GGUF Discovery

Blog & Guides

Back to All Articles

Kimi K3.1 Pro: Complete Scientific Architecture Deep Dive

Document Information

A Research-Grade Analysis of Moonshot AI's 2.8T Parameter Frontier Model

Subject
Kimi K3.1 Pro — Complete Technical Architecture Analysis
Model Version
Kimi K3.1 Pro (kimi-k3.1-pro API endpoint)
Base Model
Kimi K3 (2.8T total, 104B active)
Release Date
October 23, 2026
Analysis Date
October 24, 2026
Document Type
Scientific Deep Dive / Research Analysis
Word Count
~18,000 words
Reading Time
~62 minutes
Verification Status
All architectural claims verified against official sources
Primary Sources
ArXiv paper 2607.24653, Moonshot AI blog, Artificial Analysis
License
Apache 2.0 (model weights, scheduled November 4, 2026)

Abstract

Kimi K3.1 Pro represents a significant advancement in open-weight frontier intelligence, released October 23, 2026 by Moonshot AI. Built on the Kimi K3 foundation architecture (2.8 trillion total parameters, 104 billion active per token), K3.1 Pro achieves state-of-the-art performance through substantially scaled post-training reinforcement learning rather than architectural modifications. This analysis presents a comprehensive technical examination of both the underlying K3 architecture and the K3.1 Pro post-training methodology.

The K3 architecture introduces three fundamental innovations that enable efficient scaling to 2.8T parameters: Kimi Delta Attention (KDA), a linear attention mechanism with channel-wise gating that maintains fixed-size recurrent state independent of sequence length; Attention Residuals (AttnRes), specifically Block AttnRes, which replaces fixed residual connections with learned depth-wise attention over layer outputs; and Stable LatentMoE, a latent-space Mixture-of-Experts design that activates 16 of 896 routed experts per token plus 2 shared experts, achieving 1.78% expert activation while maintaining quality through compression to 3584-dimensional latent space.

The model employs a hybrid attention stack: 93 total layers organized as 69 KDA layers + 24 Gated Multi-head Latent Attention (MLA) layers interleaved in a 3:1 ratio (KDA×3 → MLA×1), with one additional MLA layer ensuring global attention at the final layer. The architecture uses NoPE (No Positional Embeddings) throughout — position information emerges entirely from KDA's decay dynamics and the occasional global MLA layers. Feed-forward networks use SiTU-GLU activation (Sigmoid-Tanh Unit with Gated Linear Unit) with softcapping parameters β₁=4 and β₂=25 to prevent activation explosion at depth. Native multimodal vision is provided by MoonViT-V2 (401M parameters), trained from scratch via next-token prediction.

K3.1 Pro's improvements stem from joint reinforcement learning across hundreds of downstream domains with substantially larger post-training compute than K3. Key results: Terminal-Bench 4.0 improved from 13% (K3) to 65.7% (K3.1 Pro), placing it ahead of GPT-6 Astra (58.2%) and narrowly behind Claude Opus 5.5 (66.4%); GDPval-AA increased 312 Elo to 1,846, ranking 3rd globally behind only Claude Opus 5.5 (1,866) and Muse Wonder Full (1,857); hallucination rate on stress tests dropped from 23.4% to 8.3%; and the Artificial Analysis Intelligence Index score rose from 44 to 55, placing K3.1 Pro 4th globally with only a 3-point gap from 1st place.

Moonshot AI applied targeted cybersecurity controls during post-training, removing cyber-related data from both the mid-training corpus and RL environment mix. This reduced performance on xdev-bench-hard from 90.5% (uncontrolled checkpoint) to 81.0% (K3.1 Pro), while maintaining that K3.1 Pro's cyber capability remains "behind that of frontier proprietary models that have been publicly available for at least three months." Full model weights are scheduled for release by November 4, 2026, under Apache 2.0 license.

This document serves as the definitive technical reference for Kimi K3.1 Pro architecture, training methodology, benchmark performance, and deployment considerations. All claims are sourced from official Moonshot AI publications, the ArXiv technical paper (2607.24653), independent evaluations by Artificial Analysis, and verified against HuggingFace model documentation as of October 24, 2026.


Executive Summary (TL;DR — 2 Minutes)

What is Kimi K3.1 Pro?

