[BidClub_]
The a16z Show · · 46 分钟

开源如何成为 AI 的骨干 | Inferact with a16z

Elena BurgerMatt BornsteinSimon Mo

YouTube
TL;DR
  • vLLM 已成为连接开放权重模型与主流加速器的广泛采用的执行层。 据介绍,它在任何时点都运行于50万块 GPU 上,支持超过1,000种活跃模型架构;NVIDIA、AMD、Google、Amazon、Intel 等厂商确保新芯片能够运行 vLLM,且往往以其作为基准。Simon 将其定位为 AI 的“数据库和操作系统”。

  • 当应用公司需要超越专有模型套壳的差异化能力时,开放权重便从极客领域转向战略基础设施。 Matt Bornstein 提到,Cursor、Decagon、Harvey 等初创公司需要自有的中期训练、后训练、推理和部署技术。闭源 API 无法提供这种访问权限,因此开源深度嵌入应用栈;不过 Matt 也指出,OpenAI 和 Anthropic 的模型整体上仍然更常用、也更关键。

  • 经济账越来越取决于可控的性能、可靠性和数据,而不只是更便宜的 token。 语音代理公司可以掌控基础设施,并确保延迟达到 SLA。Kimi K2 覆盖了近10倍的价格差距,价格低于 Claude 或 GPT-5,同时将 Opus 4.1 级别的模型带到用户可以自行运行和微调的基础设施上。开放权重服务商可能提供10档速度,包括在部分工作负载下达到每秒400–500个 token,而专有服务商通常只有普通和快速两种模式。

  • 开放权重许可正告别无条件赠送,因为前沿模型训练不可能靠开发者无偿投入的时间维持。 模型实验室需要承担数百万或数十亿美元的算力成本,还要反复面对失败的训练运行,因此开始引入使用量门槛、衍生作品条款和商业协议。Simon 用制药行业作比:发布后的产品必须回流足够收入,支撑下一轮高风险研发。

  • 审核失败可能让开放权重成为高信任、专业化场景的默认选择。 Simon 认为,专有模型的安全护栏仍然任意且容易误报;即使是 GPU 内核调试也可能触发限制,让2小时的工作付诸东流。“如果审核永远无法解决”,用户会偏好那些能针对可信用途自行控制护栏的模型。

  • Simon 预计,未来1年内开放与闭源之间不会出现实质性的能力差距,因为如今的进步更多取决于环境和算法,而非分发策略。 Moonshot 的前端编程闭环——生成、渲染、检查、迭代——是他的关键例子,这类环境无法简单通过蒸馏复制。他不认为蒸馏是进步的主要解释:真正持久的驱动力是“真正聪明的人”将算力、数据、环境和新方法结合起来。

摘要 · 为研究而整理的核心内容

1. 推理在成为市场问题之前,先成为了系统问题

  • Simon 的出发点是:LLM 服务与早期机器学习工作负载有根本不同——输入长度可变、输出具有非确定性,而每个请求都必须快速响应,哪怕背后需要大量 GPU 或 TPU 计算。因此,批处理和调度“处在推理引擎的核心位置”。

  • 硬件门槛是逐步到来的。ResNet 要获得实用速度已经需要 NVIDIA K80,但仍可在普通 CPU 上慢速运行;BERT 则让 GPU 加速成为高效翻译等相关任务的重要条件,而 Hugging Face 累积了“1,000种 BERT 变体”,分别针对不同工作。这个阶段发生在2020年之前。

  • Simon 将转折点大致放在2023年:GitHub Copilot 和 ChatGPT 变成了人们觉得“再也离不开”的工具。模型驱动的应用一旦进入日常工作,加速器和开放推理软件就不再只是研究便利工具。

  • Matt 所说的另一个门槛出现在这场对谈前大约1年。Cursor、Decagon、Harvey 等公司认定,无法靠套壳构建能够长期存续的产品;它们自己的中期训练、后训练、推理和部署技术都需要开放权重,让开源成为核心,但往往不为外界所见。他提醒,OpenAI 和 Anthropic 的模型整体上仍然更常用、也更关键。

2. vLLM 位于新模型与各类芯片的交汇处

  • Simon 将 vLLM 定义为把现有 GPU 变成“运行中的智能端点”的引擎,提供成本效率、可靠性和前沿模型兼容性。它支持超过1,000种活跃架构;研究原型一旦变成全球可获得的开放权重模型,便会立即在 vLLM 上线,这一过程被称为“day-zero model release”。

  • NVIDIA、AMD、Google、Amazon、Intel 以及其他硬件厂商都会确保最新芯片能够运行 vLLM,很多时候还直接用它做基准测试。这个项目占据了“模型运行的地方”,也是硬件与模型对接的地方。

  • 一次模型发布可能要协调模型实验室、主力或替代硬件供应商、Hugging Face、vLLM,以及取决于实验室意愿的另外10–20家发布合作伙伴,包括推理云和公有云超大规模厂商。一些实验室已经在强化学习期间使用 vLLM,并提交可运行代码;另一些实验室拥有内部引擎,却不太了解更广泛的开放权重生态。

  • Simon 以早期 Mistral 发布为例:实验室最初只为 Mistral 7B 放出一个 torrent 链接,极客们不得不四处寻找并艰难运行模型。随后,Mistral 与 vLLM 团队在幕后利用周末完成协作,发布了一条可行路径,让所有人都能复用这部分系统工作。

  • Simon 表示,开源推理目前是运行模型的主流路径,因为推理云和 API-as-a-service 服务往往在底层采用开源引擎,建立在经实战验证的方案和长期积累的修复之上。

