Day 39. The paper's Friday brief on Project Glasswing at Day 38 counted what was missing — no CISA artifact, no Linux Foundation follow-on paper, no member-disclosure table. Saturday changes the number, not the condition. [1][2][3]
Anthropic's launch page still describes Glasswing as a consortium to apply advanced models to open-source security alongside major partners. [1] The Linux Foundation's launch post still says Anthropic will publish what was learned and which fixes were disclosed within 90 days. [3] The 90-day promise still has fifty-one days left. The 39-day silence is not a deadline failure. It is a discipline question: how long can a public-interest consortium ask outsiders to wait while insiders work?
The question sharpened this week. OpenAI launched its mirror initiative, Daybreak, and signed the same Cisco, CrowdStrike, and Palo Alto Networks partners Glasswing already has. [4] If the major AI labs are now competing for the same security counterparties, the artifact question stops being an Anthropic question and becomes a sector question. A field with two consortiums and no public outputs is not a defense program. It is a procurement race.
The next honest mark is Day 50. Anthropic still does not fail its promise until Day 90. But every passing day shifts the burden away from the company that took partners early and toward the reader who is being asked to assume the work is happening.
-- THEO KAPLAN, San Francisco