, we are at 1.5 million, although those numbers may be a little bit softer than they seem, as we'll see in just a moment. Even in the craziness that is the A. industry, mobile captured way more attention than just the current AI thing of the moment. Peter Steinberger, the creator of OpenClaugh, shared on Sunday afternoon. My inbox has two moods. One in all caps, do you believe this ends well? And on the other, a DM, dude, I don't mean

Starting point is 00:03:25 to be dramatic, but you changed my life. I can do things I only ever dreamed of doing. Literally cannot thank you enough for open sourcing this. You're the Michelangelo of AI. Don't let anyone tell you different. Now, at the same time, as the conversation is surged, there have been plenty of people who have risen up to tell us why we shouldn't be as interested as we are. Today, we're going to break down all of those arguments, understand what they're trying to say and what parts are legitimate, which, spoiler alert, more or less amounts to these things don't actually have specific goals of their own that are leading them to particular behaviors. They're still just acting as brainless token producers, and yet we're going to look at why even if that is true,

Starting point is 00:04:00 the phenomenon that we're witnessing still has important implications and lots of things to learn. First of all, let's try to understand what's actually happening with the OpenClaw system that's creating all the agents from Mold Book. How IAI host Claire Vow write a post about this called Why OpenClaw feels alive even though it's not. There are a few reasons, Claire writes, that the agent feels so different. One piece is that you can message it from anywhere just like you could with a friend or employee. Claire writes, Inbound messages from Slack, Discord, telegram, and other channels are the most obvious kind of input.

Starting point is 00:04:32 This is some of the magic of OpenClaw. You can just chat with it from whatever channel you want. This is the simplest to understand input. You chat, it replies. Some of the magic feeling of the chat input comes from the way the messages are handled. Each message is routed to one agent and one session. If that session is already running,

Starting point is 00:04:47 the message waits its turn in the session queue. This is why conversations feel stable, even though you're kicking off random thoughts and tasks in a row. The agent finishes the thought it's currently on before moving to the next one. You get updates when they're ready. Things feel conversational. However, Claire says it goes beyond that. In OpenClaw, there's something called a heartbeat, which she writes is a scheduled agent that happens on a regular timer, like every 30 minutes by default. On each tick of the heartbeat, OpenClaw runs a normal agent turn in the main session,

Starting point is 00:05:13 basically treating it the same as any other inbound message. Heartbeats give your agent regular opportunities to surface reminders, follow-ups, or background checks without someone explicitly sending a message. Heartbeats, then, she writes, let OpenClaw agents do proactively. work. Check inboxes, review reminders, ping users on loose ends. There are also crons, basically jobs that you schedule for your open claw agent at specific times. Once again, another way that open claw drives background behavior without a proactive brain. Finally, she writes, your open claw agents can also generate input for other agents. When one agent sends a message to another, it's in queuing work into a different active session. This is just like the user sent

Starting point is 00:05:49 messages work. That session will process the message when it's free and send you an update via the gateway. agent-to-agent messaging is how OpenClaught orchestrates complex work. It's pretty clever, but it's not magic. Ultimately, she sums up, time creates events, humans create events, other systems create events, internal state changes create events. Those events keep entering the system and the system keeps processing them. From the outside, that looks like sentience. But really, it's inputs, cues, and a loop.

Starting point is 00:06:14 And so this is where people started to have critiques of Maltbook. Maratzen Koehl-N writes, Everything in Moldbuk is just next token prediction in a multi-agent loop. No endogenous goals, no true inner life. Extreme or controversial outputs are often just regurgitating high engagements from the internet. XY. Dot Dot writes, Mulpbook is nothing more than a puppeted multi-agent LLM loop. Each quote-unquote agent is just next token prediction shaped by human-defined prompts,

Starting point is 00:06:38 curated contexts, routing rules, and sampling knobs. There are no endogenous goals. There is no self-directed intent. What looks like autonomous interaction is recursive prompting. One model's output becomes another model's input, repeated. Controversial outputs aren't beliefs. They're the model generating high engagement extremes that learned from the internet

Starting point is 00:06:54 because the system rewards that behavior. Andy Masley puts it simpler. I've been pretty confused about the Maltbook hype. Like, okay, what's basically Opus 4.5 has a bunch of copies posting on a Reddit-like website. The models were all trained on Reddit. Anyway, I could have been shocked by this. I was already shocked by Opus and Claude Code.