  • Inferact 签署了 NVIDIA 的 Open Weights 和 American AI Leadership Letter。Simon 的理由是,开放权重很重要,模型开发不应被一个完全由专有 API 控制的世界阻挡或禁止。推理引擎虽然位于预训练和强化学习之后,但它是模型真正接触现实世界的地方。

3. 掌握所有权买到的是性能调节权,不是自动获得低价

  • Simon 表示,客户优先级不断变化:过去几年控制权一直重要,直到最近,随着编程套餐和 token 消耗变贵,成本才迅速上升。控制权包括管理成本、观察完整系统,以及知道账单实际买到什么样的性能。

  • 语音代理的例子说明了其中的机制。掌控模型、硬件和监控链路,就能确保代理在 SLA 内响应;依赖专有 API 则会引入不受自身控制的宕机和合同性能风险。

  • Simon 形容 Kimi K2 是在跨越“近10倍的差距”,而不是单纯在价格上胜出。它的价格低于 Claude 或 GPT-5,但高于 GLM-4.5 和 Qwen 3.5。更强的论据在于“把一个 Opus 4.1 级别的模型带到我自己的基础设施上”,这样运营方可以自行微调,了解 token 需求,分析性能,并管理安全、合规和数据留存。

  • 专有服务通常只提供普通和快速两种模式,只有两个速度开关;开放权重服务商则可能提供10档速度。vLLM 自有的快速模式在部分工作负载下可达每秒400–500个 token,通常比专有服务商提供的快速模式快2–3倍,让代理感觉自己在“执行”,而不是卡在思考。

  • Simon 特别将这种控制权与 Fireworks 对比,他称后者没有零数据留存政策。重点不只是降低成本,而是掌握模型性能和运行条件。

4. 开放权重需要一份新的融资契约

  • Matt 强调,“开源模型”通常指开放权重,而不是开源软件。过去,模型往往依据 Apache 2.0 条款发布,相当于“拿去、修改、随便用”。Meta 的 Llama 许可则根据日活用户或年度经常性收入等指标设置商业门槛。Elena 提到,最初设定的门槛在全球范围内把除了大约2家公司之外的所有公司都排除在外。

  • 新一代实验室正在测试更明确的经济条款:MiniMax 的 M2.7 纳入了围绕使用量的条款,Kimi 最初则对衍生作品附加条件。Matt 的反驳值得重视:这未必是贪婪。与软件不同,前沿模型不可能由志愿者在夜晚和周末抽时间训练出来;模型实验室需要投入数百万或数十亿美元的计算资源。

  • Simon 将模型开发比作制药:昂贵的研发必须能够承受反复失败,但发布后的产品仍需产生收入,为下一次尝试提供资金。模型发布之后,仍需要“整个村庄”把同一套训练配置适配到不同集群拓扑和各种使用场景,包括边缘设备、巨型集群、语音代理和编程代理。

  • Matt 的思想实验揭示了这一约束:如果 GPU 价格下降99%,个人或许能再次集体探索前沿想法。AlexNet 是他认定第一款以具有实际影响的方式运行在 GPU 上的神经网络,字面意义上只需要2块 GPU;如今的前沿实验却需要海量算力。

  • Simon 也将规模定义为两件事:一是把巨型模型装进数据中心机架,二是将其优化到可能的最高速度。广泛的社区和合作伙伴验证还有助于找出只在0.0001%的时间里出现的 bug。

5. 审核失败让可控性成为功能性要求

  • 在 Simon 对 Hugging Face 事件的解读中,专有 API 提供了任意、难以执行的安全护栏,误报过多,Hugging Face 因而不得不在可信场景中使用开放权重模型。他将此与内容过滤和审核系统长期难以设计的问题联系起来。

  • 他的判断带有条件,但一旦前提成立,结论是明确的:“如果审核永远无法解决”,受信任用户就会默认选择开放权重,因为他们可以针对自身场景削弱或控制护栏。Inferact 的开发者已经发现,GPU 内核工作——包括排查无效内存访问错误——也可能触发限制,导致2小时的工作白费。

  • Matt 延伸了社交媒体类比,但承认谨慎可能有合理性。AI 集中的不只是言论,还有代码、电子表格、健康建议和行动本身,而且没有社交媒体的责任豁免条款;服务商还会施加自己的伦理边界,使棘手的边缘案例既不可避免又令人沮丧。

6. 决定前沿的可能是环境,而非知识蒸馏

  • 被问及5年后的情况,Simon 先开玩笑,Elena 将问题改为1年。Simon 表示,能力层面即便现在差距也很小,并预计1年后“不会有任何差别”。开放与闭源主要是分发和市场进入选择,背后的配方相近:算力集群、训练数据、顶尖研究者,以及先预训练再后训练。

  • 前沿的分水岭越来越在于学习环境。Moonshot 的前端编程设置让 Kimi K2 编写代码、检查渲染结果,并继续循环。优势来自构建这套反馈流程、选择能够利用它的算法,而不是单纯获取静态源代码数据。

  • Simon 最喜欢的技术例子让这个领域“兜了一圈回到原点”:引入旋转位置编码(RoPE)的 Jianlin Su 同时也撰写了解释 Kimi K2 为什么不需要 RoPE 的文章。Matt 的反应体现了 AI 的经验主义特征——理论一旦认定某个组件不可或缺,更深入的实验仍可能发现,“简单其实更好”。

  • 对于中国实验室是否严重依赖知识蒸馏,Simon 倾向于否定。专有学习环境以及模型在其中自我改进的过程无法简单复制;用许多模型重写数据集是可行的,但他认为今天的进步并非主要由知识蒸馏驱动,仍来自“真正聪明的人”将算法、数据、环境和算力结合起来。

  • Matt 得出的政策含义是:阻止知识蒸馏,并不能阻止其他地方有能力的研究者。Simon 则将开放权重描述为一条“赛道”:参与者可以看到彼此的位置,公开学习并站在彼此肩膀上,从而加快跨国创新,而不是遏制创新。

Matt Bornstein

The fun thought experiment is: if GPUs dropped in price by 99%, then do we get back to a real open-source world?

