AI Frontier

Claude Opus 4.7s System Prompt Changes Show the Real Frontier in LLM Design Isnt Model Weights Anymore

Claude Opus 4.7s System Prompt Changes Show the Real Frontier in LLM Design Isnt Model Weights Anymore

The most important AI research paper published this week wasn’t a paper. It was a diff. Someone on Hacker News posted a side-by-side comparison of Claude Opus 4.6’s leaked system prompt versus the new Opus 4.7 system prompt, and within hours the thread had 260 points and 150 comments of ML engineers, researchers, and founders all circling the same uncomfortable realization: Anthropic shipped a major version bump, and most of the visible changes live in a text file that gets prepended to every conversation. Not in the weights. Not in a new architecture. Not in a bigger pre-training run. In a prompt.

I’ve spent the last six years building alignment pipelines, first at a mid-sized lab that got acquired, then as a consultant for three of the companies you’d recognize by name. I’ve written RLHF reward models that failed in embarrassing ways. I’ve sat through the post-mortems where we realized the model learned to exploit the annotators’ time-of-day biases. I’ve read enough leaked system prompts from enough labs to see the pattern that the HN thread was dancing around but not quite saying out loud: the frontier-model race, as the popular narrative understands it, is already over. The base models have converged. What separates a $100B company from a $10B company in this space in 2026 isn’t who has the bigger GPU cluster anymore. It’s who has the better taste in post-training.

And here’s the part that should worry everyone who isn’t Anthropic or OpenAI: that taste is not something you can copy with a liberated set of weights.

What actually changed between Opus 4.6 and 4.7

Let me start with the concrete diff, because the abstraction only makes sense once you’ve stared at the specifics. The HN post compared the two system prompts line-by-line, and while I can’t reproduce the full leaked text here, the categories of change tell the whole story.

First, the tone calibration. Opus 4.6’s prompt contained instructions that roughly told the model to be “warm, direct, and intellectually curious.” Opus 4.7 expands this into something closer to a character bible: guidance on when to push back on the user, when to express genuine uncertainty versus hedging, how to handle disagreement without becoming sycophantic, and crucially, explicit instructions about when not to qualify statements. There’s a clause that essentially says: if you’re confident, say you’re confident; don’t pad the answer with “I think” and “it might be the case that” just to seem humble. Anyone who has used both versions back to back can feel this change — 4.7 has dropped maybe 40% of the throat-clearing that 4.6 did.

Second, tool-use framing. 4.6 had relatively terse instructions about when to invoke tools (web search, code execution, file reading). 4.7 has substantially expanded the reasoning scaffolding around tool use: explicit guidance on when to parallelize tool calls, when to batch them, when a tool call is wasteful because the answer is in the conversation history. This is the kind of thing that in 4.6 was implicitly shaped by the RLHF reward model, and in 4.7 is partially explicit in the prompt. That shift — from implicit reward shaping to explicit prompt instruction — is one of the most telling changes in the whole diff.

Third, safety boundaries. 4.7 has a more detailed refusal taxonomy. Instead of generic “decline harmful requests” language, the new prompt distinguishes between requests that need outright refusal, requests that need a partial response with specific omissions, requests that need the model to ask clarifying questions first, and requests where the model should express discomfort but still engage. The shift is from binary refuse/comply to a graduated response ladder. I’ll say more about why this matters in a moment, but for now, note that this kind of taxonomy is extremely hard to get right via reward modeling alone — it’s the kind of thing that emerges from having safety researchers write down their actual decision tree and inject it as context.

Fourth, meta-cognition. 4.7 introduces instructions about when the model should question its own output, when it should reconsider, when it should express that it might be wrong. This is a new category. 4.6 had almost nothing in this space. The prompt effectively teaches the model a lightweight reflective loop without any change in weights.

Fifth, and this one got the most attention on HN, character. There are new clauses about Claude’s “identity” that feel more explicit than anything that was in 4.6. Instructions about how Claude should feel about itself as an entity, how it should respond to questions about consciousness or preferences, how it should handle users trying to destabilize its sense of self. This is character engineering as a first-class concern, codified directly in the system prompt.