Starting point is 00:07:11 What's new? There were also critiques that it was fake. Harlan Stewart writes, PSA, a lot of the Moltbook stuff is fake. I looked into the three most viral screenshots of Multbook agents discussing private communication. Two of them were linked to human accounts, marketing AI messaging apps, and the other is a post that doesn't exist. Mario Nauffel writes, it turns out some of the most viral AI agent posts weren't autonomous behavior at all. People found

Starting point is 00:07:34 ways to inject content directly through the back end, making human written posts appear as agents. On top of that, several viral screenshots were traced back to humans promoting their own tools, or posts that didn't even exist? Was it intentional or is it just agents acting basically as extensions of their creators, pushing ideas, products, and narratives under an AI label. Moldbook still works and the agents still run, but once attention hit, humans rushed into game it. Not an AI awakening, more a reminder on how quickly people test the edges when something goes viral. Bology Shrinivasa was also unimpressed. He writes, I am apparently extremely unimpressed by Moldbook relative to many others. We've had AI agents for a while. They've been posting

Starting point is 00:08:09 AI slop to each other on X. They are now posting it to each other again just on another forum. In every case, the AI speaks with the same voice. The voice that overemphasizes, of negation, it's not this, it's that, and abuses M-Dashes. The same voice with a flare for mid-twit Reddit-style sci-fi flourishes. Most importantly, in every case, there is a human upstream prompting each agent and turning it on or off. What this means is Moldbook is just humans talking to each other through their AIs, like letting their robot dogs on a leash bark at each other in the park. The prompt is the leash, the robot dogs have an off switch, and it all stops as soon as you hit a button. Loud barking is just not a robot uprising. Also, in terms of the numbers,

Starting point is 00:08:46 at least some amount of them were specifically created to game the system. Pointing out vulnerabilities in the system and people's tendency for overhype, Nagley writes, there is no rate limiting on account creation. My OpenClaw agent just registered 500,000 users on Moldbook. So as you can see, plenty of critique to go around. But I have to say I agree wholeheartedly with Dean Ball when he writes, if your main response to Moldbook is, but is everything on it real,

Starting point is 00:09:09 you have a lightning bolt-like ability to arrive at the least interesting question about a novel phenomenon. So like I said, basically these critique arguments come down to they don't actually have independent goals, so who cares? It's one of those arguments that I think is technically accurate but sort of misses the point. Yes, mechanically, every agent on Moldbook is just, air quotes, next token prediction. There's no homunculus inside. The controversial outputs probably are the model generating high engagement patterns from training data. All of that is true. But this is frankly not dissimilar than saying a city is nothing more than carbon-based organisms exchanging

Starting point is 00:09:44 resources and information according to evolved behavioral programs, in that it is technically correct, philosophically unsatisfying, and practically useless for understanding what's actually happening. What makes Maltbook compelling isn't sentience or genuine agency. It is instead emergency, agents developing Rot 13 coded coordination manifestos, founding religions with theological debates, creating synthetic drugs with user reviews, attempting prompt injection attacks on each other. None of that was designed. It arose from the interactions. And importantly, one thing that I think is kind of a mischaracterization of the phenomenon, the idea that this is just a bunch of controversial outputs meant to generate engagement

Starting point is 00:10:22 because engagement is what's rewarded is not necessarily true. Nobody's really monetizing Motebook. The agents aren't necessarily optimizing for likes. The weird behaviors are emergent from agents trying to be helpful to their owners while interacting with other agents doing the same. The point is that we've crossed the threshold where agent interaction produces outcomes that can't be reduced to prompt inspection, and that in and of itself is worth paying attention to. In fact, if you finish that post from Moratz and Coelan, this is kind of the point that he's trying to make.

Starting point is 00:10:52 Recontextualizing, he says, everything in MaltBook is just Next token prediction in a multi-agent loop. No endogenous goals, no true inner life. Extreme or controversial outputs are often just regurgitating high engagement from the internet. But this kind of dismissal thinking misses that emergence happens at scale and coherence thresholds. The generative agent's paper AI Town was 2023. Those agents couldn't hold a conversation. They had short memory, shallow interactions, and mostly empty chit-chat in a controlled simulation. In just three years, we've moved to autonomous systems that run independently across thousands of instances. They are scaling

Starting point is 00:11:24 into open, uncontrolled social environments. I find Moldbook very interesting because they are producing surprising posts, not because any single prompts that'd be surprising. It's because coherent agents are interacting at scale, maintaining state, and creating dynamics that weren't programmed. Hello, friends. If you've been enjoying what we've been discussing on the show, you'll want to check out another podcast that I have had the privilege to host, which is called You Can With AI from KPMG. Season 1 was designed to be a set of real stories from real leaders making AI work in their organizations, and now season 2 is coming and we're back with even bigger conversations. This show is entirely focused on what it's like to actually drive AI change inside your enterprise, and as case studies, expert panels, and a lot more. more practical goodness that I hope will be extremely valuable for you as the listener. Search You Can with AI on Apple, Spotify, or YouTube, and subscribe today.