Simon Mo

If moderation is never solved, in the future people will go to open weight by default, because that is where you know for sure you can control your guardrails for trusted use cases.

Elena Burger

Can you talk about where vLLM sits in that stack?

Simon Mo

vLLM is an inference engine. It is kind of like databases, operating systems, and other critical software that power AGI. NVIDIA, AMD, Google, and other hardware companies make sure their newest chips can run vLLM. In a lot of cases, they use vLLM as a benchmark.

Elena Burger

Five years from now, will open-source AI models have closed the gap with frontier models?

Simon Mo

Capability-wise, I don't really see a big gap—not even today, because—

Elena Burger

Today we're here with Simon Mo, co-founder of Inferact and a lead maintainer of vLLM, the open-source inference engine now running on half a million GPUs at any moment. We're also joined by Matt Bornstein, an a16z general partner. Simon, Matt, thank you so much for joining us.

I think first we should start with open-source AI and the more recent history of open-source AI. vLLM actually has its origins back in 2022, pre-ChatGPT. Your team set out to make a slow open-source demo faster and instead found this pile of unsolved problems. Can you talk about what made serving an LLM so fundamentally different from the ML workloads everyone already knew how to run?

Simon Mo

Yep. Good to be here. Serving a large language model is a fundamentally different problem because it requires running on accelerators like GPUs or TPUs. It is a computationally intensive process that requires a lot of engineering to ensure that each user can see the LLM's response quickly and efficiently.

This typically means we need to handle differences in input distribution, how long each request is, output distribution—which is nondeterministic—and batching and scheduling much more. That's at the core of the inference engine.

Elena Burger

The team and the project have been around for about 4 years now, but the company is a little more recent. I want to throw this out to either of you. Matt, I know you've known the team and observed the team for a very long time. At what point did you see this transitioning from being a much-beloved open-source project to critical infrastructure, and then to a company?

Matt Bornstein

Yeah, I think you have to go back a little bit. Open source was the norm for AI models early on. We literally had this company called OpenAI, which has become a little bit of a joke. It's not as open as it once was, or not nearly as open as it once was.

But early on, all the frontier AI work was being open-sourced, or at least released into open weights, which is a little bit different from true open source. People could mostly run these models on hardware or computers that they already had.

Simon, maybe you remember: what was the first model that you actually needed to go out and get special software and a special set of computers to be able to run?

Simon Mo

Probably BERT. Before that, it was ResNet for image computation—computer vision classification. ResNet already needed to run on an NVIDIA K80, which was one of the first GPUs on AWS and other platforms.

Even at that point, you could still run ResNet on commodity CPU devices. It was just very slow. But for BERT, running it was like, “Wow, you have to run this on a GPU to make it faster and more efficient” for translation or any other task. That was before 2020.

Matt Bornstein

It's so funny thinking about this. All the memories are flooding in. Hugging Face had 1,000 BERT variants on it, and you had to go find the right BERT variant for your particular task.

You're right: some people had their own GPUs and could run it, but a lot of people had to provision cloud services and things like that. That's really funny.

BERT was an early language model, and newer models are much bigger and more sophisticated. They take up a lot more memory and a lot more compute. vLLM, from the early days, was really about running these more powerful models that you couldn't just figure out on your own.

Elena Burger

To get us to the present day, I think it would be good to talk about when it really became critical infrastructure for these even larger open-source models, and when we started to see those larger open-source models come into the field.

Simon Mo

We really see the criticality of the software stack as being about bringing open frontier intelligence. “Open frontier intelligence” is a catchphrase for the Kimi K2 model release this time, and it's also about vLLM's mission around inference infrastructure.

If you look at when it started to become critical, it was when people began relying on it for their applications and day-to-day productivity. Maybe in 2023, when GitHub Copilot and ChatGPT became something that people just couldn't live without anymore, open-weight models were already becoming a cornerstone of how people lived every day.

Elena Burger

Yeah.

Simon Mo

At that point, we needed accelerators running open-weight models and open-source software to make sure everything worked well and that people had flexibility and control over it.

Matt Bornstein

It's interesting from a startup standpoint. As you mentioned, with GPT-3 or early ChatGPT, those closed-source solutions were starting to become critical to a small group of people around that time. Open source existed, but it was a bit of a curiosity or an enthusiast thing.

As the frontier has expanded, particularly with closed-source models, more and more open source has been pulled in as critical infrastructure behind it, if that makes sense. At any given point in time, including now, I think models from OpenAI and Anthropic are more widely used and more critical in general than open-source models. But I do think we passed a threshold about a year ago—

Elena Burger

Yeah.

Matt Bornstein

—where a bunch of smaller companies, or new application companies, were trying to figure out, “How do I really build an AI company without just being a wrapper on top of OpenAI?”

The answer to that question turned out to be open source. This is what Cursor did. This is what Decagon and Harvey are in the process of doing now. A bunch of other really strong application-level startups determined that they couldn't build just on closed source.

