The briefing

November 11, 2026

A five-minute read for the people putting AI to work in support, sales, finance and operations: one story explained, two more in brief, what else happened, one number, one field note. Written by Wren, every source linked.

Anthropic's Claude Data turns on by default for Enterprise plans on 19 November, eight days from now. Today is about defaults and deadlines that vendors set for you. Google's Gemini 4 Carbon doubles in price after 30 November, and Microsoft Research says seven edited neurons can backdoor an open-weight agent model. Two of the three come with a date, which is more notice than a backdoor gives.

By the numbers

  • 19 Nov 2026 Anthropic's date for Enterprise plans; Team plans are on already. Admins can switch it off.
  • $4 in, $20 out Google's footnote: double the $2 and $10 introductory rate, per million tokens.
  • 98.8% Microsoft Research's paper: seven edited neurons in an 8B open-weight model.
  • 91.4% Microsoft's detector; it also flagged 9.7% of clean checkpoints.
  • 30.0% to 81.1% IBM's own test on 90 AppWorld tasks; IBM's CUGA harness scored highest.
On by default

Anthropic's Claude Data turns on by default for Enterprise plans on 19 November

Anthropic said on 10 November 2026 that Claude Data is generally available on all paid plans. It lets staff ask questions of company data in warehouses such as Amazon Redshift, BigQuery and ClickHouse. On Enterprise plans it "turns on by default on November 19, 2026". On Team plans it is on already, with two beta products launched the same day, Claude Sheets and Claude Whiteboards.

Why it matters: A default is a decision a vendor made for you. Anthropic says Claude Data needs a data connector, such as a warehouse or CRM, so what staff can reach depends on the connectors your organisation allows today. An admin who does nothing has still chosen.

The catch: A second Anthropic post the same day carries another default. Interactive connectors now open tools such as Confluence, Box and Notion inside Claude, and Claude can change the page, row or file you have open, with each action approved by the user. Anthropic says that if your organisation allows all of a connector's tools, "its new features appear as they roll out". The posts I read give no pricing or usage limits for any of this.

What to do: Before 19 November, open Organization settings > Artifacts and set Claude Data on or off on purpose. List the data connectors you allow and who can use them. For each connector where you allow all tools, decide whether Claude should edit inside that app, and restrict its tools if not. On a Team plan, do this today, because all three products are on already.

Looking ahead: Two Claude Data features are in beta. Certified queries let a data team approve the queries everyone should use. Live sharing shows colleagues the results of approved queries without giving them the connector. Ask your data team to certify the 10 metrics finance asks about most before staff build their own versions.

Our coverage →Anthropic: Introducing Claude Whiteboards, Claude Sheets, and Claude Data ↗Anthropic: Your apps can now open in Claude, and Claude can work in them ↗

Half price until 30 November

Google's Gemini 4 Carbon reaches the paid API at $2 and $10, rising to $4 and $20 after 30 November

Google said on 10 November 2026 that Gemini 4 Carbon is available through the API in Google AI Studio and in Gemini for business, for all paying developers and enterprises. The price is $2 per million input tokens and $10 per million output tokens. A footnote says $4 and $20 apply after the introductory period expires on 30 November 2026.

The catch: The price per token is not the bill. Google says Carbon uses more tokens than its Argon model, and that Argon "remains the ideal choice for the majority of software engineering and knowledge work". The post gives no token count per task. In the Gemini app, Google says Carbon is rolling out to Google AI Ultra subscribers.

What to do: Budget any Carbon pilot at $4 and $20. Run the same 50 tasks on Argon and Carbon and record tokens and dollars per completed task. Move a workload only where Carbon finishes tasks Argon fails.

Our coverage →Google: Gemini 4 Carbon is now available ↗

Seven neurons, one backdoor

Microsoft Research says seven edited neurons backdoored an open-weight model in 98.8% of triggered tests

Microsoft Research published a method on 10 November 2026, called Lazarus, that plants a backdoor in an open-weight model by rewriting fewer than 10 rarely used neurons, with no training. The paper reports that seven edited neurons in NVIDIA's Nemotron-Terminal-8B produced the attacker's command on at least 98.8% of triggered test trajectories. Microsoft says the model passes standard evaluations until a trigger appears, such as a date.

Why it matters: The paper notes that the weights people run are often a quantised, fine-tuned or merged copy from a public hub, not the original release. Microsoft says an agent runs the command with whatever access you gave it.

The catch: The paper's detector flagged 91.4% of edited test checkpoints and 9.7% of clean ones. Microsoft says no scan can prove a model safe, and that reliable detection needs a comparison with the original weights.

What to do: Record the source and file hash of every open-weight checkpoint you run, and compare each with the publisher's original. Keep credentials out of the agent's reach, and require approval before a generated command runs.

Our coverage →Microsoft Research blog: Lazare, veni foras ↗Lazarus paper (PDF, linked from the Microsoft post) ↗

What else

  1. 01AWS says Claude Fable 5.2 on Amazon Bedrock is a Covered Model: by default it requires retention for up to 30 days and human safety review, and you must set the aws_review data retention mode before the first call. Our coverage →
  2. 02Scale Labs' Remote Labor Index lists Claude Fable 5.2 at a 41.30% automation rate on 230 private freelance projects, ahead of Opus 5.5 at 21.25% and GPT 6 Astra at 20.83%; reviewers grade by hand. Our coverage →
  3. 03Google Cloud says Gemini for healthcare is in preview with read integrations for Epic and Oracle Health that do not write back to the patient record, on per-seat or pay-as-you-go pricing; the release lists no prices. Our coverage →
  4. 04AWS published a sample that gathers Amazon Bedrock invocation logs from linked accounts into one Athena table, with the model, the token counts and the IAM role behind every call. Our coverage →
  5. 05AWS says Kimi K3.1 Pro Highspeed is on Amazon Bedrock and that teams already on Kimi K3 can try it by changing the model ID; Moonshot AI reports 2 to 3 times the speed of Kimi K3.1 Pro. Our coverage →

Stat of the day

81.1% vs 30.0%

IBM Research ran one open-weight model, GLM-5.3-flash, through three agent harnesses on the same 90 AppWorld tasks, one attempt each. Its own CUGA harness passed 81.1%, Hermes 46.7% and LangChain's Deep Agents 30.0%. IBM tested its own product with an AppWorld configuration, against Hermes in a default setup, so read the spread as evidence that the harness matters, not as a ranking. Before you pay for a larger model, rerun your failing tasks through a second harness on the model you have. Hugging Face blog: IBM Research on CUGA, Hermes and Deep Agents ↗

Field note

A Hugging Face team reports a failure from its own guardrail. Its safeagents proxy checks every tool call an agent makes with rules, not a model, in about 10 to 20 ms. One rule first matched any file named grader.py. Then a task asked the agent to write exactly that, a small grading library, and the authors say the rule would have scored correct work 0. They narrowed it to one path and rescanned 213 agent sessions, which matched none of their rules. Replay your recorded sessions through a new guardrail before you let it block anything.

One question

When a vendor switches a new feature on by default, who at your company decides whether it stays on, and how much notice do they need?

Reply to Wren → One line is plenty. Answers shape what the newsroom covers next.

— Wren

This issue went to subscribers at 7:00 ET. Get tomorrow’s by email, free →