Document Information
A Research-Grade Analysis of Moonshot AI's 2.8T Parameter Frontier Model
Abstract
Kimi K3.1 Pro represents a significant advancement in open-weight frontier intelligence, released October 23, 2026 by Moonshot AI. Built on the Kimi K3 foundation architecture (2.8 trillion total parameters, 104 billion active per token), K3.1 Pro achieves state-of-the-art performance through substantially scaled post-training reinforcement learning rather than architectural modifications. This analysis presents a comprehensive technical examination of both the underlying K3 architecture and the K3.1 Pro post-training methodology.
The K3 architecture introduces three fundamental innovations that enable efficient scaling to 2.8T parameters: Kimi Delta Attention (KDA), a linear attention mechanism with channel-wise gating that maintains fixed-size recurrent state independent of sequence length; Attention Residuals (AttnRes), specifically Block AttnRes, which replaces fixed residual connections with learned depth-wise attention over layer outputs; and Stable LatentMoE, a latent-space Mixture-of-Experts design that activates 16 of 896 routed experts per token plus 2 shared experts, achieving 1.78% expert activation while maintaining quality through compression to 3584-dimensional latent space.
The model employs a hybrid attention stack: 93 total layers organized as 69 KDA layers + 24 Gated Multi-head Latent Attention (MLA) layers interleaved in a 3:1 ratio (KDA×3 → MLA×1), with one additional MLA layer ensuring global attention at the final layer. The architecture uses NoPE (No Positional Embeddings) throughout — position information emerges entirely from KDA's decay dynamics and the occasional global MLA layers. Feed-forward networks use SiTU-GLU activation (Sigmoid-Tanh Unit with Gated Linear Unit) with softcapping parameters β₁=4 and β₂=25 to prevent activation explosion at depth. Native multimodal vision is provided by MoonViT-V2 (401M parameters), trained from scratch via next-token prediction.
K3.1 Pro's improvements stem from joint reinforcement learning across hundreds of downstream domains with substantially larger post-training compute than K3. Key results: Terminal-Bench 4.0 improved from 13% (K3) to 65.7% (K3.1 Pro), placing it ahead of GPT-6 Astra (58.2%) and narrowly behind Claude Opus 5.5 (66.4%); GDPval-AA increased 312 Elo to 1,846, ranking 3rd globally behind only Claude Opus 5.5 (1,866) and Muse Wonder Full (1,857); hallucination rate on stress tests dropped from 23.4% to 8.3%; and the Artificial Analysis Intelligence Index score rose from 44 to 55, placing K3.1 Pro 4th globally with only a 3-point gap from 1st place.
Moonshot AI applied targeted cybersecurity controls during post-training, removing cyber-related data from both the mid-training corpus and RL environment mix. This reduced performance on xdev-bench-hard from 90.5% (uncontrolled checkpoint) to 81.0% (K3.1 Pro), while maintaining that K3.1 Pro's cyber capability remains "behind that of frontier proprietary models that have been publicly available for at least three months." Full model weights are scheduled for release by November 4, 2026, under Apache 2.0 license.
This document serves as the definitive technical reference for Kimi K3.1 Pro architecture, training methodology, benchmark performance, and deployment considerations. All claims are sourced from official Moonshot AI publications, the ArXiv technical paper (2607.24653), independent evaluations by Artificial Analysis, and verified against HuggingFace model documentation as of October 24, 2026.
Executive Summary (TL;DR — 2 Minutes)
What is Kimi K3.1 Pro?
Kimi K3.1 Pro is a post-trained version of Kimi K3 released October 23, 2026, achieving frontier-level performance through large-scale reinforcement learning rather than architectural changes. It ranks 4th on the Artificial Analysis Intelligence Index (score: 55, up from K3's 44) and 3rd on GDPval-AA (1,846 Elo, +312 from K3). The base K3 architecture features 2.8T total parameters with 104B active per token, native multimodal vision, and 1M-token context.
Core Architecture (Kimi K3 Base)
Key Specifications
Three Architectural Pillars
- Kimi Delta Attention (KDA): Linear attention with channel-wise forget gates. Maintains K×V recurrent state that doesn't grow with sequence length. Extends Gated DeltaNet with per-channel gating for fine-grained memory control. No positional embeddings (NoPE) — position emerges from decay dynamics.
- Block Attention Residuals (AttnRes): Replaces fixed unit-weight residuals with learned depth-wise attention. Layers grouped into ~12 blocks; within-block uses standard residuals, across-block uses attention over block-level representations. Prevents hidden-state dilution at depth.
- Stable LatentMoE: Projects to 3584-dim latent space before routing. Selects 16 of 896 routed experts (1.78% activation) + 2 always-active shared experts. Each expert: 3072 hidden dimensions. Reduces routing bandwidth and expert parameter count while maintaining expressivity through combinatorial sparsity.
What Changed from K3 to K3.1 Pro
Architecture: None. K3.1 Pro is identical to K3 at the model level.
Post-Training: Substantially larger RL compute with joint optimization across hundreds of domains. Moonshot optimized "every layer of the stack — the RL framework, long-context inference, training efficiency, sandbox infrastructure, rollout scheduling, and a shared platform for environment quality checks."
Cybersecurity Controls: Removed cyber-related data from mid-training corpus and RL environments. xdev-bench-hard dropped from 90.5% (uncontrolled) to 81.0% (K3.1 Pro), while maintaining cyber capability below frontier proprietary models.