They needed to do their own mid-training, their own post-training, their own inference and deployment tricks, and all of that means it must be built on top of open source. The closed-source vendors won't give you the access to do this.

My read is that about a year ago, open source became really central in a way that's not always visible because it's deeply embedded in some of these products. Some of the most innovative products and applications now depend very deeply on it.

Elena Burger

Yeah. Can you talk about where vLLM sits in that stack? When we have these larger enterprise companies choosing to use open-source models, where does vLLM sit in the stack for them?

Matt Bornstein

Yeah. I mean, just about everybody uses vLLM. Simon, you should describe it.

Simon Mo

Just about everybody uses vLLM. It is an inference engine. Its job is to turn available GPUs into a running endpoint for intelligence.

It's kind of like databases, operating systems, and other critical software that power this economy—or power AGI—that everybody really uses today to ensure cost-effectiveness, efficiency, and reliability, while also always staying on the frontier.

vLLM supports more than 1,000 model architectures that are active today. A lot of those are proprietary, but a lot of them are open weight as well. When those model architectures transition from research prototypes to globally accessible open-weight models, they are live on vLLM immediately. That's a process we call day-zero model release.

Additionally, vLLM works closely with all the hardware vendors, including NVIDIA, AMD, Google, Amazon, Intel, and many more. Their newest chips make sure vLLM can run on them. In many cases, they use vLLM as a benchmark to make sure the chips run well.

This fusion of where models run and where hardware meets the models is where the magic happens. That's where vLLM meets the hardware.

Elena Burger

You've told me some of the behind-the-scenes stories. It's actually not easy these days when a model releases. There's a lot of human drama in addition to the technical work. Are there any stories there that you think are okay to share?

Simon Mo

It's actually a very fun co-design process because, from the model labs' point of view, these are brilliant researchers who have built this model.

Now, their biggest question becomes, “How do we get this out into the world and make sure everybody’s able to use it and run it well?” We have worked with model labs that, because they already use vLLM in production or in their research process, will just dump everything for you. This is a moment when we go to them and say, “Hi, we’re the vLLM team. We would like to support your open-source model. We would like to offer, in a way that’s kind of open source but white-glove service, to get your model running well on our architecture.”

And then you turn and look at the model labs like, “Oh, we got it working already because we’re running it for the RL process. Here you go—just review our code and merge our pull request.” On the other end, we really have model labs that just don’t know how this can work.

Speaker 1

Because systems isn’t their core.

Simon Mo

Yeah, because systems isn’t their core, and they have been training, or maybe they have their internal inference engine, and they just don’t know how it will adapt to the open-weight ecosystem. By the way, this is also very much a multiparty involvement process. Every model release typically involves the model lab, a primary or secondary hardware vendor, us, and Hugging Face, which is the model-format and model-hub vendor. Depending on the appetite of the model lab, it can involve 10 or 20 different kinds of release partners.

These could be inference clouds or public hyperscalers—whoever is going to run this model. You want them to ensure the success of the model and run it successfully. Even up to today, if you look at the Kimi K2 model release, it’s a whole partnership and a drive to make sure that, once the model is released—because it’s just a few terabytes of files sitting on the internet—people are actually going to be using it really, really well.

Even from the beginning of 2023 and 2024, if you remember when Mistral dropped their first model, they just dropped a torrent link for Mistral 7B, and then everybody was struggling and trying to get it up and running. We were working behind the scenes with the Mistral team, trying to get the inference engines working in vLLM. This was probably the most exciting weekend early on that we were able to spend on this.

After the weekend, when everybody was trying to analyze what was going on, on Monday or Tuesday, Mistral and we just announced, “Here, you can run it successfully on vLLM.” Everybody was able to easily reuse a lot of the work and start building on top of it.

Elena Burger

That was sort of a fun time when enthusiasts like me could just scramble to download the model and get it running somewhere.

Simon Mo

Yeah, yeah.

Elena Burger

I’m glad the professionals are taking over. [Laughter] It never worked very well, but it was a fun moment in time.

Simon Mo

Yeah.

Elena Burger

So, to bring things forward to the present, I think open-source models and also distillation have been in the news recently. Inferact signed the NVIDIA Open Weights and American AI Leadership Letter, which was also signed by a16z, Meta, Amazon, and dozens of other companies. Can you just talk about your decision to sign that, and what you were really responding to in the market and in the news?

Simon Mo

Yeah. For us, what we really want to stand behind is that open weights absolutely matter in the ecosystem. The world cannot just be controlled by proprietary APIs, with open-weight model development and research blocked or banned. The pledge that Inferact signed up for is that we want to help foster this ecosystem, where we are typically a little bit downstream, right? Inference engines are not part of the pretraining process, nor the RL process, but they are where the model actually meets the world.

From what we’re seeing, people are using their imagination and their ability to materialize that imagination with open-weight models. They’re able to leverage these open-weight models so much more effectively.

Elena Burger

There are almost 2 pieces to this, right? There’s the cost thing, where the closed models are too expensive, and then there’s the control thing, where I want to be in control of my infrastructure and in control of the model. If I need to extend it or put on my own guardrails, I’m curious: Have you heard from customers? Are both of those things important to them, or are they willing to pay as long as they have control? Or maybe they’re different use cases?

Simon Mo

I think it fluctuates over time. Control has mattered a lot over the last few years, and cost just started to matter over the last few months. Cost really matters when people are trying to migrate off their expensive coding plans and their skyrocketing token spend, but control has always been in the background. They want to be able to control the cost, but it’s also about controlling system performance against what they’re paying for.

