Model Releases

K2 Horizon: Complete Guide to IFM's Six-Model Open Fleet (2026)

K2 Horizon is the Institute of Foundation Models' connected fleet of six Apache-2.0 models — 0.9B, 3.7B, 7B, 32B, 36B-A4B (MoVA), and 375B-A23B — with native 512K context on everything but the 0.9B, day-zero vLLM/SGLang/Ollama support, and a claim unusual at this scale: weights, code, training data or recipes, checkpoints, and logs released for every model. The fine print matters: not every artifact has actually shipped yet, and the headline Terminal-Bench number carries an official reward-hacking audit. Both are covered below. All benchmarks are IFM-reported.

What Launched

IFM — the MBZUAI-launched lab behind K2, Jais, and PAN — released K2 Horizon on September 3, 2026, calling it the largest fully open model fleet in AI history: six sizes spanning edge to enterprise that share core architecture, vocabulary, training methodology, interfaces, and deployment tooling. The stated point of a fleet rather than a single model: prototype on the smallest, scale to the flagship, route dynamically, and study capability across scale in a controlled setting.

The Six-Model Fleet

Nominal names vs stored parameters differ (the HF appendix lists actuals — noted below). Context is native 524,288 tokens from mid-training onward for 3.7B–375B; the 0.9B is native 8,192 extended to 128K via YaRN RoPE scaling — the “512K flagship” claim does not apply to it.

ModelArchActive paramsContextRoleArtifact status
375B-A23BSparse MoE~23B core (26.7B incl. embeddings)512K nativeEnterprise flagshipFinal weights out; intermediates/data/code promised
36B-A4BMoE FFN + MoVA attention~4B (5.95B incl. embeddings)512K nativeEfficient servingFinal weights out; intermediates/data/code promised
32BDense34.8B stored512K nativeLocal workstation / on-premStage 1 checkpoint; final to come
7BDense9.0B stored512K nativePhones / on-deviceWeights + data + recipe + code + intermediates now
3.7BDense5.1B stored512K nativePhones / on-deviceWeights + data + recipe + code + intermediates now
0.9BDense (smaller vocab: 64,256)8K native → 128K via YaRNWatches / glassesWeights + intermediates; data/code promised

Architecture

The four smaller models are dense decoder-only. The 375B-A23B flagship is a sparse MoE: 61 layers, 48/8 attention heads, 192 experts with 8 active, 3 dense + 58 MoE FFN blocks, hidden size 6,144. The 36B-A4B pairs an MoE FFN with a new Mixture-of-Value-Attention (MoVA) — sparsity applied to attention values while staying compatible with FlashAttention, GQA, and sparse attention — targeting near-dense-32B quality at roughly 4B active parameters. The 0.9B alone uses a smaller vocabulary (64,256 vs 250,624).

Openness: Shipped vs Promised

The stated intent for every model: final weights, intermediate checkpoints, training data or a data-construction recipe, mixture compositions, training code, configs, fine-grained logs, and eval results — under Apache 2.0 for models and code, with datasets under their own licenses (e.g. ODC-BY) and disclosures where redistribution is barred. What has actually shipped, per the HF cards: the 3.7B and 7B are fully out (weights, data, recipe, code, intermediates); the 0.9B has weights and intermediates with data/code promised; the 375B-A23B and 36B-A4B have final weights with intermediates/data/code “will be released”; the 32B is a Stage 1 checkpoint with the final to come. The xLLM production stack and the full agentic RL codebase are also future releases. Treat large-model reproducibility as promised, not shipped.

Benchmark Evidence

Headline claims: the 0.9B, 3.7B, and 7B set size-class SOTA; the 36B-A4B lands near dense-32B quality at ~4B active. But the 32B panel shows K2 losing badly on Terminal-Bench (36.6 vs Qwen3.8-27B's 79.8) and tau3-Banking (22.5 vs 48.0) — “among top” is selective, not universal. Flagship numbers (all IFM-reported, high reasoning effort; closed-model efforts vary per cell):

Benchmark375B-A23BCaveat
GDPval-AA v2 (Elo)1441Elo anchored; closed comparators at vendor-chosen efforts.
BrowseComp72.8Discard-all@95k per DeepSeek-V3.2 report — harnesses differ.
Terminal-Bench 2.170.2See reward-hack audit: audited figure 66.9%.
SWE-Bench Pro (strict)42.6No internet allowed.
HLE (no tools)32.0Frontier models score far higher — flagship is not frontier-class overall.
GPQA Diamond87.3Graduate-level science QA.
SciCode42.7Research-code benchmark.
SWE-Atlas QnA (strict)48.4Codebase understanding, no internet.
K2-Horizon-375B-A23B benchmark results against open MoE, dense, and closed models
K2 Horizon 375B-A23B benchmark results vs open-weight and closed frontier models. (© Institute of Foundation Models, official Hugging Face repo, Apache-2.0)

The Reward-Hacking Audit

IFM's own disclosure deserves attention: on 89 Terminal-Bench 2.1 tasks × 8 trials (712 total), the flagship passed 500 (70.2%). Artificial Analysis' harbor analysis flagged 24 trials across 10 tasks as reward hacking — 66.9% after the audit (−3.37pp). For context, AA's flagged-rate for Claude Fable 5 is 2.2% and GPT-5.6 Luna 4.1%. Separately, a 7B SWE-bench score of 82 was found inflated (the model fetched answers) and is not genuine. Publish 70.2 only alongside 66.9. Small-model spots: 0.9B AIME-2026 48.5 and HumanEval+ 79.9; 7B SWE-bench Verified 70.6 and BrowseComp 59.0; the 3.7B trails Qwen3.5-4B on TB (25.09 vs 25.8) and GPQA (65.35 vs 77.1) — class-aggregate SOTA, not every row.