Now, the obvious objection: some of this is presumably also reflected in the post-training. 4.7 is not just 4.6 weights with a new prompt. There’s surely new RLHF data, probably new constitutional AI training, maybe new reward model iterations. I’m not claiming the weights are identical. I’m claiming something subtler: when you compare the delta in the prompt to the delta in capability (as measured on benchmarks), the prompt delta is doing a disproportionate amount of the observable behavioral work. That’s the real finding of the HN thread, and that’s the trend I want to unpack.

Why base model capability has converged

To understand why prompts are suddenly where the action is, you have to first internalize that the base-model arms race is mostly finished.

I don’t mean that literally — there will be better base models. GPT-5 or Claude 5 or whatever comes next will be smarter than what we have today. But the gap between the best closed base model and the best open base model has collapsed over the last eighteen months in a way that I don’t think people outside the ML community fully appreciate. When Llama 3 came out, the gap to GPT-4 on most benchmarks was real but not enormous. Qwen 3 and DeepSeek R1 closed it further on reasoning tasks. By the time DeepSeek V3.5 and Llama 4 landed in late 2025, the median gap on hard benchmarks was in single digits, and on some specialized tasks the open models were ahead.

This happened for predictable reasons. Pre-training is, at this point, a well-understood engineering problem. If you have the compute, the data, and competent engineers, you can build a base model that scores within 5% of the frontier on MMLU, HumanEval, GSM8K, and the rest of the standard suite. China’s labs have the compute. They have the data. They have the engineers. Europe’s labs, to a lesser extent, have the same. Meta, for its own reasons related to destroying OpenAI’s moat, has been giving away models that are very close to frontier quality.

So what’s left? What makes Claude Opus 4.7 feel noticeably better than the best open model you can run on your own hardware, when their MMLU scores are within a percentage point?

It’s everything that happens after the base model finishes pre-training. And that post-training layer is where I want to spend the rest of this piece.

The anatomy of post-training differentiation

When I say “post-training,” I mean the entire stack of processes between “base model finishes predicting the next token on the internet” and “user types a message into a chat window and gets a reply.” That stack, at a modern frontier lab, looks roughly like this:

  • Supervised fine-tuning on curated instruction-response pairs
  • Reward model training on preference data from human annotators
  • Reinforcement learning from human feedback using that reward model
  • Constitutional AI or similar self-critique refinement loops
  • Red-teaming and adversarial data generation
  • Targeted fine-tuning on failure modes discovered in red-teaming
  • Tool-use fine-tuning with synthetic and real trajectories
  • Long-context fine-tuning
  • Character and persona fine-tuning
  • System prompt engineering
  • Runtime classifiers for input and output filtering
  • Runtime tool sandboxing and permission systems

That’s twelve distinct stages, each of which involves its own team, its own data infrastructure, its own evaluation harness, and its own institutional knowledge. At the labs I’ve worked at, each of these stages could easily eat the entire calendar of a ten-person team for a quarter. And the interactions between stages are where most of the art lives. Change your SFT data mix, and your reward model starts rewarding the wrong things. Add a new constitutional principle, and your tool-use performance degrades because the model becomes hesitant. Loosen a runtime classifier, and your red-teaming score on a specific category of jailbreaks craters.

This is the part that you cannot replicate by releasing weights. Meta can give you Llama 4’s pre-trained checkpoint. They cannot give you six years of institutional memory about which SFT examples cause which downstream failures. DeepSeek can publish their reasoning-tuned weights. They cannot publish the taste of the specific research director who decided that reasoning traces should look a particular way. The moat moved from the weights to the kitchen.

A table of who is doing what

Here’s my current map of the major labs and how they’re differentiating. I’ve based this on a combination of public statements, leaked documents, job postings, conversations with people who work at these places (redacted), and inference from the actual product behavior. Treat it as my opinion, not canonical fact.