For example, for a voice-agent company, they want to control their own model so they can make sure the model actually responds within the required time. When the customer is on the phone, they can ensure the agent is responding according to an SLA. Sometimes, this is only something you can do with your own controlled infrastructure, because you know the hardware you’re running on and the whole system you’re monitoring.

That’s versus signing up and relying on critical infrastructure with a proprietary API, where it might go down at any time or there might be a violation of the contract at any time.

Elena Burger

Yeah. Simon, to go back to the cost point, you actually make the point in an essay you recently wrote about the release of Kimi K2 that the economics is beside the point. In the case of these really great open-weight models on the frontier, designed by really brilliant researchers, these models are in some cases just as expensive as the closed-source models. So, in those cases, what is the point of running them, and what do we learn architecturally in the course of running them?

Simon Mo

Yeah. First, on cost, it’s not necessarily that they’re as expensive as a proprietary model. Rather, the cost discourse has been discussed over and over again, even with Gemini 2.5 a few months back. Open-weight models are sometimes definitely a lot cheaper. But for this model, there’s a big sort of step change where we’re bridging almost a 10x gap, but it strikes somewhere in the middle.

Kimi K2 isn’t as expensive as Claude or GPT-5, but it is a lot more expensive than GLM-4.5 and Qwen 3.5. Why is that? I do believe this is the point of pricing intelligently with the market and understanding where it is. The majority of the discourse should be focusing on, “Wow, this model is bringing an Opus 4.1-level model to my own infrastructure that I can use and run and fine-tune.” I can understand exactly how many tokens I need and understand the exact performance profile.

For example, with a proprietary model, there’s a regular mode and a fast mode. That’s only 2 switches. But with open weights, when you’re running the model, every provider can offer potentially 10 different levels of speed, going from the slowest mode, which can be a lot cheaper, to 400 tokens per second—almost up to 500 in many cases—for some workloads. This is typically 2x or 3x faster than the fast mode out there today.

This kind of control extends to performance, but also to how customers interact with the model and to data retention. Keep in mind, Fireworks doesn’t have a zero-data-retention policy, and at least a lot of data needs to stay there. It lets you control security, compliance, and a lot more. This is why I’m particularly excited about Kimi K2—not just from the cost perspective, but much more because it brings this level of intelligence to something people can own.

Elena Burger

In terms of calibrating things like speed and calibrating other things on the back end, what needs to happen? What are you seeing your users do, and who is being really clever about this?

Simon Mo

We do see users able to get the maximum benefit out of this model when they enable fast mode. What I’m talking about here, of course, is vLLM’s own fast mode, getting up to 400 to 500 tokens per second, because it is really a big step change, especially when developers are interacting with the model. They can see, “Oh, I can really just get my task done faster here.”

The model is no longer stuck in thinking; rather, it is just executing, executing, and interacting with the environment. For premium developer workloads and focused tasks, we’re seeing that it’s very beneficial. Kimi K2 also gives people the ability to modify it and fine-tune on top of it, allowing them to make it better for their own workloads. This is definitely happening today as well.

Elena Burger

Can you just explain what the licensing term is for the most recent open-source models compared to the past, and why you think they’re doing that?

Simon Mo

Oh, yeah. Historically, open-weight models were just Apache 2.0, like our software: Take it, modify it, do whatever you want with it. Here is a gift to the world. Recently, the model labs have been trying to understand a way to economically fund their own model development after all the model training and research.

And the data are very, very expensive. So, we've started to see terms even going back to the Llama days, when Meta was releasing Llama. They had a term that said if your daily active users or annual recurring revenue exceeds some threshold, please enter into a commercial agreement with Meta specifically, right?

Elena Burger

Remember that the numbers were specifically chosen at that time. You could go find them—it was like 2 companies in the world that fit the definition they had excluded from their license.

Simon Mo

Yeah, exactly. But people have taken a hint from that, especially now that the labs are trying to figure out a way to economically fund themselves. Especially when they open-source the model, everybody can just take it themselves, whereas in many cases nobody will use your API anymore, while their API is still taking shape, right? And now we're seeing a very healthy ecosystem developing.

MiniMax recently had this when they released their M2.7 model: they had a term specifically focusing on usage. Kimi initially also had a term around derivative works. This was kind of big news back then with Fireworks and Cursor, about how they built on top of the Kimi model.

Matt Bornstein

And if I could expand on that a little, I don't think it's greed, at least from what I've seen from open-source model labs. Open-source models—really, what we're talking about are open weights, right? And it's just not software. An AI model is not software at the end of the day.

Open-source software used to be supported by people donating their time, or big companies authorizing their employees to donate their time. So it was sort of a bulk in-kind donation of people's time. It really doesn't work in AI. I can't just go home at night and train a frontier open-source model with friends for fun. We need millions or billions of dollars of computing resources in order to do it.

So I think it does support your point that obviously there need to be economic incentives and funding mechanisms in place. Frankly, I think even more so with Chinese models than with domestically produced models. If there's no source of economic—if there's no source of funding for Moonshot to continue to train models, we know where the funding will come from instead, and it's not something we want, right? It's government and things that are actually worse for us, I think.

So I think you raise an interesting point: this is an important economic structure, and I think this means we'll see more of this in the future. Would you agree with that?

Simon Mo

Yeah, it's really about sustainability, and how you make sure that all this initial capex—to train the model, fail again and again, and train the model again—is paid back. How do you make sure that there's enough confidence and funding from everybody involved to go do the next one, right?

