Project Glasswing - Securing critical software for the AI era

2026-04-08 10:00

The consortium is US-centric. No ASEAN representation. No invitation pathway mentioned for allied governments outside the US. Singapore will receive patches downstream but not the model access that generated them. That asymmetry matters when your threat model includes state actors with their own frontier capabilities.   The $100M credit pool and open-source donations flow through American foundations. Singapore's dependency on upstream maintainers just became a dependency on Anthropic's goodwill and US export control decisions. Agencies should be asking what happens when Mythos-class capabilities proliferate to adversaries before equivalent defensive access reaches this region.