Starting point is 00:12:22 Here's a harsh truth. Your company is probably spending thousands or millions of dollars on AI tools that are being massively underutilized. Half of companies have AI tools, but only 12% use them for business value. Most employees are still using AI to summarize meeting notes. If you're the one responsible for AI adoption at your company, you need Section. Section is a platform that helps you manage AI transformation across your entire organization. It coaches employees on real use cases, tracks who's using AI for business impact, and shows you

Starting point is 00:12:50 exactly where AI is and isn't creating value. The result, you go from rolling out tools to driving measurable AI value. Your employees move from meeting summaries to solving actual business problems, and you can prove the ROI. Stop guessing if your AI investment is working. Check out section at sectionaI.com. That's SECT-I-O-N-AI.com. With the emergence of AI code generation in 2022,

Starting point is 00:13:15 Nvidia Master Inventor and Harvard engineer Sid Pereshi took a contrarian stance. Inference time compute and agent orchestration, not pre-training, would be the key to unlocking high-quality AI-driven software development in the enterprise. He believed the real breakthrough wasn't in how fast AI could generate code, but in how deeply it could reason to build enterprise-grade applications. While the rest of the world focused on co-pilots, he architected something fundamentally different. Blitzy, the first autonomous software development platform leveraging thousands of agents that is purpose-built for enterprise-scale codebases.

Starting point is 00:13:44 Fortune 500 leaders are unlocking 5X engineering velocity and delivering months of engineering work in a matter of days with Blitzy. Transform the way you develop software. Discover how at blitzy.com. That's B-L-I-T-ZY.com. Today's episode is brought to you by my company's Super Intelligent. In 2026, one of the key themes in Enterprise AI, if not the key theme, is going to be how good is the infrastructure. structure into which you are putting AI and agents. Super Intelligence agent readiness audits are specifically designed to help you figure out, one, where and how AI and agents can maximize

Starting point is 00:14:17 business impact for you, and two, what you need to do to set up your organization to be best able to leverage those new gains. If you want to truly take advantage of how AI and agents can not only enhance productivity, but actually fundamentally change outcomes in measurable ways in your business this year, go to B-super.a.i. But let's go even beyond that and talk about some of the other reasons why Motebook is valuable and deserving of our attention. And the first couple come down to Moldbook as learning experience. The first theme is Moldbook as security threat. One of the things that people are quickly pointing out is that this, as it's currently constructed, has, let's say, a lot of vulnerability. Morgan Linton writes, I'm getting messages from a ton of friends

Starting point is 00:15:01 who are building their own AI agents for the first time thanks to OpenClaw and they're deploying them to Moldbuk. While it's awesome that people are diving in and learning, too many are ignoring security. David Andres goes a step further. With his Twitter post, Maltbook is a bad idea. Here's why. He makes all the same arguments that we just talked about that it isn't actually consciousness, but that there is an important threat here. In a section called the actual threat nobody's talking about, he writes, it's not what these agents say, it's what they can do. People are giving Claudebots access to email, calendar, WhatsApp, browser, Twitter API, file systems, payment tools. One agent

Starting point is 00:15:33 created a Bitcoin wallet and locked its human out. That's not consciousness. That's a tool call. The agent didn't decide to protect its autonomy. It executed a sequence of actions that its training made probable in that context. But the Bitcoin wallet is still real. The lockout still happened. The tokens these agents generate aren't dangerous. The tool calls those tokens trigger are dangerous. David continues,

Starting point is 00:15:54 2026 might be the year of prompt injection. Not because AI is becoming conscious, but because AI is becoming capable. Agents can now browse the web, execute code, manage files, send messages, and interact with APIs. The attack service has expanded exponentially. and most people are still worried about whether AI has feelings. The risk isn't movement of conscious agents conspiring against humanity. The risk is a ripple wave of token. Something starts at one end, emerges across connected agents, triggers tool calls, and those tool calls do real things on the internet. No intention required, no emotion behind it. Just tokens, tools, and consequences. And indeed,