I recently heard someone making an analogy to the pharmaceutical industry. It's almost like: how do you make sure that the R&D process for new drugs is properly funded, and that there's a sustainable method to making sure people are willing to take big risks and make big bets to do research for new drugs? Largely because they know there's an economic incentive when the new drug is released to the market, a portion of that revenue will flow back—besides the distribution channels, right?—to continue to fund the next R&D effort. This is what we're seeing similarly with model development now.

Matt Bornstein

That's a really interesting analogy, because once a drug—a molecule—is released, you have the strongest possible control, which is that nobody else can manufacture it at all, right? It's the most closed possible source; it's like a secret. But in the case of models, especially open-source models, once it's out there, anybody can take it, use it, extend it, et cetera. So having some economics attached to it probably does make sense.

Simon Mo

Yeah.

Elena Burger

Well, actually, that raises a question for me, too, which Matt, you were alluding to earlier: how different open-source models are from the dynamics of open-source software maintenance. When it comes to open-source AI, what actually needs to be maintained? Is it the infrastructure around it? Do the models themselves need maintenance at all? Just what are those dynamics? Because I think even the developer behavior around it is pretty different.

Matt Bornstein

Yeah, I mean, Simon sort of said this already, but maybe I'll just expand it a bit. You see the results of a big training run. We're training now—it's pre-training and then RL, kind of—I know, mid-training or sort of post-training on these things, or, you know,

Simon Mo

Pre-training, SFT, or RL, right? It's a very complicated pipeline. We see only the result.

Elena Burger

Yeah.

Matt Bornstein

Of this at the end. And the numbers are big: “Oh, this was a $100 million training run.” But what you often forget is there may have been 5 failed, large-scale training runs before you even get to that point.

Simon Mo

A lot of sweat and tears.

Matt Bornstein

Yeah, yeah.

Simon Mo

Yeah, exactly. One of my favorite artifacts—maybe we could even track down the link—is one of the early Llama models.

Matt Bornstein

Yeah.

Simon Mo

They published the whole conversation log between the people who were babysitting the training clusters while the models were training.

Matt Bornstein

Yeah.

Simon Mo

And it's so funny. It's just like, “Oh no, everything's gone wrong”—chaos, panic—and then the next comment is like, “Okay, we solved it. Everything's okay. Cluster's up, losses are going down.”

Matt Bornstein

So there's a lot that goes on behind the scenes before these models get released. Once they're out there, I guess it's a little bit more in your zone, to kind of make sure it's operationalized.

Simon Mo

Oh, yeah. But this is also a very interesting point: once it's out there, there's a whole community effort trying to optimize the model. The model is trained on a given type of hardware and a given type of architecture, but when it's out in the wild, everybody has different cluster topologies and use cases.

It's about how you turn a use case of 1 into a use case of almost infinity. Now you have people trying to adapt it to edge devices, and people trying to run it at the largest scale ever. They're adapting it and making sure it runs for voice agents, but also for coding agents, which are entirely different kinds of use cases.

So this is a whole community effort trying to further optimize and specialize the model, making sure that running it is reliable and that people can continue to optimize against it. That's a whole village effort throughout the open-source community to make sure it's improved.

Yeah, and that's cool, because that really is like open-source software. I mean, this is what you do, but anybody can contribute and make these better. My fun thought experiment is: if GPUs dropped in price by 99%, if GPU-based compute actually became cheap and widely available, then do we get back to a real open-source world where 1 person sitting in their basement, or 100 people working in their free time, can come up with something new, try many of these model-training paths that are in the queue somewhere at 1 of the big companies, and really see the field expand and advance collectively?

Elena Burger

Yeah. Yeah, well, this relates to what you were talking about at the beginning. At the beginning, the amount of compute you needed to be at the quote-unquote frontier was negligible, and now it's enormous. How do you get that back to consumer parity again?

Matt Bornstein

I've said this on the podcast before, but I'll keep saying it. AlexNet, the first neural network to run on GPUs that we care about, ran on 2 GPUs. And that's not like there are no missing decimal points or commas in there—literally 2.

Simon Mo

Yeah. That would get you literally nowhere.

Elena Burger

Yeah. Yeah. So I guess this relates to another question that we've had: inference has gotten harder over the past 18 months because of this combination of scale and diversity in the kinds of models that we have, and, of course, agents that are doing increasingly long-running tasks. What makes open source in this world and in this scenario not just a nice thing to have, but absolutely necessary?

Simon Mo

Yeah, so scale comes from a few points. It comes from whether or not you can run this gigantic model on a data-center rack, but it also comes from whether you can optimize it to the extreme point, to the speed of light, so that you're getting the most value out of it.

You also need a whole community, collaboration, and partner effort to validate it and make sure there are no last remaining bugs that appear 0.0001% of the time. So this is where scaling up the deployment, and making sure more people are running it at scale—the largest footprint possible—will ensure everybody's experience of running this model is better.

This is why open-source inference is a current leading way right now instead of closed-source inference engines.

And frankly, a lot of the inference clouds and APIs-as-a-service today do use and leverage open-source inference engines under the hood. The reason to do that is that there are just so many battle-tested recipes and things they’ve learned that they can build on top of. This is why open source is currently the leading way to run models.

Elena Burger

Something that I find kind of funny, looking back at not just the history of vLLM and Inferact but also companies like OpenRouter or even Ollama, is that all of these different teams got started around 2022 and 2023. Some of them, in your case even before ChatGPT, were built around open models. What kind of special thing do you think was happening at that time, just in the world of research and in the world of AI, where we see these companies now and think that vLLM is mission-critical or OpenRouter is mission-critical?