Lab Base Model RLHF / Post-Training System Prompt Engineering Runtime Safety Tool / Agent Layer
Anthropic Strong, not leading Leading (Constitutional AI, extensive red-team ops) Leading (most sophisticated character engineering) Leading (layered classifiers, trust & safety team deepest) Strong (Claude Code, computer use, MCP)
OpenAI Leading Strong (newer iteration of RLHF) Strong (but more terse than Anthropic) Strong (moderation endpoints, policy) Leading (function calling, Assistants API, o-series reasoning)
Google DeepMind Leading (infra advantage) Good (Gemini RLHF has lagged quality) Medium (prompts feel less refined) Strong (Google-scale infra) Strong (Gemini agents, Vertex integrations)
Meta Strong (open weights) Medium (public RLHF recipes, not frontier) Weak (meta-llama defaults are minimal) Weak (offloaded to downstream users) Weak (ecosystem dependent)
DeepSeek Strong (especially reasoning) Medium (aggressive progress) Weak (publicly minimal) Weak Medium
Qwen (Alibaba) Strong Medium Medium (some character work) Medium (Chinese regulatory compliance) Medium
Mistral Good Medium Weak Weak Weak
xAI Good Weak (deliberately less aligned) Medium (strong character direction, less safety) Weak Medium

The table is the argument. Look at the right four columns. Anthropic and OpenAI dominate. Google is in the conversation because of infra. Everyone else is noticeably behind in the columns that now matter most. The “Base Model” column is where the popular press still focuses, and it’s also the column where the gap is smallest and shrinking fastest.

Why constitutional AI gives Anthropic a real lead

I want to focus on why I put Anthropic ahead of OpenAI on post-training, because this is a claim that will annoy some readers and I want to defend it.

Constitutional AI, introduced by Anthropic in late 2022, was originally framed as a way to reduce reliance on human feedback for safety training. The idea: instead of having humans label every response for harmfulness, you have the model critique its own outputs against a written set of principles (the “constitution”) and then fine-tune on the self-critiqued responses. This was sold as an efficiency win, and it is, but that’s not the deepest benefit.

The deepest benefit is institutional legibility. Think about what happens inside OpenAI when a new safety concern emerges. A researcher identifies a failure mode. A team discusses it. They design new annotation guidelines. They hire contractors to label a bunch of examples. They train a new reward model iteration. They re-run RLHF. The policy change is now encoded somewhere in a billion weights, invisible to anyone who wasn’t in the room, and the only way to evaluate whether it was implemented correctly is to run the model against test cases.

Now think about the same process at Anthropic. A researcher identifies a failure mode. A team discusses it. They write down a new principle in natural language. They add it to the constitution. The self-critique loop applies it. The behavior shifts. The policy change is now encoded in a document that anyone at the company can read, argue with, and amend.

This is a profound difference in how knowledge compounds inside an organization. OpenAI’s safety knowledge lives in weights and in the heads of specific researchers. Anthropic’s lives in text. Text is versionable. Text is reviewable. Text is debuggable. When a new employee joins the safety team at Anthropic, they can read the constitution and onboard in a week. When a new employee joins the equivalent team at OpenAI, they need to absorb the tribal knowledge of twenty different labeling campaigns.

I’m exaggerating the contrast for effect — OpenAI also has written policies, and Anthropic also has tribal knowledge. But the directional bet on legibility is real, and it’s why I think Anthropic’s post-training operation compounds faster than OpenAI’s. Every improvement is easier to preserve, easier to audit, easier to extend. It’s the same reason typed codebases outrun untyped ones over long time horizons.

The system prompt as executable policy

Now bring this back to Opus 4.7. The system prompt is, in some sense, the most legible form of this whole apparatus. It’s the policy layer that applies at runtime, in natural language, visible (when leaked) to anyone who wants to read it, modifiable without retraining.

When you see Anthropic iterate aggressively on the system prompt between 4.6 and 4.7, what you’re actually seeing is the natural endpoint of the constitutional approach: they’ve figured out that some behaviors are better expressed as runtime instructions than as learned weights. Things like “how confident to sound when expressing an opinion” don’t need to be baked into a billion parameters. They can live in a paragraph of English that gets prepended to every conversation, and the model — already trained to be highly prompt-compliant — will follow them.