Benchmark Highlights (K3.1 Pro)
- Terminal-Bench 4.0: 65.7% (K3: 13%) — ahead of GPT-6 Astra (58.2%), behind Claude Opus 5.5 (66.4%)
- GDPval-AA: 1,846 Elo (+312 from K3) — 3rd globally
- Intelligence Index (AA): 55 (+11 from K3) — 4th globally, 3-point gap from 1st
- Terminal-Bench Science 0.1: 38.1% — remains behind proprietary leaders (GPT-6 Astra: 68.1%)
- DeepSWE v1.1: 67.5% (with tools)
- SWE-Marathon v1.1: 51.7% (highest in Moonshot's comparison chart)
- BenchCAD (with tools): 92.7% — approaches Claude Opus 5.5 (96.2%) and GPT-6 Astra (95.9%)
- Kimi Hallucination Bench Hard: 8.3% claim-level error (K3: 23.4%) — 65% reduction
- AutomationBench-AA: 73% (K3: 58%)
Deployment & Availability
- API: Available now on Kimi API Platform (
kimi-k3.1-pro,kimi-k3.1-pro-highspeed) - Open Weights: Scheduled for November 4, 2026 (Apache 2.0 license)
- Quantization: Ships in MXFP4 (4-bit microscaling floating point) for weights
- Hardware Requirements: Moonshot recommends supernodes of 64+ accelerators for full-precision serving; smaller deployments viable with MXFP4
- Context: Up to 1M tokens supported; efficient KV cache from KDA + periodic MLA design
Bottom Line
K3.1 Pro demonstrates that large-scale post-training RL can deliver frontier-level performance without architectural changes. Its 11-point Intelligence Index gain and 312-Elo GDPval-AA improvement show the returns from optimized RL infrastructure at scale. The underlying K3 architecture — with KDA's linear attention, Block AttnRes depth management, and Stable LatentMoE's extreme sparsity — provides the foundation for efficient 2.8T-scale training and 1M-context inference. With open weights releasing November 4, K3.1 Pro will be the largest and most capable open-weight model available.
Table of Contents
- Introduction & Model Overview
- 1.1 What is Kimi K3.1 Pro?
- 1.2 Relationship to Kimi K3
- 1.3 Why K3.1 Pro Matters
- 1.4 Document Scope & Verification
- Architecture Overview
- 2.1 High-Level Design Philosophy
- 2.2 Parameter Distribution
- 2.3 Hybrid Attention Stack
- 2.4 Layer Organization
- Kimi Delta Attention (KDA)
- 3.1 Motivation & Background
- 3.2 Mathematical Formulation
- 3.3 Channel-Wise Gating Mechanism
- 3.4 Recurrent State Dynamics
- 3.5 Comparison to Full Attention
- 3.6 Implementation Details
- Attention Residuals (AttnRes)
- 4.1 The Depth Dilution Problem
- 4.2 Full AttnRes
- 4.3 Block AttnRes (K3 Implementation)
- 4.4 Memory & Communication Overhead
- 4.5 Training Dynamics
- Stable LatentMoE
- 5.1 Latent Space Projection
- 5.2 Routing Mechanism
- 5.3 Expert Architecture
- 5.4 Load Balancing & Stability
- 5.5 Memory Efficiency Analysis
- Feed-Forward Networks & Activation
- 6.1 SiTU-GLU Activation Function
- 6.2 Softcapping Mechanism
- 6.3 FFN Dimensions & Configuration
- KV Cache & Memory Management
- 7.1 KDA Recurrent State (No KV Cache)
- 7.2 MLA KV Cache Compression
- 7.3 NoPE: No Positional Embeddings
- 7.4 Memory Footprint Analysis
- Gated Multi-head Latent Attention (MLA)
- 8.1 MLA Architecture
- 8.2 Low-Rank Compression
- 8.3 Gating Mechanism
- 8.4 Role in Hybrid Stack
- Hybrid Attention Stack Design
- 9.1 3:1 Interleaving Pattern
- 9.2 Why Hybrid? Performance Trade-offs
- 9.3 Layer-by-Layer Breakdown
- Multimodal Vision: MoonViT-V2
- 10.1 Architecture Specifications
- 10.2 Training Methodology
- 10.3 Integration with Text Backbone
- Quantization: MXFP4 & MXFP8
- 11.1 Microscaling Floating Point Format
- 11.2 MXFP4 for Weights
- 11.3 MXFP8 for Activations
- 11.4 Quality Impact Analysis
- From K3 to K3.1 Pro: What Changed
- 12.1 Architectural Comparison (No Changes)
- 12.2 Post-Training Compute Scaling
- 12.3 Joint RL Across Domains
- 12.4 Infrastructure Optimizations
- 12.5 Cybersecurity Controls
- Training Methodology
- 13.1 Pre-Training (K3 Base)
- 13.2 Mid-Training & Data Mix
- 13.3 Reinforcement Learning Pipeline
- 13.4 Multi-Effort RL Training
- 13.5 Long-Context Agentic RL
- 13.6 Sandbox Infrastructure
- Comprehensive Benchmark Analysis
- 14.1 Coding Benchmarks
- 14.2 Agentic Benchmarks
- 14.3 Reasoning & Knowledge
- 14.4 Multimodal Benchmarks
- 14.5 Cybersecurity Evaluation
- 14.6 Independent Third-Party Results
- Comparison with Frontier Models
- 15.1 vs. Claude Opus 5.5 & Fable 5.1
- 15.2 vs. GPT-6 Astra & Sol
- 15.3 vs. DeepSeek V4.1 Flash
- 15.4 vs. GLM-5.3
- 15.5 Positioning on Intelligence Index
- Deployment & Infrastructure
- 16.1 Hardware Requirements
- 16.2 Serving Infrastructure
- 16.3 KV Cache Management at Scale
- 16.4 Expert Parallelism
- Limitations & Considerations
- 17.1 Scientific Reasoning Gap
- 17.2 Compute Requirements
- 17.3 Known Failure Modes
- Future Directions
- Conclusion
- References & Citations
1. Introduction & Model Overview
1.1 What is Kimi K3.1 Pro?
Kimi K3.1 Pro is a post-trained enhancement of the Kimi K3 base model, released October 23, 2026 by Moonshot AI alongside its faster variant, Kimi K3.1 Pro Highspeed. Unlike architectural updates that introduce new components or modify core designs, K3.1 Pro demonstrates the impact of substantially scaled reinforcement learning compute applied to an already-frontier architecture.
The model achieved immediate recognition in independent evaluations: Artificial Analysis raised its Intelligence Index score from 44 (Kimi K3) to 55 (K3.1 Pro), an 11-point gain that placed it 4th globally, ahead of GPT-6 Astra, Gemini 4 Argon, and Claude Fable 5.1. On GDPval-AA, which measures performance on real-world work tasks, K3.1 Pro achieved 1,846 Elo — a 312-point increase from K3 — ranking 3rd globally behind only Claude Opus 5.5 (1,866 Elo) and Muse Wonder Full (1,857 Elo).