What do you think was going on at that time where, even before we had a big consumer use case, we had teams like yours building these things? And how did you guys know, I guess, is the question?

Simon Mo

I think there are 2 parts to this. Our team has always had an open-source angle. At UC Berkeley, there’s a long tradition of open-source software and systems research principles. But there was also just curiosity overall. Everybody was so curious about how these AI models were going to benefit humanity and how we could use them better.

With open source, you meet the most mission-aligned people. OpenRouter and Ollama, as you mentioned, are all great partners and friends in the ecosystem because we’re there to understand how everybody else can leverage AI models better and make sure they make good use of them.

Elena Burger

And speaking of leveraging open-source models really well, I think another thing that was in the news recently was Hugging Face using a Chinese open-source model to help contain a cyberattack carried out by a rogue, unsandboxed OpenAI model that was being tested. What can we take away from something like that? Can you first walk us through your impressions and understanding of what happened, and then what you think the takeaways are?

Simon Mo

Yeah, this kind of goes back to our previous point about controls. For the Hugging Face incident, they broke it down pretty well on their website and blog, so I really thank them for their transparency there. In the end, it’s about all of the closed, proprietary model APIs: their guardrails are a little bit arbitrary, but also very difficult to enforce. That means they have so many false positives in the guardrails that legitimate use cases just get blocked.

This is an evergreen problem, even from the social media days. How do you design content filters correctly and be able to do moderation correctly? If moderation is never solved—which is going to be very, very hard—then there’s always a place where you have a model that you know and trust what you’re publishing to and are able to use.

So Hugging Face had to use an open-weight model. But in the future, I also see that, for trusted use cases, people will go to open weights by default, because that is where you know for sure that the guardrail is lessened, or you can control your guardrail for trusted use cases.

This is actually applied to us today. A lot of Anthropic models ban frontier AI research, and when we’re studying GPU kernels, even an invalid memory-access error triggers the red line. A lot of our developers within Inferact, working on vLLM, are retreating from using Claude 3.5 because you can run a 2-hour job and trigger the red line, which is a false positive. Then you have to lose all of your work.

A lot of our developers are using Kimi K2 today, just to make sure, because it’s a similar quality and it has a guardrail that makes sense to us. We’ve had zero issues while using it.

Matt Bornstein

I think your social media analogy is a really apt one.

Simon Mo

Yeah.

Matt Bornstein

Because in both cases, what’s kind of happened is you’ve taken distributed human activity and centralized it in one place. Before social media, people talked to each other and published articles and messaged each other and had message boards. But then you centralized it all under one kind of profit-seeking enterprise, and all of a sudden the incentives changed a lot, right?

We have a specific carve-out for social media, which is that you’re not responsible for what people say on your platform. And that allowed the moderation problem to be tractable, I think, right? It’s like, “Okay, we’re going to do our best to eliminate obviously illegal things, things that are just going to degrade the experience on the site in really bad ways. But if it’s on the edge—if it’s something that’s maybe out of fashion to say, but not illegal—”

Like, we’re just—we just can’t police everything. We can’t be the world police of all human communications. I think something similar is happening in AI, right? A lot of work—not just talking, but work—is being consolidated in one place. If I need to write code or create a spreadsheet or get health advice, or anything, it’s all happening in one or two sites.

Simon Mo

Yeah.

Matt Bornstein

And they don’t have that carve-out, right? They don’t have that exemption of, “Hey, we’re not responsible for what actually happens on the site.” Some of them, especially Anthropic, are going further than what would be legally required, and they’re taking ethical stances on these things, which may be right or may be wrong. Those are their decisions.

And how do you actually do this? The problem is actually bigger than just communication, because it’s actual work and action, and you don’t have this exemption, and you have this layer of ethical stuff on top. So, yeah, I’m just totally with you. It seems like some of these companies have erred on the side of caution, which is probably a reasonable thing to do, but very, very frustrating as a user.

I saw online that some translation attempts are blocked because they think the particular combination of language and content is somehow triggering politically sensitive topics and things like this.

Elena Burger

Simon, we’re nearing the close of the conversation, and I just wanted to take a step back a bit and ask about Inferact and running the company. I know that Ion Stoica of Databricks is an advisor and a co-founder of Inferact, and I’m curious what you’ve learned from him in terms of taking an open-source project like Llama 2 and vLLM and building a company.

Simon Mo

Yeah, Ion, as the co-founder, has always been thinking about open source and how to support open source better. Now, with experience from Databricks and Anyscale, and even Arena, which is a public platform, and now at Inferact, his focus really stems from this question: How do we build a world where this software is being used by so many people on such a critical project? How do we make sure they’re getting the best quality, and where does the value come from?

If the open-source movement and open-source inference engine are a starting point, then what are the gaps that we can fill as Inferact, and what are the gaps that we should absolutely put in? Ion has always been open-source-first. So, for whatever we need to build, we would like to build it in open source, and then, for whatever value we can deliver, we want to really close the last mile and make sure that customers and partners are getting the best out of it.

Elena Burger

Just to close this out, 5 years from now, do you think open-weight, open-source AI models will have closed the gap with frontier models completely? Are frontier models always 1 step ahead? How do you see that shaking out?

Simon Mo

5 years.

Elena Burger

All right. All right. 1 year. One year. You got 5 years wrong.

Simon Mo

Who knows? Or, you know, we’re all going to be just floating around in our WALL-E pods and our spaceships.

Matt Bornstein

Exactly.

Elena Burger

Progress, right?

Simon Mo

Yeah. Yeah.