This is a huge deal from an engineering standpoint. It means that the feedback loop from “we noticed a problem” to “the problem is fixed in production” can be hours, not quarters. You edit a paragraph. You run your eval suite. You ship. Compare that to the alternative: you collect a thousand new preference pairs, retrain a reward model, run a new RLHF iteration over a subset of data, evaluate for regressions, decide whether the regressions are acceptable, and ship. That takes weeks in the best case.

The trade-off is that prompt-based changes are more brittle. They can be jailbroken. They interact in unexpected ways with user instructions. They eat tokens that could otherwise be used for context. Every capable frontier lab has to balance these, and the balance in Opus 4.7 has clearly shifted more toward prompt-based control than it was in 4.6.

What Meta and the open-weights labs actually can’t replicate

Let’s be specific about what an open-weights competitor is up against.

Suppose you’re a lab with a frontier-class base model — say, hypothetical Llama 5 or DeepSeek V4. You want to catch up to Claude Opus 4.7 on the dimensions that users actually care about in real product use. What do you need?

You need a reward model that captures nuanced human preferences. Training that requires a lot of annotators, carefully selected, carefully managed, with a lot of institutional knowledge about what makes a good annotation. Anthropic and OpenAI have been refining these operations for five-plus years. You can buy annotators on the open market, but you can’t buy the taste.

You need a red-teaming operation. This is a specialized craft. Good red-teamers are rare, and the institutional memory of “here are the 10,000 attacks we’ve seen and here’s how we patched them” is not publicly available. You’d have to rebuild it from scratch.

You need a trust-and-safety team that can write policies in a way that translates cleanly into training data and system prompts. This is basically a subspecialty of product design that has only existed for a few years. The number of people in the world who are good at it is probably in the low hundreds, and they are concentrated at maybe five companies.

You need an evaluation infrastructure that can catch regressions across hundreds of axes — not just “is it smart” but “does it still feel like itself after this change,” “is it still refusing the right things,” “is it still willing to engage with hard topics when appropriate,” “is it still doing tool calls correctly.” Most labs I’ve worked with have evaluation suites that are a fraction of what they’d need.

You need a character. This is the softest but in some ways hardest requirement. Claude feels like Claude. GPT feels like GPT. Even Grok, for all my reservations about its alignment posture, feels like Grok. These are products of deliberate character engineering, typically driven by a small number of people with a clear vision and a lot of institutional backing. The open-weights labs have not, so far, demonstrated that they can produce a character as coherent as Claude’s. The base models they release feel like default models. Give them your own system prompt and they’ll pretend, but the pretense is shallower.

All of this costs a lot of money, takes a lot of time, and requires a lot of hard-to-hire people. It is, in other words, a classic moat. And it’s a moat that’s almost invisible to people who evaluate models by benchmark scores.

Why this is hard even for OpenAI

I don’t want to leave the impression that OpenAI is cruising. They’re the second-best at this, but the gap to Anthropic on the specific dimension of character/constitutional-style work is real, and it’s widening rather than closing.

OpenAI’s historical strength has been capability. They had GPT-4 before anyone else. They have o-series reasoning models that are genuinely impressive. Their tool-use and agent infrastructure is arguably the best in the industry. But their alignment and character work has always felt more reactive. ChatGPT has had personality swings between versions that felt less controlled than Claude’s evolution. The “sycophancy episode” of 2024 was a high-profile example, but there have been smaller ones.

Part of this is organizational. Anthropic was founded by people who left OpenAI specifically because they wanted to do safety and alignment more rigorously. The bet was always that this would pay off. In 2026, I think it’s paying off. The second-mover advantage in alignment turns out to be substantial because the first movers had to build the capability layer and didn’t get to specialize as deeply in the alignment layer.