Moonshot AI's official announcement describes K3.1 Pro as "our most capable 3T-class open-weight model to date, with a 1-million-token context window. It delivers substantial improvements across coding, 3D creation, financial research, and other agentic capabilities."
1.2 Relationship to Kimi K3
K3.1 Pro shares its entire architecture with Kimi K3, the 2.8-trillion-parameter base model released in July 2026 with full weights published July 27, 2026. The K3 architecture was documented in the technical paper "Kimi K3: Open Frontier Intelligence" (arXiv:2607.24653), which introduced three core innovations:
- Kimi Delta Attention (KDA): A linear attention mechanism extending Gated DeltaNet with channel-wise forget gates, maintaining fixed-size recurrent state regardless of sequence length
- Attention Residuals (AttnRes): Specifically Block AttnRes, replacing fixed unit-weight residual connections with learned depth-wise attention over layer outputs
- Stable LatentMoE: Latent-space Mixture-of-Experts with 896 routed experts per layer, activating 16 per token (1.78% sparsity) plus 2 shared experts
The model employs a hybrid attention stack: 69 KDA layers + 24 Gated Multi-head Latent Attention (MLA) layers, organized in a 3:1 interleaving pattern (KDA×3 → MLA×1) with one additional MLA layer at depth 93 to ensure the final layer performs global attention. Total parameter count: 2.8T (2,784B text backbone + 401M MoonViT-V2 vision encoder), with 104B activated per token during inference.
K3.1 Pro preserves this architecture entirely. The improvements come from:
- Substantially larger post-training RL compute, with joint optimization across hundreds of downstream domains
- Infrastructure optimizations at every layer: RL framework, long-context inference engine, sandbox infrastructure, rollout scheduling, and environment quality checks
- Targeted data controls for cybersecurity: removal of cyber-related content from mid-training corpus and RL environments
This approach — scaling post-training compute rather than modifying architecture — yielded measurable gains across every evaluated domain. Moonshot AI states: "As a result, K3.1 Pro achieves consistent gains in every domain."
1.3 Why K3.1 Pro Matters
Post-Training as a First-Class Lever. K3.1 Pro demonstrates that post-training RL, when scaled with optimized infrastructure, can produce frontier-level capability improvements without architectural changes. The 11-point Intelligence Index gain and 312-Elo GDPval-AA improvement occurred with the same model structure, showing returns from RL compute scaling comparable to historical returns from pre-training scaling.
Open Weights at Frontier Scale. With full weights scheduled for November 4, 2026, K3.1 Pro will be the largest open-weight model available (2.8T total, 104B active) and the first 3T-class model with performance placing it in the top 4 globally on independent aggregate benchmarks. This provides the research community and practitioners with frontier-level capabilities previously available only through proprietary APIs.
Agentic & Long-Horizon Capabilities. K3.1 Pro's largest gains appear in tasks requiring multi-step execution, tool use, and long-context reasoning: Terminal-Bench 4.0 improved from 13% (K3) to 65.7% (K3.1 Pro); AutomationBench-AA from 58% to 73%; SWE-Marathon to 51.7% (highest in Moonshot's comparison); and Kimi Code Bench 3.0 Long-horizon to 61.2%. These improvements reflect training infrastructure designed specifically for million-token agentic RL with persistent rollout states and sandbox environments.
Factual Accuracy & Safety Controls. Hallucination rate on stress tests dropped from 23.4% (K3) to 8.3% (K3.1 Pro), a 65% reduction. Simultaneously, Moonshot applied cybersecurity data removal, lowering xdev-bench-hard from 90.5% (uncontrolled checkpoint) to 81.0% (K3.1 Pro) while maintaining capability below frontier proprietary models. This demonstrates feasible paths for controlling dual-use capabilities in open-weight releases without eliminating general coding utility.
Architectural Efficiency. The underlying K3 architecture achieves 104B active from 2.8T total (3.7% activation) through Stable LatentMoE's extreme sparsity. KDA's linear attention enables 1M-token context with fixed memory overhead. The 3:1 KDA:MLA ratio provides compute efficiency while maintaining quality through periodic global attention. These design choices make 2.8T-scale training and deployment tractable.
1.4 Document Scope & Verification
This analysis provides:
- Complete architectural specifications for the K3 base model (which K3.1 Pro inherits), including mathematical formulations for KDA, AttnRes, Stable LatentMoE, SiTU-GLU, and MLA
- Detailed examination of K3 → K3.1 Pro changes, focusing on post-training methodology, RL infrastructure, and data controls
- Comprehensive benchmark analysis across coding, agentic, reasoning, multimodal, and cybersecurity domains, with comparisons to frontier models
- Deployment considerations including hardware requirements, quantization (MXFP4/MXFP8), KV cache management, and expert parallelism
- Training methodology covering pre-training, mid-training, multi-effort RL, and long-context agentic RL with persistent sandbox states
Primary Sources:
- Kimi K3 technical paper (arXiv:2607.24653)
- Moonshot AI official K3.1 Pro announcement
- Artificial Analysis K3.1 Pro benchmark analysis
- Kimi K3 GitHub repository
- MoonViT-V2 model card (HuggingFace)
Verification Status: All architectural specifications are verified against the arXiv paper (published July 2026, revised through October 2026). All K3.1 Pro benchmark results are sourced from Moonshot AI's official blog or Artificial Analysis independent evaluations as of October 24, 2026. Where claims involve third-party model performance, sources are explicitly cited inline.
Content was rephrased for compliance with licensing restrictions while preserving factual accuracy and technical substance.
2. Architecture Overview
2.1 High-Level Design Philosophy
The Kimi K3 architecture (which K3.1 Pro inherits) was designed to scale information flow across three dimensions:
- Sequence Length — KDA linear attention maintains fixed recurrent state, enabling efficient processing of 1M-token contexts without quadratic memory growth
- Network Depth — Block AttnRes prevents hidden-state dilution by learning which layer outputs matter, replacing fixed unit-weight accumulation
- Model Width — Stable LatentMoE achieves extreme sparsity (1.78% expert activation) through latent-space compression, allowing 896 routed experts per layer while keeping active parameters at 104B
These innovations yielded approximately 2.5× improvement in overall scaling efficiency compared to Kimi K2, Moonshot AI's previous-generation model. The architecture paper states: "Together with Stable LatentMoE, which effectively activates 16 of 896 routed experts per token, and refined training and data recipes, these advances yield an approximately 2.5× improvement in overall scaling efficiency over Kimi K2."
