Investigations

Culper Research went short Nvidia on May 13th, 2026, arguing over 20% of fiscal 2026 compute revenue remained China-driven and that Megaspeed's $2.9B in unnamed deposits and a Speedmatrix charge to Alibaba's Apex point to financing Nvidia's no-Chinese-shareholders account never addressed.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on documents, public records · By Ryan Merket · Nov 8th, 2026, 3:52pm CT

Muse's cloud browser has to sign in from scratch on sites that may demand one-time codes or block it outright. Muse 10.0 contains an "Add tab" flow, a gated Chrome extension row promising more reliable control, and local bridge code that could start from the Chrome tab a user has already authenticated, although RuntimeWire has not seen the flow work live.

RUNTIMEWIRE INVESTIGATION — Scoop · Based on reverse engineering, testing · By Ryan Merket · Nov 4th, 2026, 11:42pm CT

Last year you had to prompt Gmail-connected ChatGPT to "find my Black Friday codes" [Domaine guide, Nov 2025]. Now OpenAI is productizing it. A hidden Email Offers tab in the Windows package adds offer cards with "Not verified - Email source" labels, expiry dates, coupon codes, source email links, retailer links, and a local reference that auto-expires after 30 days or the stated expiry.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Nov 4th, 2026, 4:21pm CT

Package 26.1027.3384.0 contains partial quality and return-visit report interfaces, but its inspected business-profile route passes enabled=false.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 29th, 2026, 10:41pm CT

RuntimeWire traced the behavior in Windows build 0.2.1-rc.3; the transfer was not captured live, and feedback history and desktop analytics follow separate controls.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 25th, 2026, 10:57pm CT

The off-by-default control would hold skills handled through the app for review by the organization's configured Claude model; passing skills are released, warnings leave them usable with a caution, and failures are blocked.

RUNTIMEWIRE INVESTIGATION — Exclusive · Based on reverse engineering, testing · By Ryan Merket · Oct 20th, 2026, 11:16pm CT

A comparison of preserved web-client bundles shows the organization setting appeared between October 14th and October 19th. The code does not establish a customer rollout or reveal how the setting would work.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 19th, 2026, 1:42pm CT

Anthropic's public JavaScript separates unapproved-control refusals from outdated-client errors; another handler says employee sessions requesting bypass mode start in Accept edits.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 18th, 2026, 5:01pm CT

Alec Willerman, a lawyer building an AI-focused legal practice, wants a declaration on whether OpenAI's promise to benefit humanity creates an individual fiduciary right.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on documents · By Ryan Merket · Oct 18th, 2026, 4:37pm CT

OpenAI's ChatGPT desktop app lists message editing. RuntimeWire found Muse's editor in a signed 8.0 Mac package; server-side eligibility and general availability remain unverified.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 17th, 2026, 12:27am CT

The bundled code verifies a work email and can prepare a discount link; the offer's value, eligible employers and availability remain unconfirmed.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering · By Ryan Merket · Oct 15th, 2026, 10:39pm CT

Inspection of Chrome extension version 1.26.1005.11759 found a local JavaScript environment and a direct server connection that could eventually remove the desktop-app requirement. The code also includes an approval-based handoff for email verification codes; neither workflow was verified in a desktop-free session.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, documents · By Ryan Merket · Oct 15th, 2026, 3:18pm CT

Anthropic's confirmation warns that other feedback on the same conversation must also be withdrawn before it leaves the improvement program.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 14th, 2026, 8:01pm CT

RuntimeWire found gated local and SSH setup code in Windows build 2.31226.0; if worktree creation fails, an added repository can remain in place.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 9th, 2026, 3:38pm CT

The client includes mail.grokbot.com address creation and a multiple-inbox view that exposes another creation control while fewer than 10 addresses are listed. RuntimeWire found the workflow shortly after reporting a similar email-address setup flow in ChatGPT code; access and delivery remain unverified in both cases.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering, testing · By Ryan Merket · Oct 7th, 2026, 1:47am CT

OpenAI is building a native email-address setup flow for ChatGPT dots, with permanent personal handles, fixed work-account addresses and controls for activating email under the agent’s existing permissions, according to code RuntimeWire found in the official Windows app.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering · By Ryan Merket · Oct 7th, 2026, 12:59am CT

RuntimeWire found a hidden “Quick Write” interface for rewriting selected text and drafting at the cursor. The implementation ships in Claude’s Windows package; its rollout remains unconfirmed.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on documents, reverse engineering · By Ryan Merket · Oct 6th, 2026, 11:44pm CT

A September 21st motion seeks records on Reddit's Compliance API, deletion events and whether content can be removed from models already trained on it.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on reverse engineering · By Ryan Merket · Oct 4th, 2026, 7:54pm CT

A public bundle contains an organization-host URL and Cowork-related capability checks, while Anthropic's current Cowork documentation describes cloud and local execution.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on documents, reverse engineering · By Ryan Merket · Oct 1st, 2026, 9:56pm CT

RuntimeWire found references to contact selection, invitations and connection approvals across Muse's public web assets. Instinct already offers agent-to-agent coordination; Muse's code leaves its own behavior and availability unresolved.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on documents, reverse engineering · By Ryan Merket · Oct 1st, 2026, 9:38pm CT

WIRED sent audience-segment events to Pinterest. Four publishers sent Meta page views. RuntimeWire's homepage scan reached two outside domains.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on testing, data analysis · By Ryan Merket · Sep 29th, 2026, 11:30pm CT

RuntimeWire found two working Easter eggs in the government AI site's public code, plus a third trigger built around the Konami code.

RUNTIMEWIRE INVESTIGATION — Scoop · Based on documents, public records, reverse engineering · By Ryan Merket · Sep 29th, 2026, 5:01pm CT

The inspected client code adds four categories to Rampart's default keep-set, while the model card says generic government identifiers have no deterministic backstop.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on documents, testing · By Ryan Merket · Sep 29th, 2026, 3:43pm CT

The production stylesheet loads Rhymes VF Trial, whose embedded metadata says "Trial Unlicensed." Maxitype's EULA bars trial fonts from final project files, but whether GSA has separate permission is unknown.

RUNTIMEWIRE INVESTIGATION — Original analysis · Based on testing · By Ryan Merket · Sep 29th, 2026, 10:20am CT