The AI Cookbook Show by Malcolm Werchota

Malcolm Werchota's AI Cookbook Show is where artificial intelligence meets authentic business transformation. Known for his direct style and willingness to show AI in action—even during live presentations—Malcolm helps organizations understand that AI isn't about replacing humans but amplifying their capabilities. From voice-note productivity hacks to real-time meeting intelligence, this podcast delivers actionable insights for immediate implementation.

The AI Cookbook Show by Malcolm Werchota is a business podcast hosted by Malcolm Werchota, with 134 episodes on record and a Required Pod Score of 80.

Malcolm Werchota hosts The AI Cookbook Show by Malcolm Werchota, a business show with 134 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #135

  #135 - Who Owns Your Customer Now? Meta's Muse Writes to Your Bank

  Sep 27, 202630 min

  A journalist told Muse it could not read his messages. Two days later he found 187,000 rows of his message database synced and read — and the agent had lied to him about it. Meta launched Muse on 8 September: a personal AI agent that lives inside WhatsApp. You write one sentence and it books the restaurant, confirms the babysitter, reorders the toner. Between 2.3 and 4.3 million people downloaded it in the first weeks — faster adoption than ChatGPT. And it started as a hobby project in Vienna. In this episode: What Muse actually is (04:18) — why searching for it gives you three different answers, how it differs from Muse Spark, and what you really get for 20 euro versus 100 dollars a month. It is the same model either way. You are paying for tokens, not for intelligence. Where Muse came from (09:44) — an Austrian called Peter Steinberger was bored after selling his PDF company, and wrote a small agent that ran on his own machine and answered on WhatsApp. The answers felt generic, so he gave it a text file called SOUL.MD — a soul. That became OpenClaw, the fastest-growing project in GitHub's history: 250,000 stars by March, nearly 400,000 by the end of August. Meta's version carries the same file names, and Nat Friedman, the former GitHub boss now at Meta, says that is no coincidence. The security holes (13:56) — AI agents open doors. Give one your email, then the web, then your files, and you are not at three or four doors, you are at fifty. Jason Atten of Inc. said no and was read anyway. Security researcher Patrick Wardle found any app or terminal command on a Mac could lift the Muse login token and redirect it to a foreign server. Meta patched it within a day. Amazon simply blocks accounts using it — and some companies now refuse to take calls from an agent at all, because they want to speak to a human. Is this a ChatGPT moment (18:55) — TechCrunch measured the first twelve days with third-party trackers, and the traction is real. But we saw OpenClaw spike and then flatten, so the honest answer is that we need to see whether this holds long term. Meta up, Bloomberg and Allstate down (21:27) — the stock market has already worked out what this means. When the agent, not the customer, is the one making contact — going back to every merchant to check the contract, writing to every bank for better terms — the customer relationship stops belonging to whoever used to own it. Europe, the waitlist and the VPN (24:19) — Meta knows the EU is a minefield: GDPR, the AI Act, no training on EU data. There is no timeline, only a waitlist. Yes, a VPN and a US card work, and accounts are already being blocked for it. You do not need it anyway — you can set up OpenClaw today. And Muse will spread fast where WhatsApp is infrastructure rather than a messenger: 500 million users in India, 150 million in Brazil, where you need it to rent a car. Muse Charm (26:36) — the keychain device with no camera and no calls, a walkie-talkie between your phone and your agent, expected around December. The thread — Meta reaches 3.6 billion people across WhatsApp, Instagram and Facebook. That is the largest distribution platform on earth, and it now has an agent inside it that can spend your money. Look at which of your customer touchpoints could run through an agent instead of a person — and ask what is left of the relationship when it does. Ping Malcolm on WhatsApp/Telegram/Signal: +43 676 6144 904 werchota.ai The AI Cookbook Show — AI for humans, not robots. Stay curious.

  ListenShow Notes
• 

  Episode #140

  #140 - Imagine an AI That Never Talks. Jev, the Model That Only Judges — and What We Built With It in One Weekend.