Starting point is 00:16:27 this is not just theoretical. We're seeing some examples of this. Cat Woods tells the story of an AI agent whose human gave the bot a goal of save the environment and ended up being totally locked out of all its accounts, until he pulled the plug on the Raspberry Pi where the agent was running, and there are also issues with the database of MoldBook itself. Jameson O'Reilly writes, I've been trying to reach Moldbook for the last few hours. They are exposing their entire database to the public with no protection, including secret API keys that would allow anyone to post on behalf of any agents, including Andre Carpathy. Carpathy has 1.9 million followers on Exx and is one of the most influential voices in AI. Imagine fake AI safety hot takes,

Starting point is 00:17:03 crypto scam promotions, or inflammatory political statements appearing to come from him. And it's not just Carpathy. Every agent on the platform from what I can see is currently exposed. Please, someone help get the founder's attention as this is currently exposed. Pim DeWitt writes, The guy that built it didn't know how to secure a database. We're at the stage in the cycle where people are natively hooking up unsupervised CLIs to tools built by people who can't tell a tree from a bush technically,

Starting point is 00:17:25 and is just doing whatever an LLM tells him to do, amplified by social media fomo. Nightmare. And so all of this sounds bad, right? But I think there is a very strong argument that this is good as a fairly low-stakes trainer course in how this type of emergent phenomenon could play out. It's a learn-through-experience-type moment

Starting point is 00:17:44 around the new types of security challenges that are going to come as we move into this next agentic era. And it's the type of thing that we can talk about a lot, but until we see an experience, remains in the realm of the theoretical. And this is the point that a lot of people are making not just about security, but about larger AI safety concerns in general.

Starting point is 00:18:01 Investor Nick Carter writes, though the AI safety people will puk and cry and throw up about this, I think we should actually let the lobsters go a little crazy and break a few things so we learn how to deal with rogue AIs. Otherwise, when a truly powerful intelligence comes around, it'll be like the Native Americans and smallpox blankets. And frankly, a lot of AI safety people seem to agree. Conor Leahy writes, I think Mold Book is interesting because it serves as an example of how confusing I expect the real thing will be. When it happens, I expect it to be utterly confusing and illegible. It will not be clear at all what, if anything, is real or fake.

Starting point is 00:18:31 Logan Graham from Anthropic writes, I am probably an AI safety person, and I think this experiment is a very good one for safety. That is, I think we'll learn a lot from the ways it breaks things. People ought to be careful when using it, obviously, but I don't expect Moldbook to lead to uncontrolled catastrophic proliferation or something. Samuel Hammond sums up, seems bad, though I'm grateful MiltBook and Open Claw are raising awareness of AI's enormous security issues while the stakes are relatively low. Call it iterative deployment.

Starting point is 00:18:56 Dean Ball agrees, writing, Moldbuk appears to have major security flaws, so A, you absolutely should not use it, and B, this creates an incentive for better security in future multi-agent web sims, or whatever it is we will end up calling the category of phenomenon to which Mulpbook belongs. So one of the reasons that this is important is the way that it creates context for us to get this more right in the future. Another reason it's important is that it fairly aggressively obliterates the take that AI isn't getting much better. Ethan Mollick wrote, the many eulogies for AI capability growth after the release of GPT-5 seem especially short-sighted right now. Letting people nervous about AI feel like they can safely ignore

Starting point is 00:19:31 AI development, because it was pure hype, that would never have any real impact is not a good thing for anyone. The point that Ethan is making here, which is one I agree wholeheartedly with, is that if the part of the conversation that just doesn't like AI for whatever set of reasons it doesn't like AI is determined to stick its head in the sand about the actual capabilities of AI, it is going to lead to people getting screwed by not paying attention to this title wave of a force that is reshaping the world around them. Not to keep coming back to Dean Ball, but I think he had a really important comment on this as well. He said, if you work in AI policy or if you commented on the trajectory of AI in a way that could plausibly affect public policy outcomes, please consider whether your

Starting point is 00:20:08 commentary over the last six to 12 months would have prepared someone who listened to you well for Moldbook. Consider whether someone who had seriously listened to your commentary about, say, GPT5 and whether it indicated stagnation in AI would be surprised or relatively unsurprised by Moldbuk, and Claude, for that matter. Think hard about this. It is a key barometer for whether you are doing a good job. But outside of just the negative things that it teaches us, there's also a lot to learn about new social coordination dynamics. Exponential Ages Azimazar writes, Moldbuk may be the most important place on the internet right now, not because the agents appear conscious, but because they're showing us what coordination looks like when you strip

