Google opened Fairwind on 2 September, and the gate is deliberate. Governments, hospitals, telcos, energy operators, banks, core software platforms, and trusted cyber partners can apply for Gemini 3.8 Flash Cyber plus CodeMender, which finds, verifies, and patches inside the customer's own cloud. Google says more than 650 partners are already in. Seats stay with internal cyber, incident-response, and pen-test teams, and multi-factor authentication is required.

Flash Cyber is not a public application programming interface (API). Running CodeMender on the public Gemini Enterprise models does not buy you Fairwind. Treat the 650-plus count, "minutes not weeks," CyberGym "frontier-level," 47.2 percent on CWE-Bench, and Chrome's 2.6 times more correct patches as Google's claims. (Google)

The same day Google put Gemini 3.8 Flash on the public shelf as the workhorse for the Gemini API and Gemini Enterprise. Intro pricing is $0.75 per million input tokens and $3.75 per million output through 31 December 2026. On 1 January those rates become $1.50 and $7.50. Google says the model "works harder" on complex jobs, which usually means you burn more tokens when effort is turned up.

Budget for the January reset. Watch volume when effort climbs. This is the public cousin, not Flash Cyber. (Google)

OpenAI is previewing Private Safety Processing so it can keep Zero Data Retention (ZDR) on frontier models. Today's ZDR checks score each request alone. The new layer looks across related sessions without staff reading prompts or responses, and content stays on infrastructure the customer controls or on OpenAI storage under customer keys. OpenAI gets a narrow safety signal back. Early customers are testing it now, with a white paper and a wider rollout planned for September.

This is still a preview. The white paper is not out. "We still have ZDR" is a claim until then. (OpenAI)

TechCrunch, citing The Information, reports that Astra will use "recurrent depth," also called opaque recurrence. Instead of walking a straight chain of thought (CoT), the model loops the same query. Redwood's Buck Shlegeris warned that pushing the technique further could wreck CoT monitorability. OpenAI chief scientist Jakub Pachocki said the chain should stay legible and that CoT monitoring remains a core research goal. For now Astra's use looks limited.

This is reporting, not an OpenAI architecture paper. Thursday was the Critical cyber bar. Today is whether you can still read the work. (TechCrunch)

On 1 September CrowdStrike said Falcon now sits across Google Cloud's enterprise AI stack. Guardian runs through Agent Gateway to protect Google Cloud AI apps at runtime. Falcon Model Context Protocol (MCP), Charlotte AI, and Falcon Shield plug into Gemini Enterprise and Agent Registry, and Falcon itself is being built on regional Google Cloud infrastructure.

This is Falcon inside Google's agent stack, not a replay of Guardian on the laptop. Guardian is one piece of a wider wiring job. (CrowdStrike)

Google Cloud's monthly AI recap said Gemini Enterprise Agent Platform opened Agent Runtime and Agent Identity to more customers. The same write-up put CodeMender in preview for finding and fixing software bugs on publicly available models.

If someone asked where the control plane lives, this is the wider catalog: a runtime and a per-agent identity. It is not Fairwind. (Google Cloud)

OpenAI wants to keep ZDR by running Private Safety Processing on customer-held or customer-keyed content and sending back a narrow signal. Anthropic's Enterprise Frontier Safeguards (EFS) put the monitoring logs in the customer's Amazon S3, Azure Blob, or Google Cloud Storage under customer keys, with flags going to the customer and no Anthropic human review by default. EFS ships in phases later this fall. Eligible customers keep ZDR on Fable 5 and 5.1 until then.

The room is picking who holds the logs, who holds the keys, and who sees a flag. That is not a slogan. Get legal and security on one page before the next contract. (OpenAI; Anthropic)

The Move

Google gated the cyber model. OpenAI and Anthropic are arguing over who holds the logs.

This week, ask security one question: are we on Fairwind, or only on public CodeMender? Those are different products.

Then pick a retention architecture. Write it down. Do not leave it as "we'll see."

Seven bullets. One move.