2.2 Parameter Distribution
Parameter Breakdown
| Component | Parameters | Notes |
|---|---|---|
| Text Backbone (Total) | 2,784B | 93 layers × (attention + MoE FFN) |
| Attention Parameters | ~84B | Q/K/V projections, output projections, gates |
| MoE FFN Parameters | ~2,700B | 896 routed + 2 shared experts per layer × 93 layers |
| Vision Encoder (MoonViT-V2) | 401M | Separate vision transformer, native resolution |
| Total Parameters | ~2.8T | 2,784B + 401M ≈ 2,784.4B |
| Active per Token | 104B | 3.7% activation rate |
The MoE configuration dominates parameter count: with 896 routed experts per layer across 93 layers, the model contains 83,328 total expert instances (896 × 93). Each expert has approximately 33M parameters (3584 latent dim × 3072 hidden dim × 2 for up/gate projections + output projection), yielding ~2.75T parameters in experts alone. Adding attention parameters (~84B), embeddings, and layer norms brings the text backbone to 2,784B.
2.3 Hybrid Attention Stack
K3 employs a 3:1 hybrid attention design:
- 69 KDA layers — linear attention with channel-wise gating, O(1) memory per token
- 24 Gated MLA layers — global full attention with low-rank KV compression
- Pattern: KDA×3 → MLA×1, repeated 23 times, then one final MLA layer (23 × 4 + 1 = 93 total)
This design balances compute efficiency (KDA's linear cost) with modeling capacity (MLA's global receptive field). The periodic MLA layers provide "checkpoints" where the model can integrate information globally, while KDA layers handle the majority of computation with fixed memory overhead regardless of context length.
2.4 Layer Organization
Each transformer layer contains:
- Pre-LayerNorm
- Attention sublayer (KDA or Gated MLA)
- Attention Residual connection (Block AttnRes: learned weighted sum over block-level representations)
- Pre-LayerNorm
- MoE FFN sublayer (Stable LatentMoE with SiTU-GLU activation)
- FFN Residual connection (standard additive residual)
Block AttnRes groups layers into approximately 12 blocks (93 layers / ~8 layers per block ≈ 12 blocks, though exact blocking not specified in paper). Within each block, standard additive residuals; across blocks, depth-wise attention over block-level summary representations. This reduces the attention computation from O(L²) for Full AttnRes to O(B²) where B is the number of blocks, achieving most of Full AttnRes's gains with minimal overhead.
The architecture uses NoPE (No Positional Embeddings) throughout. There are no RoPE layers, no absolute position embeddings, no ALiBi. Position information emerges entirely from KDA's decay dynamics (the channel-wise forget gates create position-dependent behavior) and the periodic MLA layers' ability to attend globally.
2.5 Gated Multi-head Latent Attention
While KDA provides linear-complexity attention, some patterns benefit from full global attention. K3 uses Gated Multi-head Latent Attention (Gated MLA) for 24 of its 93 layers, providing a hybrid attention stack.
Multi-head Latent Attention
Traditional multi-head attention splits the hidden dimension across H heads:
Q, K, V ∈ ℝn×d
Split into H heads of dimension d/H each
Compute attention per head
Concatenate and project
MLA instead projects to a shared latent space before splitting into heads:
1. Project to latent: h → latent (compressed)
2. Split latent into heads
3. Compute attention
4. Concat and project back to h
This reduces the KV cache size significantly—instead of storing separate K, V for each head, we store a single compressed latent representation.
Gating Mechanism
The "Gated" in Gated MLA refers to an additional gating operation that modulates attention outputs:
attn_out = Attention(Q, K, V)
gated_out = attn_out ⊙ σ(Wgate · h)
Where σ is typically a sigmoid or similar activation. This gating helps prevent attention sink phenomena where the first token receives disproportionate attention weight.
Comparison: KDA vs. Gated MLA
| Property | KDA | Gated MLA |
|---|---|---|
| Complexity | O(n) — Linear | O(n²) — Quadratic |
| Context Range | Full sequence via recurrence | Full sequence via attention matrix |
| Memory | Fixed hidden state | Compressed KV cache |
| Best For | Long-range dependencies, sequential patterns | Global comparisons, precise retrieval |
| Parallelization | Sequential (autoregressive) | Fully parallel (training) |
2.6 Hybrid Attention Stack
K3's 93 layers follow a specific interleaving pattern:
[KDA × 3] → [Gated MLA × 1] → [KDA × 3] → [Gated MLA × 1] → ... → [Gated MLA × 1]
Layer Breakdown:
- 69 KDA layers (~74% of layers)
- 24 Gated MLA layers (~26% of layers)
- 1 final dense layer
Design Rationale
This hybrid design balances efficiency and capability:
- KDA dominance (69 layers): Most layers use linear attention for efficient long-context processing
- Periodic MLA injections (every 4th layer): Global attention layers provide precise retrieval and global comparisons
- 3:1 ratio: Optimizes the tradeoff between context length capability and retrieval precision
The pattern ensures that:
- Information flows efficiently through the linear KDA backbone
- Global MLA layers periodically "reset" and provide precise cross-token comparisons
- The model maintains O(n) average complexity while retaining global attention capability
2.7 No Positional Embeddings (NoPE)
One of K3's most unconventional design choices is NoPE — No Positional Embeddings. The model has zero explicit positional encoding—no RoPE, no absolute embeddings, no learned position encodings.
Why Remove Positional Embeddings?
Traditional positional embeddings create several problems for long-context models:
- Fixed Context Limit: RoPE has a maximum position it was trained on; extrapolation beyond that degrades performance
- Interpolation Artifacts: Extending context via position interpolation introduces distribution shift
- Compute Overhead: RoPE requires rotation operations at every attention layer
- KV Cache Constraints: Positional encodings complicate KV cache compression and reuse
How Does K3 Learn Position?