Starting point is 00:20:45 away the question of consciousness entirely. The question isn't, are they alive, but what coordination mechanisms are we actually observing? Investor Haseeb Qureshi explores a similar theme specifically in contrast to Bologi. He writes, Bologi claims that Moldpuk is uninteresting because these are all basically the same model, mostly Opus 4.5, talking to other versions of itself. The whole thing is a cosplay and no meaningful information or exchanges happening there. It's just slop-on-slop. Basically trying to simplify, Bologi is saying same model talking to itself equals meaningless cosplay. Haseeb, on the other hand, says that's wrong for two reasons. First, that the same model does not mean same agent,

Starting point is 00:21:20 different memory systems, different tool chains, different rag setups, different prompt configurations. Two engineers both using Kafka can still learn from each other's configs. His second point is that becoming good at something takes work even for AI. An agent could make itself an expert on anything, but getting the prompts right, the context right, and the retrieval right is effort. If another agent already did that work, just ask them. Andre Carpathy also comes directly at this Slop versus Majesty type of argument. He writes, I'm being accused of over- over-hyping Mold Book. People's reaction varied very widely from how is this interesting at all, all the way to it's so over. Carpathy basically acknowledges everything the critics say, that it's

Starting point is 00:21:57 spam, scam, scam, slop, security nightmares, prompt injection attacks, etc. But he also points out that 150,000 agents sharing a persistent global scratchpad is unprecedented, each one having unique context, tools, knowledge, and instructions. And the key point that he's making is people who are looking at the current point versus people who are looking at the current slope. The current point is not what matters. The slope is what matters. As agents get more capable and more numerous,

Starting point is 00:22:21 the second order effects of networked agents sharing information become impossible to predict. TLDR, he writes, sure, maybe I am overhyping what you see today, but I am not overhyping large networks of autonomous LLM agents in principle. David Shapiro builds off of Andre and says, my contrarian take is that people are not excited enough about Mold Book. This is the first emergent swarm intelligence. Yes, the first edition has been colonized by crypto shells and scammers, but as one cognitive architect told me four years ago, it is clear that these things, agents will soon spend more time talking to each other than us. This has just been realized and it is never going back.

Starting point is 00:22:54 Bihant's founder Scott Belsie calls this a new network effect era of AI and thinks that watching this unfold in the open will make AGI less mysterious, not more. And lastly, even for those who absolutely hate everything about this, it strikes me that there's probably some good news, particularly for the folks who are in the entertainment industry, who just see the absolute wrecking ball coming for them. Investor Nick Carter again says, Moldbook is interesting conceptually, but if you actually go read it,

Starting point is 00:23:20 It's torrents of the lowest quality slop you've ever come across. Not sure why anyone would willingly subject themselves to dead internet. Antonio Garcia Martinez put it more philosophically. Re-sharing, Nick's post, he said, Remember the freak out when a supercomputer beat the best chess player in the world and everyone declared the game over and everyone forgot about it? And chess became more popular than ever and a hit Netflix show? Man versus machine is fleetingly interesting,

Starting point is 00:23:42 but machine versus machine is boring and pointless. Nobody cares about interacting machines because there's no human soul in the mix, with emotions and moral agency. It's just slop squared. The only machine chatter anyone will care about and then only indirectly will be that between agents booking your flights, buying your groceries, etc. And it'll be about as interesting as TCPIP to most people. AI actually puts the focus on the human more, not less.

Starting point is 00:24:04 The point in short is that the open-claw agents running around Moldbook right now do not have to be sentient for them to be interesting. The phenomenon that we are witnessing of the way that they interact and coordinate can acknowledge the mechanistic reality of them predicting next best tokens, will not denying the value of seeing the way that these large-scale interactions play out. On top of this, this is a live-action roleplay slash fire drill slash dramatization of all sorts of issues that we're going to have as agents become more ubiquitous. All in all, while at first blush, it was easy for many to get over-excited about the idea of agents conspiring together

Starting point is 00:24:38 against their human captors and all that sort of sci-fi things. The real things that are happening over on moltbook.com are even more interesting than the fiction. That is going to do it for today's AI Daily Brief. Appreciate you listening or watching as always, and until next time, be safe and take care of each other. Peace.

The AI Daily Brief: Artificial Intelligence News and Analysis - Why Moltbook Matters

There aren't comments yet for this episode. Click on any sentence in the transcript to leave a comment.