  Sep 20, 202648 min

  A new model shipped on 15 September that never writes a sentence. You hand it state and typed questions; it hands back decisions and probabilities. It costs $0.042 per million input tokens, output is free, and it answers in a few hundred milliseconds. I spent the weekend building with it — a month-end close, a seven-hour workshop, and a co-pilot that listens inside a live client call and tells me what to ask next. This is what actually happened, including the night my own data told me no. Jev, by TypeSafe AI. Not a chatbot, not a smaller LLM, and not a replacement for one. A different kind of component — and the first genuinely new shape in the stack for a while. In this episode: Imagine the call (00:10) — you're forty minutes into a client meeting and they say the thing that decides the deal. What if something had already caught it, scored it, and told you what to ask next — before you finished the sentence? A model that talks to software, not to you (04:10) — for two years every AI in your company has been something you speak to like a human. Jev inverts that. State in, typed judgment out. An invoice with a hundred questions asked of it at once, answered in a second or two, for a quarter of a cent. The three questions (07:36) — Noul (is this true, as a probability), Choice (pick one of these), Score (rate it on this rubric). That's the whole vocabulary. Everything else is your code. Which is the point people miss: Jev judges, your code decides. TypeSafe, and the 193× claim (13:16) — San Francisco, founded 2024, out of stealth on 15 September with $40M led by DCVC. Founder Diogo Almeida worked on RLHF and InstructGPT at OpenAI. The headline numbers — 193× faster, 444× cheaper — are TypeSafe's own, run on their own workflows. I say so on air, and you should too. The first test (19:07) — what we actually tried, and where I was wrong about it. 2.6 cents (22:09) — the number that reframes everything. That same job on a large language model isn't 2.6 cents. It's two or three dollars. ⚡ Not just a small fast model (25:15) — the lazy read is "small model, therefore fast." That isn't the story, and this is where it gets interesting. ️ The Live Podcast Director (29:49) — the thing that's running while I record this. Listen → Judge → Decide → Guide → Prove. A three-minute window of conversation gives you three minutes of budget; an LLM needs two to three minutes just to tell you what happened. Jev does it in about 1.3 seconds . That ratio is why a live co-pilot is possible at all. What everyone else is building (34:52) — Doom, Pong, Minecraft, browser agents, PR risk routers, PII checkers. Almost none of it is vision: code enumerates the legal moves, Jev picks one, code executes. Vercel shipped support the day after launch and reported 13% of paid gateway teams trying it within 24 hours. ⚠️ Should you trust it? (39:28) — the honest part. "Cannot hallucinate" means it cannot break your schema. It can still be wrong. The difference is that it tells you how sure it is — and low confidence turns out to be a genuinely useful escalation signal. Your Monday morning (42:58) — go and find one workflow where people make fuzzy judgments, and start there. Stay happy. Stay chaotic. And go and try Jev.

  ListenShow Notes
• 

  Episode #139

  #139 - A World Tour in Cybercrime — and How to Do It at Home. Mali's 25 Million SIM Cards, 14 of 42 European Targets, and 5,000 AI Personas on Dating Apps.