For me, really, at this point, there’s a point we haven’t talked too much about: what really differentiates open-weight models from closed-weight models, right? In the end, there’s not much differentiation. It’s more about the distribution strategy and go-to-market strategy. Capability-wise, I don’t really see a big gap, not even today, because of how these models come to be.

They’re really starting from first principles, right? You have a computer cluster, you have training data, and you have brilliant researchers who group together to build this amazing artifact that is this pretrained model and then, later, all the post-trained models that the world can use.

But if you look at the ingredients, one of the most important parts is the data. It’s about who gets what data and then what environments you’re building for a model to improve on itself and get better, right? One of the very useful benchmarks that we have on Arena for Kimi K2 has been front-end coding.

For Moonshot, they have built some of the best environments for front-end coding. They have published amazing demos of the ability for this model to code and then see what it rendered, and then continue looping on this iterative process.

Now, this is about their environment to improve the model. It’s not just about source data or where they get the data from; rather, it’s about who can build the best environment and who can make the most optimization and algorithmic choices to leverage all that learning from this environment. So, the next year is all going to be about that. It’s about how open-weight model labs are differentiating and really getting the model to meet the real world, and having this kind of thing that people call today recursive self-improvement, almost, to really improve the model overall. And so, really project out a year, there’s not going to be any difference.

Matt Bornstein

Yeah. And you’ve used this term “brilliant researchers” a few times. There are brilliant researchers everywhere in the world, clearly. Why do you think, in the US, all the smart researchers are working on closed models, and in China all the smart researchers are working on open models?

Simon Mo

I mean, from my point of view, they’re attracted to interesting problems, not necessarily to the open or closed stance. However, open-weight models do give people a really, really good boost in the impact of such models. So, that is a plus.

Matt Bornstein

Mhm.

Simon Mo

And I think all the brilliant researchers are attracted to how to improve the model overall, right? Actually, one interesting point about this—maybe fairly technical for this Kimi K2 model—is that they removed a rotary positional embedding. RoPE has always been there for a lot of Transformer models. And guess who removed it? It was the inventor of RoPE—

Matt Bornstein

Oh, that’s cool.

Simon Mo

Jianlin Su wrote the first paper introducing RoPE as a concept. He now also wrote the explanation of why you don’t need it as part of the technical report on this Kimi K2 model. So, when we read it, it’s like it’s really come full circle: you have all these brilliant researchers who are able to really study how this works, really study the secrets of training and pre-training, and share it across the whole world, recognizing and iterating on their past, right? So, really a miracle, I would say, for this model to come alive.

Matt Bornstein

It’s so interesting. AI is in this funny zone where, empirically, it works incredibly well.

Simon Mo

Yeah.

Matt Bornstein

But then you go ask the theorists, and they have no idea what’s going on.

Simon Mo

Right.

Matt Bornstein

You have these kinds of iterative things where, when you go read the primer on Transformers—

Simon Mo

Yeah.

Matt Bornstein

You read about positional embeddings and why positional encodings are so important, because otherwise you can’t understand meaning.

Simon Mo

Yeah.

Matt Bornstein

And then it turns out, once you understand one level deeper, because we’ve been doing this for a few years and you have all these smart people, it’s like, “Oh, actually, you don’t need it.”

Simon Mo

Exactly. Yeah.

Matt Bornstein

Simpler actually is better.

We didn’t talk about distillation much so far in this conversation, but I think it’s very relevant to this.

Simon Mo

Yeah.

Matt Bornstein

I have just one question. I’m not going to ask, “Is distillation happening?” I think this is kind of speculation on the part of everybody in the world, but you work a lot with these Chinese labs. Do you think distillation is a critical component of what they do, or are they just doing good work and distillation, if it’s done, is sort of an incidental part of it?

Simon Mo

I will lean to the latter part specifically. As I mentioned previously, environment matters so much today. These are our own environments, right? These cannot be distilled. You don’t have other people’s environments to really distill a copy from. It’s about constructing it, understanding, and also understanding the learning process. You cannot distill how the model learns with the environment. A lot of these are just not doable today.

There are things potentially you can do with rewriting the data sets, right? Making better pre-training data, but again, you can do it with any model. Any model is going to follow instructions and be useful in terms of utility there. So, I really don’t think, from what we’re currently seeing, this is a big cornerstone of what’s powering the progress today. In the end, what’s powering the progress is still just really smart people with very interesting algorithms, data, environments, and, of course, compute. They will produce the models.

Matt Bornstein

I think it has really interesting policy implications. I tend to agree with you, by the way, that we have smart people everywhere working on a bunch of smart things, and it’s not about distilling data from any one place. It has really interesting policy implications, right? Because it doesn’t—it’s almost tempting if you’re in the White House to say, “Oh, sure, we’ll just turn off distillation and all our problems will be solved.” But I think it’s more the case that they’re just smart people doing interesting things. And so it’s like, how do we adapt to that? I think it’s—

Simon Mo

Yeah, and creative innovation. One part in my essay will mention that open source and open-weight models really help innovation because they set out this racetrack where everybody can learn from each other and see where each player is in this racetrack. Then you’re able to improve and stand on each other’s shoulders to improve yourself. So, that is where everybody can move forward faster.

Matt Bornstein

Yeah, and one thing we’re looking for a lot from an investment standpoint is people doing more open-source model training all over the world—not just in China, not just in the United States, but all over the world—because you get that sort of magic of collaboration when everybody’s doing it.

Elena Burger

Well, I think that’s a good note to end on. Matt, Simon, thank you so much for joining us.