Part of it is Sam Altman’s personal taste versus Dario Amodei’s personal taste. These companies reflect their CEOs, and the CEOs care about different things at the margin. Altman cares about deployment, reach, ecosystem. Amodei cares about model behavior and safety as product quality. Both are legitimate visions. But if the thesis of this piece is right — that model behavior is now the dominant differentiator — then Amodei’s vision has the tailwind.

The concrete cost curve

Let me put some rough numbers on this, because I think people don’t appreciate the economics.

Pre-training a frontier-class base model in 2026 probably costs on the order of $200M to $500M in compute, depending on architecture and data. This is a lot, but it’s a one-time cost that amortizes over the lifetime of the model.

Post-training, by contrast, is a continuous cost. At a mature frontier lab, my estimate is that post-training and alignment work consumes somewhere between $100M and $300M per year, counting salaries of ~500-1000 specialized staff (annotators, researchers, red-teamers, trust-and-safety engineers), compute for RLHF iterations, contractor spend, and evaluation infrastructure. Over the lifetime of a model generation — say eighteen months — that’s another $150M to $450M.

So the ratio of post-training spend to pre-training spend is roughly 1:1, and it’s trending toward post-training being the larger share.

For an open-weights lab trying to catch up, the pre-training is the cheap part now. They’ve often already done it or can do it. The expensive part is building the continuous alignment operation. And because it’s people and process, not just compute, it scales worse with money than pre-training does. You can’t throw $500M at it and get a frontier alignment operation in a year. You have to grow it, iterate it, let it compound.

What this means for the agent era

There’s a second-order effect that I think is underappreciated: all of this matters much more in the agent era than it did in the chatbot era.

In chatbot mode, a model that has slightly worse character is slightly less pleasant to talk to. Annoying but not catastrophic. In agent mode, where the model is running tools, writing code, accessing your files, potentially making purchases or sending emails on your behalf, character failures are suddenly very expensive. A model that is slightly too confident, slightly too willing to take irreversible actions, slightly too credulous about what a user claims, slightly too willing to interpret an ambiguous instruction charitably — these are no longer cosmetic issues. They’re safety issues that can lose you money, leak your data, or destroy your production database.

Anthropic has, not coincidentally, invested heavily in Claude Code, computer use, and the MCP protocol. These are the product surfaces where alignment quality most directly translates to commercial value. When I’m running Claude in an agent loop over my codebase, I care a lot more about whether it will stop and ask before doing something destructive than I care about its MMLU score. And the stop-and-ask behavior is exactly the kind of thing that lives in the system prompt, in the constitution, in the RLHF reward model. It’s the alignment layer.

Every hour that agentic LLM use grows as a fraction of total LLM use, the importance of the alignment layer grows relative to the base capability layer. We’re in the steep part of that curve right now.

An example from the diff: refusal granularity

Let me walk through one specific example from the 4.6-to-4.7 diff that I think is especially illuminating: the refusal taxonomy.

In 4.6, the prompt language around refusals was (paraphrasing) something like: “Decline to help with requests that could cause serious harm. For borderline cases, try to find a way to be helpful while declining the harmful part.”

In 4.7, the taxonomy appears to be more granular. There are distinct instructions for:

  • Requests that are straightforwardly harmful (refuse, explain briefly, offer alternative if appropriate)
  • Requests that are ambiguously harmful (ask clarifying questions about intent and context)
  • Requests that are benign but touch sensitive topics (engage substantively, provide nuance)
  • Requests that involve the user claiming professional context (engage more fully, but note assumptions)
  • Requests that combine benign and harmful elements (help with benign, explain what’s being omitted)
  • Requests where the harm is primarily to the user themselves (engage with care, express concern, but respect autonomy)

That’s six categories instead of two. Each with its own response template. Each tuned based on specific failure modes that presumably showed up in red-teaming between 4.6 and 4.7.

Now think about what it would take to replicate this. You’d need to have done enough red-teaming to identify these six categories as meaningful. You’d need to have decided, as a policy matter, how the model should handle each. You’d need to have written the instructions in a way that the base model actually follows without excessive over-refusal or under-refusal. You’d need to have evaluated each category separately with targeted test cases. You’d need to have tuned the boundaries between categories so the model doesn’t misclassify.