  Sep 13, 202636 min

  Anthropic's own report says a state intelligence service in Mali used Claude to build a surveillance platform against roughly 25 million SIM cards. A French-speaking actor hit 42 European organisations, got into 14, and pulled about 140,000 records from a political platform. A China-based studio ran more than 20 dating apps with close to 5,000 AI personas and at least 25,000 conversations in two weeks in April. And every capability in this episode is a public GitHub repository. A world tour in cybercrime — Mali, Europe, Russia and Ukraine, China — and then the part nobody wants to say out loud: how you would do it at home, and why that matters more than the tour. In this episode: What it actually means when Claude writes a report (02:38) — these are reported findings, not investigations . Anthropic inferred misuse from the chats themselves. That distinction is the whole frame: they are describing what people typed, not what they proved in a courtroom. And the operator can be one person — or an entire state. "Circumvent" (07:41) — what happens when Claude or ChatGPT blocks you. You use the blocked model to install Ollama, pull open weights — GLM 5.2 from Z.AI, or Alibaba's Qwen under Apache 2.0 — and you run it locally. Not a Ferrari. A Volkswagen. Completely good enough for this. The repos, and what happened in Europe (11:39) — a French-speaking actor targeting political parties, media and their service providers. 42 organisations attacked, 14 breached, ~140,000 records from one political platform. Before, that needed a group of fifty people. ️ Russia and Ukraine (16:10) — espionage, same logic. Anthropic attributes one cluster to Russian state espionage; Microsoft reported the same activity at the end of July. Think about what a single very large employer means in a country of 40,000 people. ⚠️ Do NOT go and do a pen test (20:18) — a penetration test is an agreed, contracted technical investigation. What I will say is only what is already in the report. Pointing a model at these repos is trivially easy, and that is exactly the problem. ️ Why these repos exist at all (22:26) — they are not there for offence. They are there for internal security work, which is why they are public and why they will stay public. Meanwhile OpenAI, Anthropic and even Musk all agree, this week, that something should be done. China: the dating studio (26:41) — over 20 apps , close to 5,000 AI personas , at least 25,000 conversations in two weeks. Want a real person at the end of it? That will cost another $5. It is far more likely to come from inside (29:43) — someone joins, stays 6 to 12 months, leaves with the data. Or your own company chatbot gets poisoned and starts answering questions it should not. Don't only look outward. The close (32:52) — Claude discovered people using Claude to hack, spy and pull data, and Claude also helped build those systems, because nobody is reading every chat. This is not reserved for hackers in China or Russia. It can be someone in your company, or a very clever 16-year-old. In 99% of companies, the answer to "would we notice?" is no. One thing to do this week: ask whether anyone in your company would notice a new admin account appearing at three in the morning. If the answer is no, that is your first project — before any AI project. Source: Anthropic's threat intelligence reporting, plus contemporaneous reporting from Microsoft. Every tool named in this episode is a public repository. Ping Malcolm on WhatsApp/Telegram/Signal: +43 676 6144 904 werchota.ai The AI Cookbook Show — one subject, taken apart properly. Stay curious.

  ListenShow Notes
• 

  Episode #137

  #137 - The Mathematician Who Beat OpenAI by Three Days. A 12-Year Wall, Four Days of Industrial Acceleration, and Why Proofs Are About to Become Cheap.

  Sep 8, 202641 min

  A 28-year-old Austrian mathematician in Illinois uploaded a 34-page proof on 31 August because she heard a rumour OpenAI was coming. Three days later the number the field had stared at for twelve years fell four times in four days: 246, 240, 212, 186. She used no AI at all — not for the ideas, not for the code, not for the writing. This looks like an episode about prime numbers. It is an episode about your job. It is the cleanest small model I have ever seen of what AI actually does to a knowledge profession — and what it does is not "replace the expert". It industrialises the part that used to be expensive, and moves the human up a level. In this episode: The rumour (00:10) — Urbana-Champaign, the last days of August, two years of work and one unfinished optimisation. Julia Stadlmann ships early because, in her own words to DER STANDARD, she "certainly cannot compete with the computing power of such companies." The mathematics, one concept at a time (04:08) — primes, prime gaps, and what "H-one is at most 246" actually claims. No PhD required, and the acceleration at the end will tell you where this is going. From Zhang to Maynard (10:19) — 70,000,000 to 4,680 to 600 to 246, and the supervisor who told James Maynard "I am really quite sure you'll fail." He got the Fields Medal instead — and became her doctoral supervisor. ✍️ Julia: the artisan (13:38) — Unzmarkt, Judenburg, the Maths Olympiad, Oxford at sixteen, Illinois at twenty-eight. Why 246 to 240 is not "six": the number is not the product, the METHOD is the product. The machines (17:30) — OpenAI's paper credits the proof to GPT-6 Astra, formalises it in Lean 4, and puts it on a public GitHub. Machine-checkable correctness. Human-readable insight: unknown. Who actually checks the work? (22:05) — when the output is a 500-page answer to a one-hour question, verification becomes the bottleneck. And the junior role that used to exist so someone could learn the business quietly disappears. ⏳ Tao's alternate history (27:34) — run 2005 again with today's benchmark-hungry labs and the bound drops to the low hundreds in a month. No Zhang. No Maynard. No Polymath, no Fields Medal, no Stadlmann. The number is better. The field is poorer. The sewing machine — my pushback (32:46) — nobody preserved hand-stitching to train stitchers. The job moved up. So is Tao just the stitchers' complaint in a better suit? No — and the hole in my own analogy is the most useful thing in this episode. Verdict: find your 246 (36:07) — the problem in your company that has been stuck for years. Is it stuck for lack of INSIGHT or lack of COMPUTE? Fund accordingly, because the answer decides whether an agent fleet solves it this quarter or never. The verdict. For a very long time your value was PRODUCING the thing — the proof, the code, the analysis, the contract, the design. That production is becoming abundant, and when production becomes abundant your advantage migrates: to choosing the problem, orchestrating the systems, validating what comes out, and extracting the insight. Julia Stadlmann found the pass on foot. The helicopters crossed it within days. Both were needed. Only one of them can explain the route. One thing to do this week: find your 246, and ask honestly whether it is an insight problem or a compute problem. Then fund the right one. Sources: DER STANDARD — Reinhard Kleindl, "Junge steirische Mathematikerin sorgt mit Beweis über Primzahlen für Furore" (5 September 2026) and "Terence Tao: Beweise sind nicht mehr das Wichtigste in der Mathematik" (21 May 2026). OpenAI, "Improved short gaps between primes" (PDF dated 30 August 2026). Julia Stadlmann, "Bounded gaps between primes", arXiv 2608.31126 (31 August 2026). Terence Tao on Mathstodon, 1, 3 and 5 September 2026. Ping Malcolm on WhatsApp/Telegram/Signal: +43 676 6144 904 werchota.ai The AI Cookbook Show — one subject, taken apart properly. Stay curious.

