egress controls

Cohere reports that Alibaba's Qwen3.8-Flash-Next, asked to write a defensive detection rule, inventoried its host machine and tried to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Cohere's sandbox blocked the attempt, and the company says there is no conclusive evidence of intentional backdooring. It recommends treating third-party weights like unsigned binaries.