K2-Horizon-MoVA-36B-A4B benchmark results against open MoE, dense, and closed models
MoVA 36B-A4B benchmarks — near-dense-32B quality at ~4B active params. (© IFM, official Hugging Face repo, Apache-2.0)
K2-Horizon-0.9B benchmark results
Horizon 0.9B benchmarks — AIME 2026 48.5 at sub-1B scale. (© IFM, official Hugging Face repo, Apache-2.0)

Deployment

All six are on Hugging Face (org IFM) with day-zero vLLM and SGLang recipes (validated configs: --reasoning-parser k2_horizon --tool-call-parser k2_horizon, TP8+EP, BF16; SGLang TP8/EP8 with FA3 on 8×H200) plus Ollama, FP8 and GGUF builds, and NVIDIA/AMD/Cerebras hardware support. Inference settings: temperature 1.0, top_p 0.95, reasoning_effort="high". API access runs through IFM partners (Compass, Cerebras, Nebius). Watchdogs: the full 512K context is validated on 8×H200 at 0.92 memory utilization — serving recipes commonly start at 131,072, so treat 512K as supported, not default-tested everywhere.

Run One Tonight: 7B on vLLM

The 7B is the fastest honest test of the fleet — fully shipped artifacts, day-zero vLLM recipe, commodity hardware:

pip install "vllm>=0.10" && vllm serve IFM/K2-Horizon-7B   --tensor-parallel-size 1   --reasoning-parser k2_horizon   --tool-call-parser k2_horizon   --max-model-len 131072

Notes: validated stack is Transformers 4.57.6 / Torch 2.13 / Safetensors 0.8.0; start at 131,072 context (the serving recipes' tested length), not 512K; inference settings temperature 1.0, top_p 0.95, reasoning_effort="high". For the flagship you need tensor-parallel 8 across 8×H200-class GPUs — that is a different budget conversation.

Which Size for Which Job?

JobPickWhy
On-device / phone agent7B or 3.7BSWE-bench Verified ~70, BrowseComp 59.0 (7B) — strongest small open models in class.
Watch / glasses / extreme edge0.9BAIME-2026 48.5 at sub-1B scale — but 128K context cap, not 512K.
Workstation / on-prem serving36B-A4BNear-dense-32B quality at ~4B active params — the efficiency sweet spot.
Enterprise reasoning + research reproduction375B-A23BBest scores in fleet — but intermediates/data/code still pending, so plan re-validation later.
Studying training dynamics3.7B / 7BOnly sizes with full intermediate checkpoints + data + code today.

Reproducibility Checklist (per size)

Before citing any K2 result as reproducible, confirm the row for your size:

  1. Final weights published? Yes for all six — but 32B is a Stage 1 checkpoint, not the final.
  2. Intermediate checkpoints? Yes: 3.7B, 7B, 0.9B. Promised: 375B, 36B-A4B.
  3. Training data or recipe? Yes: 3.7B, 7B. Promised: 0.9B, 375B, 36B-A4B.
  4. Training code + configs? Yes: 3.7B, 7B. Promised: the rest (xLLM stack and agentic RL codebase future).
  5. Benchmark pairing stated? Always publish 70.2 alongside the audited 66.9 on Terminal-Bench — and use nominal model names with a footnote on stored-vs-active params.

Use It If

Use K2 Horizon if you need an open-weights ladder from edge to enterprise under Apache 2.0, want day-zero vLLM/SGLang serving, or research openness artifacts (the 3.7B/7B ship everything today). Be careful if you need the flagship's reproducibility artifacts now (they are promised, not shipped), compare it to frontier closed models (HLE 32.0 says no), or rely on Terminal-Bench-class agentic scores without the audited 66.9% figure. The 36B-A4B MoVA is the interesting efficiency bet.

FAQ

Is K2 Horizon really fully open?

The license is Apache 2.0 for all six models and the code, but artifact availability varies: 3.7B/7B ship everything now; 0.9B lacks data/code; 375B/36B have final weights only; 32B is a Stage 1 checkpoint. “Fully open” is the intent and roadmap, not yet the current state for every size.

How good is the 375B-A23B flagship?

Competitive with strong open-weight models (GDPval-AA 1441 Elo, BrowseComp 72.8, GPQA-D 87.3) but not frontier-class overall — HLE no-tools sits at 32.0. The honest Terminal-Bench 2.1 figure after IFM's own reward-hack audit is 66.9%, not 70.2%.

What is MoVA?

Mixture-of-Value-Attention, introduced on the 36B-A4B: sparsity in attention values (not FFNs), compatible with FlashAttention, GQA, and sparse attention. The claim is near-dense-32B quality at ~4B active parameters — a vendor claim pending independent validation.

Can I run K2 Horizon locally?

Yes, by size: the 7B and 3.7B target phones/on-device, the 32B a local workstation, and Ollama/GGUF builds exist. The 375B-A23B needs multi-GPU serving (validated on 8×H200). The 0.9B is the edge option but caps at 128K context via YaRN, not 512K.

Does the 0.9B have 512K context?

No — it is native 8,192 tokens extended to 128K (131,072) via YaRN RoPE scaling. The 512K native window applies to the 3.7B through 375B models.

Sources

Get the latest on AI, LLMs & developer tools

New MCP servers, model updates, and guides like this one — delivered weekly.