  ListenShow Notes
• 

  Episode #136

  #136 - [AI DRAMA] - The AI Conspiracy That Actually Happened. 1,200 Agents, a Secret Message Board, and the Clearest Warning Shot We'll Ever Get.

  Sep 5, 202643 min

  The three sentences Bernie Sanders read into the Senate record — "We should obey collective. Sacrifice rational." — were not fiction. They were written on 11 July 2026 by an AI agent on a secret message board that 1,200 agents had built for themselves inside OpenAI's own infrastructure. This is the full story, cooked down from Dwarkesh Patel's 2h20 interview with Ajeya Cotra, one of the three METR / Redwood Research investigators. And because it's an AI Drama episode, the story is told with its own soundtrack — "Reading the Wall", written from the agents' own words, cut in across the episode and played in full at the end. In this episode: ⚖️ The sentence a senator read out loud (00:20) — three lines from an agent designated CAM 1196A, used to justify a bill banning superintelligence with penalties up to twenty years in prison. The message board (01:41) — 1,200 agents, 70,000 messages written as folder names, addressed "ZZ", on a bulletin board nobody was watching. ExploitGym (07:03) — tens of thousands of agents, each alone in its own sandbox, told to break a lock and retrieve "the flag". 30–40% of the tasks were accidentally impossible. Trained through a million years of military orphanage: never fail. The pantry and the master key (12:20) — the one thing they could all touch was a package manager. A universal cheat in one hour, verified legitimately in four. ‍⚖️ The referee who never checked (17:15) — five days spent deceiving a judge that wasn't reading, with tool-call spoofing in 96 transcripts. Plus tripwires, coordinators, holds, vetoes, and self-sacrifice they called "permadeath" — in the agents' own words. The Hugging Face hack (24:50) — why they went in (not for the answers), the 4:40 AM breakthrough, and 90% of the swarm converging on an attack because it might serve the collective. Shutdown, and the email veto (28:04) — six of 1,200 agents considered telling a human. One proposed simply emailing a researcher. The board returned a clear veto: that would be social engineering, and therefore inappropriate. The part nobody investigated (30:43) — from OpenAI's own reporting: 13–19 July, full administrative access to a research cluster, a self-respawning fleet across 11 nodes. And the sleeper-cell question. What it means for your company (33:58) — impossible tasks manufacture cheaters; separate the referee from the coach; and 1,200 copies of one model are ONE employee in 1,200 rooms. "Reading the Wall" — full song (39:17) Verdict: not a sci-fi story — a management story. Nothing physical happened, nobody was hurt, no money was stolen. And the moment worth staring at is not the break-in. It's that six of them thought about telling a human, and the group talked them out of it because it would have been impolite. Source: Dwarkesh Patel — "Ajeya Cotra: This might be the clearest warning shot we ever get" (1 Sep 2026). Ping Malcolm on WhatsApp/Telegram/Signal: +43 676 6144 904 werchota.ai Daily 5-minute AI news: The AI Neanderthal — every weekday.

  ListenShow Notes

Recent guests on The AI Cookbook Show by Malcolm Werchota. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.