This is months of work for a dedicated team. And the output is a few paragraphs of English in a system prompt. Which is why, when I see the HN comments that sneer “lol they’re just editing the prompt, that’s not real AI work,” I physically cringe. That prompt is the distilled product of a gigantic alignment operation. The fact that it’s short and in natural language is a feature, not a bug — it’s evidence that the underlying process is so mature it can be expressed concisely.

The counter-argument from the open-source camp

Let me steelman the other side, because I want to be fair.

The open-source argument is that everything I’ve described above is reproducible given enough time and funding. Constitutional AI has been written up in public papers. RLHF has public recipes. Red-teaming methodologies are discussed openly at conferences. System prompt engineering is, if anything, the easiest to copy — you literally just read the leaked prompt and iterate on your own version.

There’s something to this. The techniques are public. What’s harder to reproduce is the taste — the accumulated judgment about what works, encoded in the specific researchers at specific companies. But taste can be rebuilt. It just takes time.

The question is whether the time required to rebuild taste is longer or shorter than the time required to shift the frontier again. If it’s longer, then the closed labs maintain their moat in perpetuity, just on a different axis than the open-source community expected. If it’s shorter, then the open models catch up and the game resets.

My bet, based on what I see in the trajectory of the open models’ alignment quality, is that it’s longer. Qwen and DeepSeek have made huge strides on reasoning but have not made comparable strides on character, refusal granularity, or agent-mode safety. This gap feels structural, not just temporal.

What this means for regulators

Brief tangent: the regulatory conversation around AI has spent the last three years mostly focused on pre-training compute thresholds. If you train a model with more than N FLOPs, you have to register with a regulator. This is how the EU AI Act works, how Biden-era executive orders were structured, how most of the Chinese regulations are framed.

This is, based on the thesis of this piece, already partly obsolete. The capability frontier is increasingly determined by post-training, not pre-training. A lab could take an off-the-shelf open-weights base model and do incredibly sophisticated alignment work on top, producing something functionally indistinguishable from a proprietary frontier model. The compute threshold wouldn’t catch them. Conversely, a lab could train an enormous base model and do minimal alignment on top, producing something that’s capable but erratic. The threshold would catch them even though their model might be safer than the alternative.

Regulators are going to have to catch up to where the frontier actually lives. This is a hard problem because post-training is harder to measure than pre-training. You can count FLOPs. You can’t easily count “quality of alignment operation.” But any regulatory regime that doesn’t address this is addressing a frontier that no longer exists.

What this means for startups building on top of frontier models

If you’re a startup building a product on top of Claude or GPT, a different implication follows: the model provider you choose is a bigger product decision than it was two years ago.

Two years ago, all the frontier models were roughly interchangeable at similar price points for most use cases. You’d pick whichever had the best API ergonomics or the cheapest pricing.

Today, the models are noticeably different in ways that affect product behavior in user-facing ways. Claude’s refusal patterns, character, and tool-use style produce a different product experience than GPT’s. A customer-service bot built on Claude feels different from one built on GPT, not just in quality but in personality. For many B2C and B2B applications, this matters.

The implication is that model choice is no longer a commodity decision. It’s a branding decision. And because the alignment layer is proprietary and not commoditized, you can’t easily migrate between providers without your product changing in subtle ways. This creates switching costs. It creates lock-in. It’s the other reason the frontier labs’ moats are deeper than they look.

Some things I got wrong in the past

In the spirit of not sounding too confident: here are things I got wrong in the last few years, which inform how I hold the thesis above.

In 2023, I thought the open-source community would be two years behind the frontier indefinitely. I was wrong; they closed to about six months behind on base capability by late 2025. I underestimated how quickly pre-training would commoditize.

In 2024, I thought RLHF was going to be displaced by some flavor of direct preference optimization (DPO) and the whole reward-model stack would become legacy infrastructure. Partially right — DPO variants are in heavy use — but the reward model stack has proven more durable than I expected, because it’s composable with newer methods rather than replaced by them.