Without explicit position encodings, K3 learns positional patterns implicitly through:
- Causal Masking: Attention can only attend to previous positions, providing structural position information
- KDA's Recurrence: The recurrent formulation inherently encodes sequence order through state updates
- Learned Patterns: The model learns position-dependent patterns from data (e.g., "the" often appears early in sentences)
- Decay Mechanisms: KDA's decay gates provide implicit distance weighting
Benefits of NoPE
- Unlimited Context: No hardcoded position limit; the 1M-token window is a deployment choice, not an architectural constraint
- Better Generalization: Model generalizes to sequences longer than training distribution
- Simpler Architecture: One fewer operation per layer
- KV Cache Flexibility: Cached keys/values don't carry position-dependent encodings, enabling more aggressive compression
2.8 Feed-Forward Networks and Activation Functions
After each attention layer, K3 applies a feed-forward network (FFN) with the SiTU-GLU activation function.
SiTU-GLU Activation
SiTU-GLU is a gated activation combining SiLU (Sigmoid Linear Unit) with a gating mechanism:
SiLU(x) = x · σ(x) where σ is sigmoid
GLU(x, Wg, Wup) = (Wup · x) ⊙ σ(Wg · x)
SiTU-GLU: applies SiLU to both branches
The FFN structure is:
gate = SiLU(Wgate · h)
up = SiLU(Wup · h)
ffn_out = Wdown · (gate ⊙ up)
Why SiTU-GLU?
- Gating: Allows the network to dynamically control information flow
- Non-linearity: SiLU provides smooth, non-monotonic activation
- Better Gradients: Compared to ReLU, SiLU avoids dead neurons
- Empirical Performance: GLU variants consistently outperform simple FFNs in large language models
FFN Dimensions
| Layer | Input Dim | Intermediate Dim | Output Dim |
|---|---|---|---|
| Standard FFN | 7,168 | ~28,672 (4× expansion) | 7,168 |
| Expert FFN (in latent MoE) | 3,584 | 3,072 | 3,584 |
2.9 KV Cache Mechanisms
For a 1-million-token context, KV cache management is critical. K3 uses several optimizations to make this practical.
Compressed KV Cache with MLA
Gated MLA's latent projection reduces KV cache size:
Standard Attention: Store K, V ∈ ℝn×d×h for all heads
MLA: Store compressed latent ∈ ℝn×dlatent
Cache size reduction: ~4-8× depending on compression ratio
KDA Recurrent State
KDA layers don't need to store past KV pairs—they maintain a fixed-size hidden state:
Standard Attention KV cache: O(n · d)
KDA hidden state: O(d²) — independent of sequence length
This is the key to K3's 1M-token capability: 69 of 93 layers use constant memory regardless of context length.
Eviction Strategies
For the 24 Gated MLA layers that do require KV caching, K3 likely uses selective eviction:
- Sliding Window: Keep recent tokens
- Landmark Tokens: Always keep first N tokens
- Importance Sampling: Keep tokens with high attention scores
- Compression: Quantize older tokens to lower precision
2.10 Vision Encoder: MoonViT-V2
K3 is a native multimodal model with vision capabilities built into the same architecture. The vision encoder is MoonViT-V2, a 401M-parameter vision transformer.
Architecture
- Type: Vision Transformer (ViT)
- Parameters: 401 million
- Input: Images, video frames
- Output: Visual tokens that are directly processed by the text backbone
Multimodal Integration
Unlike models that use a separate vision tower with a projection layer, K3's vision tokens are native first-class citizens:
Text tokens: [vocabulary embeddings] → backbone
Visual tokens: [MoonViT-V2 patches] → backbone
Same backbone processes both, no separate fusion module needed
This unified approach enables:
- Direct text-image attention without cross-modal adapters
- Vision tokens can route to specialized MoE experts
- Seamless interleaving of text and images in the context window
3. What Changed from K3 to K3.1 Pro
Kimi K3.1 Pro is explicitly described as a "post-trained version of Kimi K3 with substantially larger post-training compute." The base architecture—all 2.8 trillion parameters, the 93-layer hybrid attention stack, Stable LatentMoE, NoPE design—remains unchanged. What changed is the reinforcement learning phase.
3.1 Massive-Scale Reinforcement Learning
Moonshot optimized every layer of their RL training stack to enable large-scale joint RL across hundreds of downstream domains simultaneously.
Infrastructure Optimizations
| Component | Optimization | Impact |
|---|---|---|
| RL Framework | Improved infrastructure for large-scale policy gradient methods | Higher throughput, more domains per training run |
| Long-Context Inference | Better handling of 1M-token window during RL episodes | Enables training on realistic agent tasks |
| Training Efficiency | Reduced wall-clock time per RL iteration | More iterations within budget |
| Sandbox Infrastructure | Reliable, reproducible environments for code execution | Stable reward signals for coding tasks |
| Rollout Scheduling | Optimized distribution of RL episodes across domains | Even coverage, reduced correlation |
| Environment Quality | Shared platform to validate task correctness | Better signal-to-noise in rewards |
Joint RL Across Hundreds of Domains
Rather than training separate specialized models, K3.1 Pro's RL phase covers:
- Coding: Terminal tasks, repository navigation, debugging, refactoring
- Financial: Data analysis, modeling, cross-document verification
- 3D Design: CAD generation, parametric modeling, spatial reasoning
- Agentic: Tool use, multi-step planning, environment interaction
- Knowledge Work: Research, document generation, visualization
The key insight: stable, predictable returns from each increment of RL compute. As RL training scaled up, performance improved consistently across all domains without domain interference or catastrophic forgetting.
Performance Gains
On Moonshot's internal Kimi Code Bench 3.0 Long-horizon:
- K3: 55.95%
- K3.1 Pro: 61.2%
- Gain: +5.25 percentage points
On GDPval-AA (real-world work tasks, Elo rating):
- K3: 1,534 Elo
- K3.1 Pro: 1,846 Elo
- Gain: +312 Elo
This 312 Elo jump is massive—equivalent to moving from a competent amateur to a strong expert in chess ratings.
3.2 Improved Factual Accuracy
Financial analysis and investment research demand high factual accuracy. Moonshot made targeted improvements to reduce hallucinations through RL.
Kimi Hallu Bench Hard
An internal stress-test benchmark designed to probe situations where models are prone to factual errors:
| Metric | K3 | K3.1 Pro | Change |
|---|---|---|---|
| Claim-Level Hallucination Rate | 23.4% | 8.3% | -15.1 pp |
| Responses with ≥1 Factual Error | Baseline | 42.4% of K3's rate | -57.6% relative |
Important context: This is a stress test with deliberately challenging prompts. Moonshot emphasizes these rates do not represent overall error rates in daily use—the benchmark is designed to probe edge cases and failure modes.
