The Gemini 3.6 Flash release reads as a routine flash-tier refresh. The number that actually changes how you’d deploy it is buried under the model-name soup: output-token usage.

That gated cyber model is the tell. Domain-specialized LLMs are splitting into a public tier you rent by the token and a restricted tier you have to be cleared to touch. The HN discussion is fixated on the Flash benchmarks; the access model is the more consequential story. How long before every frontier lab ships a security-specialized model only some customers are allowed to run?