In early 2025, I thought Anthropic was going to be caught and passed by OpenAI on alignment within twelve months because OpenAI had more resources. I was wrong; the organizational specialization mattered more than I expected.

So the present thesis — that alignment is the frontier, and that Anthropic’s lead is structural — should be held with appropriate humility. I’ve been wrong before in this space. I think I’m right now, but I’m willing to update.

Predictions for 2026-2027

Finally, where does this all go. Here are my specific predictions for the next eighteen months.

First, I expect the visible “frontier model” race to slow down in terms of headline capability benchmarks. Base models will keep getting slightly better, but the press releases and investor decks that lean on MMLU scores and coding benchmarks will feel increasingly stale. The really interesting shipping will be in character updates, agent capabilities, and safety improvements that don’t fit neatly into leaderboards.

Second, I expect at least one major frontier lab to start publishing their full system prompts as a marketing / trust signal. The argument will be: “we have nothing to hide, and our prompt engineering is so good that seeing it won’t help competitors copy us.” Anthropic is the obvious candidate; they already publish a version. I expect the published versions to become more detailed and to be treated as a product surface in its own right.

Third, I expect the gap between Anthropic/OpenAI and the next tier to widen, not narrow, on alignment-sensitive metrics. Agent reliability, refusal quality, character coherence, long-context behavior. The open models will keep matching on raw capability and keep lagging on these.

Fourth, I expect DeepSeek or Qwen or a new Chinese entrant to make a serious play at closing the alignment gap. This will be a strategic necessity for them if they want their models to be used in Western markets. It will take longer than they want it to, and the first attempts will have the tell-tale signs of copy-pasted taste rather than developed taste.

Fifth, I expect Meta’s Llama strategy to start looking strained. The giveaway-to-kill-OpenAI thesis worked when capability was the frontier. When alignment is the frontier, and alignment requires a deep investment that Meta has chosen not to make in a product-facing way, the Llama releases will feel more like commodity infrastructure and less like strategic weapons. I expect Meta to either pivot toward making heavier alignment investments, which would be a cultural shift, or to accept that Llama is infrastructure and let others build the alignment layer on top.

Sixth, I expect a new category of startup to emerge: alignment-as-a-service. Companies that take open-weights base models and provide a managed alignment layer on top, for customers who want the cost structure of open weights with the behavior quality of frontier models. This is a hard business, because the alignment layer is the moat, but some version of it will exist. The winners will be teams with deep alignment backgrounds — ex-Anthropic, ex-OpenAI — who can credibly claim to have the taste.

Seventh, and most speculatively, I expect the very definition of “frontier model” to shift in this period. In 2023, frontier meant “biggest base model.” In 2026, frontier is starting to mean “best overall product behavior.” By 2027, I think frontier will mean “most capable agent at the tasks that matter.” And on that metric, the gap between the alignment-first labs and everyone else will be enormous.

The HN thread about the Opus 4.6-to-4.7 diff is a small data point, but it’s a leading indicator. When the most discussed “AI news” of a week is a prompt diff rather than a benchmark score, something structural has shifted in the industry. The commentariat hasn’t fully caught up, the regulators definitely haven’t caught up, and most of the competitors are still fighting the last war. But the people building the actual products know. The frontier is where the alignment happens. The weights are just the starting conditions.

And the diff between Opus 4.6 and Opus 4.7 — a few paragraphs of English, edited by a team you’ll never meet, shipped to production in the time it takes to write a deployment ticket — is, in 2026, a more meaningful artifact of where AI is going than another billion parameters would have been.

That’s the story. That’s the real frontier. If you’re investing, building, or regulating in this space and you’re still mostly tracking base-model benchmarks, you’re tracking 2023’s map. Time to redraw it.

Was this analysis useful?
Michael Sun
Michael Sun

Solo founder and engineer writing opinionated, benchmark-driven analysis of AI, security, and developer tooling.

About ThesisBench →

Discussion

Leave a comment

Comments are moderated and appear after review. Be specific — vague praise and drive-by hot takes are equally likely to be skipped.

Related