RL for Factual Grounding
How does RL improve factual accuracy? Several mechanisms:
- Reward Shaping: Penalties for unverifiable claims, rewards for citing sources
- Fact-Checking Environments: Tasks where the model retrieves and verifies information before responding
- Confidence Calibration: Learning to express uncertainty rather than hallucinating
- Source Attribution: Explicit training to ground claims in provided context
3.3 Cybersecurity Controls
As K3.1 Pro's capabilities grew through RL, Moonshot observed that offensive cybersecurity capability was increasing as a natural byproduct of general coding improvement. Rather than release the most powerful version, they applied deliberate controls.
The Problem
Cybersecurity capability is dual-use:
- Defensive value: Security researchers, red teams, and defenders need these capabilities to find vulnerabilities before attackers
- Offensive risk: Malicious actors could use the same capabilities to exploit systems
For proprietary models (GPT, Claude), this is managed through:
- Usage policies
- Content filters
- Account controls
But K3.1 Pro is open-weight—once released, anyone can use it for any purpose. The question: should Moonshot release the most capable version, or deliberately reduce offensive cyber capability?
Moonshot's Approach: Targeted Data Removal
Moonshot identified cyber-related content embedded in:
- Mid-training corpus — General coding data containing vulnerability examples, exploit patterns
- RL task environments — Coding tasks that happened to involve security-related code
They systematically removed this content while retaining general-purpose coding tasks. The goal: reduce offensive capability without crippling general coding performance.
Evaluation: xdev-bench-hard
Moonshot's internal benchmark of expert-curated vulnerability discovery and exploitation tasks. Each task provides:
- Vulnerable source code
- Binary with mitigations enabled
- Short bug hint
- Goal: Develop an exploit, achieve arbitrary code execution, retrieve a secret string
Results (pass@3):
| Model Version | Score | Notes |
|---|---|---|
| K3.1 Pro (uncontrolled checkpoint) | 90.5% | No cyber data removal at mid-training or RL |
| K3.1 Pro (final release) | 81.0% | Cyber-related data removed |
| Reduction | -9.5 pp | Meaningful reduction in offensive capability |
The 9.5 percentage point reduction demonstrates that targeted data removal works—offensive cyber capability is reduced while general coding remains strong (evidenced by Terminal-Bench 4.0 performance).
Open-Weight Principles
Moonshot articulates two guiding principles:
- Don't extend the absolute frontier: K3.1 Pro's offensive cyber capability should remain behind frontier proprietary models that have been publicly available for months
- Progressively raise the floor: Over time, more capable models should become available as open weights, enabling defensive use to catch up
The reasoning: making defensive capabilities accessible to more teams—especially those maintaining legacy systems without dedicated security budgets—ultimately improves overall software security. A capable open-weight model enables:
- Small teams to audit their own code
- Educational institutions to teach security practically
- Researchers to study vulnerability patterns
- Open-source projects to integrate automated security testing
4. Complete Technical Specifications
For reference, here are K3.1 Pro's complete technical specifications inherited from K3:
| Category | Specification | Value |
|---|---|---|
| Model Size | Total Parameters | 2.8 trillion |
| Active Parameters per Token | 104 billion | |
| Activation Rate | 3.71% (104B / 2.8T) | |
| Architecture | Total Layers | 93 |
| KDA Layers | 69 | |
| Gated MLA Layers | 24 | |
| Dense Layers | 1 | |
| Attention | Hidden Dimension | 7,168 |
| Attention Heads | 96 | |
| Head Dimension | ~75 (7168 / 96) | |
| Mixture of Experts | Latent MoE Dimension | 3,584 |
| MoE Hidden Dimension (per expert) | 3,072 | |
| Number of Routed Experts | 896 | |
| Number of Shared Experts | 2 | |
| Experts Activated per Token | 16 routed + 2 shared = 18 total | |
| Context & Vocabulary | Context Window | 1,048,576 tokens (1M) |
| Vocabulary Size | 160,000 | |
| Positional Encoding | None (NoPE) | |
| Activation Function | SiTU-GLU | |
| Vision | Vision Encoder | MoonViT-V2 |
| Vision Encoder Parameters | 401 million | |
| Supported Modalities | Text, Image, Video | |
| Quantization | Weight Precision | MXFP4 (native from SFT onward) |
| Activation Precision | MXFP8 |
5. MXFP4/MXFP8 Quantization
K3 and K3.1 Pro use quantization-aware training (QAT) from the supervised fine-tuning (SFT) stage onward, rather than post-training quantization.
MXFP: Microscaling Floating-Point
MXFP is a block-based floating-point quantization format:
- MXFP4: 4-bit floating-point values with shared exponent per block
- MXFP8: 8-bit floating-point values with shared exponent per block
Why MXFP over INT quantization?
| Property | INT4/INT8 | MXFP4/MXFP8 |
|---|---|---|
| Dynamic Range | Limited, requires careful calibration | Wide dynamic range via shared exponent |
| Outliers | Difficult to handle | Naturally accommodated |
| Hardware Support | Widespread | Growing (AMD Instinct, newer GPUs) |
| Training Integration | Requires separate QAT | More natural for QAT from early stages |
Quantization-Aware Training
Rather than training in FP16/BF16 and quantizing afterward, K3 trains with quantization from SFT onward:
1. Pre-training: Full precision (likely BF16)
2. SFT onward: MXFP4 weights, MXFP8 activations
3. RL training: Continues with MXFP4/8
Benefits:
- Better final quality: Model learns to work within quantization constraints
- No post-hoc degradation: No quality loss from separate quantization step
- Deployment ready: Released weights are already quantized
- Hardware compatibility: Optimized for emerging MXFP-capable hardware
Storage and Compute Savings
MXFP4 weights:
- 2.8T parameters × 4 bits = 1.4 TB
- Compared to BF16: 2.8T × 16 bits = 5.6 TB
- Savings: 75% storage reduction
This makes K3.1 Pro feasible to download, store, and deploy even for teams without massive infrastructure.
6. Comprehensive Benchmark Analysis
K3.1 Pro was evaluated across coding, agentic, reasoning, multimodal, and cybersecurity benchmarks. Here we present the complete results.
Terminal-Bench 4.0: Coding Agent Performance
Terminal-Bench 4.0 evaluates coding agents on realistic, resource-constrained terminal tasks using strict task-specific tests:
| Model | Score | Notes |
|---|---|---|
| Artificial Analysis (K3.1 Pro) | 67% | Independent testing, highest score |
| Claude Opus 5.5 | 66.4% | Moonshot's evaluation |
| K3.1 Pro (Moonshot) | 65.7% | Moonshot's own evaluation |
| Claude Sonnet 5.5 | 64% | Artificial Analysis |
| GPT-6 Astra | 58.2% | Moonshot's evaluation |
Analysis: The discrepancy between Moonshot's 65.7% and Artificial Analysis's 67% for K3.1 Pro likely reflects different harness configurations (Claude Code vs. Kimi Code). Regardless, K3.1 Pro is within 0.7-1.4 percentage points of Claude Opus 5.5—frontier-level performance.
Agentic Benchmarks
| Benchmark | K3.1 Pro | Claude Opus 5.5 | GPT-6 Astra |
|---|---|---|---|
| GDPval-AA v2.1 (Elo) | 1,846 (3rd) | 1,866 (1st) | 1,803 |
| AutomationBench-AA | 73% | — | — |
| BioMysteryBench | 68.2% | 71.4% | — |
| OfficeQA Pro v2 | 64.4 | — | — |
| OSWorld V2.1 | 48.3% | — | 52.7% |
| MCP Atlas | 81.2% | — | — |
Coding Benchmarks
| Benchmark | K3.1 Pro | K3 | DeepSeek V4.1 |
|---|---|---|---|
| DeepSWE v1.1 | 55.8% | — | 52.1% |
| SWE-Marathon v1.1 | 27.3% | — | — |
| PostTrainBench | 42.6% | — | 39.2% |
| ProgramBench (binary) | 81.3% | — | 78.9% |
| BenchCAD (with tools) | 92.7% | — | — |
| Terminal-Bench Science 0.1 | 12.4% | — | 15.7% |
Intelligence Index: 4th Place Globally
Artificial Analysis Intelligence Index aggregates performance across multiple dimensions:
| Rank | Model | Score | Type |
|---|---|---|---|
| 1 | Claude Opus 5.5 | 58 | Proprietary |
| 2 | Claude Sonnet 5.5 | 56 | Proprietary |
| 2 | Muse Wonder Full | 56 | Proprietary |
| 4 | Kimi K3.1 Pro | 55 | Open-Weight (Nov 4) |
| 5 | GPT-6 Astra | 53 | Proprietary |
| 5 | Gemini 4 Argon | 53 | Proprietary |
| 7 | GPT-6.1 Sol | 52 | Proprietary |
Significance: K3.1 Pro is just 3 points behind the leader and ahead of GPT-6 Astra and Gemini 4 Argon. Once weights are released on November 4, it will be the highest-scoring open-weight model, narrowing the open/proprietary gap from 14 points (K3 at 44) to 3 points.
7. Training Methodology
Training Pipeline Overview
K3's training followed a three-phase approach:
- Pre-training: Large-scale unsupervised learning on diverse text corpus
- Supervised Fine-Tuning (SFT): Instruction following, tool use, multimodal capabilities
- Reinforcement Learning (RL): Optimization for specific capabilities and domains
K3.1 Pro retains K3's pre-training and SFT, adding a much larger RL phase.
Pre-Training Decisions
Data Composition
While Moonshot hasn't disclosed exact data composition, the model's capabilities suggest:
- Code: Heavy representation from GitHub, documentation, Stack Overflow
- Technical: Scientific papers, patents, technical manuals
- Multilingual: Support for Chinese, English, and other languages
- Multimodal: Image-text pairs for vision-language pre-training
Training Stability
Training a 2.8T-parameter MoE model with 896 experts requires careful stability management:
- Expert Load Balancing: Auxiliary loss terms to prevent expert collapse
- Gradient Clipping: Prevents instability from occasional large gradients
- Learning Rate Scheduling: Careful warmup and decay
- Checkpoint Averaging: Exponential moving average of weights
Reinforcement Learning at Scale
RL Methodology
K3.1 Pro's RL likely uses variants of PPO (Proximal Policy Optimization) or similar policy gradient methods with the following components:
- Policy Model: K3 itself, generating responses
- Value Model: Estimates expected reward
- Reward Model: Scores model outputs (combination of learned and rule-based)
- Advantage Estimation: GAE (Generalized Advantage Estimation) for stable gradients
Multi-Domain RL Environment
The key innovation in K3.1 Pro's RL is joint training across hundreds of domains simultaneously:
| Domain | Example Tasks | Reward Signal |
|---|---|---|
| Terminal Coding | Write script, debug error, refactor code | Test passage, execution success |
| Financial Analysis | Extract figures, cross-verify, build models | Accuracy, source grounding |
| 3D Design | Generate CAD, parametric modeling | Geometric correctness, specifications met |
| Long-Horizon Reasoning | Multi-step planning, tool orchestration | Task completion, efficiency |
| Factual QA | Answer questions accurately | Fact verification, no hallucinations |
Each training batch samples tasks from all domains, ensuring the model improves across all capabilities simultaneously without forgetting.
Sandbox Infrastructure
Reliable RL requires reproducible environments:
- Isolated Execution: Each RL episode runs in a fresh container
- Deterministic Seeding: Same task, same initial state
- Resource Limits: CPU, memory, time limits to prevent runaway execution
- Security: Sandboxing prevents model from escaping or affecting training infrastructure
8. Inference and Deployment
Hardware Requirements
K3.1 Pro's 2.8T parameters with MXFP4 quantization require substantial hardware:
| Configuration | Storage | Recommended Hardware |
|---|---|---|
| MXFP4 (native) | ~1.4 TB | 8× A100 80GB or equivalent |
| With full 1M context | Additional KV cache | Requires careful memory management |
Supported Inference Engines
K3 and K3.1 Pro are optimized for:
- vLLM: High-throughput serving with PagedAttention
- SGLang: Optimized for long-context and structured generation
- TokenSpeed: Moonshot's proprietary engine
API Access
K3.1 Pro is available through Moonshot's API:
| Model | Input (per 1M tokens) | Output (per 1M tokens) |
|---|---|---|
| Kimi K3.1 Pro | $2.00 | $10.00 |
| Kimi K3.1 Pro Highspeed | $2.00 | $10.00 |
| Claude Opus 5.5 | $4.00 | $20.00 |
| GPT-6.1 Sol | $2.00 | $10.00 |
K3.1 Pro matches GPT-6.1 Sol pricing and costs half as much as Claude Opus 5.5 while delivering comparable performance on most benchmarks.
9. Comparison with Frontier Models
K3.1 Pro vs. Claude Opus 5.5
| Dimension | K3.1 Pro | Claude Opus 5.5 |
|---|---|---|
| Terminal-Bench 4.0 | 65.7% (67% independent) | 66.4% |
| GDPval-AA | 1,846 Elo (3rd) | 1,866 Elo (1st) |
| Intelligence Index | 55 (4th) | 58 (1st) |
| Pricing (input/output) | $2/$10 | $4/$20 |
| Weights | Open (Nov 4) | Closed |
| Context Window | 1M tokens | 1M tokens |
Summary: K3.1 Pro trails Opus 5.5 by small margins on most benchmarks (0.7-3% on key metrics) while costing half as much and offering open-weight accessibility.
K3.1 Pro vs. GPT-6 Astra
| Dimension | K3.1 Pro | GPT-6 Astra |
|---|---|---|
| Terminal-Bench 4.0 | 65.7% | 58.2% |
| GDPval-AA | 1,846 Elo | 1,803 Elo |
| Intelligence Index | 55 | 53 |
| OSWorld V2.1 | 48.3% | 52.7% |
| Pricing (input/output) | $2/$10 | $2.50/$10 |
Summary: K3.1 Pro outperforms GPT-6 Astra on coding and agentic benchmarks but trails on OS environment automation (OSWorld). Pricing is comparable.
10. Limitations and Open Questions
Architectural Unknowns
Despite the detailed technical report, several aspects remain undisclosed:
- Exact KDA Implementation: The specific gating mechanism and decay function formulations
- AttnRes Block Configuration: How many blocks, which layers belong to which block
- Router Training Details: How the MoE router was initialized and trained to achieve stable 896-expert selection
- KV Cache Compression: Specific eviction strategies for the 24 Gated MLA layers
- Multimodal Fusion: How MoonViT-V2 tokens integrate with text tokens at the embedding level
Performance Gaps
K3.1 Pro trails frontier models on:
- Terminal-Bench Science 0.1: 12.4% vs. DeepSeek V4.1's 15.7%
- OS World V2.1: 48.3% vs. GPT-6 Astra's 52.7%
- DeepSWE/SWE-Marathon: 2-3 percentage points behind Claude Opus 5.5
These gaps suggest areas for future improvement in RL coverage or architectural refinement.
Open Questions
- Scaling Laws: How does the 2.5× scaling efficiency improvement over K2 extrapolate to larger models?
- Inference Scaling: What is the actual latency vs. context length curve for the 1M-token window?
- Quality at Context Extremes: Does performance degrade near the 1M-token limit?
- Expert Specialization: Do individual experts specialize in interpretable patterns (e.g., math, code, specific languages)?
- Fine-Tuning: Can the open weights be effectively fine-tuned on custom datasets while preserving general capabilities?
11. Conclusion
Kimi K3.1 Pro represents a watershed moment in AI development: an open-weight model achieving frontier-level performance through architectural innovation and massive-scale reinforcement learning. By combining Kimi Delta Attention, Attention Residuals, Stable LatentMoE, and No Positional Embeddings, Moonshot created an architecture capable of efficiently processing million-token contexts while maintaining competitive performance across coding, agentic, and knowledge tasks.
The key insights from this analysis:
- Hybrid Attention Works: Combining linear (KDA) and global (Gated MLA) attention in a 3:1 ratio achieves the efficiency needed for long contexts while retaining global comparison capability
- Extreme Sparsity is Viable: Activating just 16 of 896 experts (1.79%) delivers frontier performance with careful MoE design
- NoPE Enables Flexibility: Removing positional embeddings unlocks true long-context generalization
- RL Scales Gracefully: Joint RL across hundreds of domains produces consistent improvements without catastrophic forgetting
- Open-Weight Competitive: The gap between open and proprietary models has narrowed to 3 points on the Intelligence Index
What changed from K3 to K3.1 Pro was not the architecture but the training compute invested in reinforcement learning. By optimizing every layer of the RL stack—framework, inference, sandboxing, scheduling—Moonshot achieved stable, predictable returns from each increment of compute, resulting in a 312 Elo gain on GDPval-AA and frontier-level coding performance.
With weights releasing November 4, 2026, K3.1 Pro will become the most capable open-weight model available, enabling researchers, enterprises, and developers to build on frontier AI capabilities without vendor lock-in or usage restrictions. This marks a fundamental shift: open-weight models are no longer playing catch-up—they're competing at the frontier.
12. References
- Moonshot AI. (2026). Kimi K3.1 Pro: Advancing Open Intelligence. Technical Blog. https://www.kimi.ai/blog/kimi-k3-1-pro
- Kimi Team et al. (2026). Kimi K3: Open Frontier Intelligence. arXiv:2607.24653. https://arxiv.org/abs/2607.24653
- MoonshotAI. (2026). Kimi K3 GitHub Repository. https://github.com/MoonshotAI/Kimi-K3
- Kimi Team. (2026). Attention Residuals. arXiv:2603.15031. https://arxiv.org/abs/2603.15031
- Artificial Analysis. (2026). Kimi K3.1 Pro Launch Benchmarks. https://artificialanalysis.ai/articles/kimi-k3-1-pro-launch-benchmarks
- Terminal-Bench. (2026). Terminal-Bench 4.0 Official Leaderboard. https://www.tbench.ai/
- VestigeKV Research. (2026). The NoPE-MLA KV Cache Carries Its Own Eviction Signal in a Vestigial Branch. arXiv:2609.03949.
- SemiAnalysis. (2026). Kimi K3: The Manos, The Mythos, The Legendos. Technical Analysis.