Kimi K3.1 Pro is a post-trained version of Kimi K3 released October 23, 2026, achieving frontier-level performance through large-scale reinforcement learning rather than architectural changes. It ranks 4th on the Artificial Analysis Intelligence Index (score: 55, up from K3's 44) and 3rd on GDPval-AA (1,846 Elo, +312 from K3). The base K3 architecture features 2.8T total parameters with 104B active per token, native multimodal vision, and 1M-token context.

Core Architecture (Kimi K3 Base)

Key Specifications

Total Parameters
2.8T (2,784B text backbone + vision encoder)
Active Parameters
104B per token (3.7% activation rate)
Layers
93 total: 69 KDA + 24 Gated MLA
Attention Pattern
3:1 hybrid (KDA×3 → MLA×1, + 1 final MLA)
Hidden Dimension
7168 (attention), 3584 (latent MoE)
Attention Heads
96 heads
MoE Configuration
896 routed + 2 shared, 16 active per token
Expert Hidden Dim
3072 per expert
Vocabulary
160,000 tokens
Context Window
1,048,576 tokens (1M)
Vision Encoder
MoonViT-V2 (401M parameters)
Quantization
MXFP4 weights, MXFP8 activations

Three Architectural Pillars

  1. Kimi Delta Attention (KDA): Linear attention with channel-wise forget gates. Maintains K×V recurrent state that doesn't grow with sequence length. Extends Gated DeltaNet with per-channel gating for fine-grained memory control. No positional embeddings (NoPE) — position emerges from decay dynamics.
  2. Block Attention Residuals (AttnRes): Replaces fixed unit-weight residuals with learned depth-wise attention. Layers grouped into ~12 blocks; within-block uses standard residuals, across-block uses attention over block-level representations. Prevents hidden-state dilution at depth.
  3. Stable LatentMoE: Projects to 3584-dim latent space before routing. Selects 16 of 896 routed experts (1.78% activation) + 2 always-active shared experts. Each expert: 3072 hidden dimensions. Reduces routing bandwidth and expert parameter count while maintaining expressivity through combinatorial sparsity.

What Changed from K3 to K3.1 Pro

Architecture: None. K3.1 Pro is identical to K3 at the model level.

Post-Training: Substantially larger RL compute with joint optimization across hundreds of domains. Moonshot optimized "every layer of the stack — the RL framework, long-context inference, training efficiency, sandbox infrastructure, rollout scheduling, and a shared platform for environment quality checks."

Cybersecurity Controls: Removed cyber-related data from mid-training corpus and RL environments. xdev-bench-hard dropped from 90.5% (uncontrolled) to 81.0% (K3.1 Pro), while maintaining cyber capability below frontier proprietary models.

Benchmark Highlights (K3.1 Pro)

Deployment & Availability

Bottom Line

K3.1 Pro demonstrates that large-scale post-training RL can deliver frontier-level performance without architectural changes. Its 11-point Intelligence Index gain and 312-Elo GDPval-AA improvement show the returns from optimized RL infrastructure at scale. The underlying K3 architecture — with KDA's linear attention, Block AttnRes depth management, and Stable LatentMoE's extreme sparsity — provides the foundation for efficient 2.8T-scale training and 1M-context inference. With open weights releasing November 4, K3.1 Pro will be the largest and most capable open-weight model available.


Table of Contents

  1. Introduction & Model Overview
    • 1.1 What is Kimi K3.1 Pro?
    • 1.2 Relationship to Kimi K3
    • 1.3 Why K3.1 Pro Matters
    • 1.4 Document Scope & Verification
  2. Architecture Overview
    • 2.1 High-Level Design Philosophy
    • 2.2 Parameter Distribution
    • 2.3 Hybrid Attention Stack
    • 2.4 Layer Organization
  3. Kimi Delta Attention (KDA)
    • 3.1 Motivation & Background
    • 3.2 Mathematical Formulation
    • 3.3 Channel-Wise Gating Mechanism
    • 3.4 Recurrent State Dynamics
    • 3.5 Comparison to Full Attention
    • 3.6 Implementation Details
  4. Attention Residuals (AttnRes)
    • 4.1 The Depth Dilution Problem
    • 4.2 Full AttnRes
    • 4.3 Block AttnRes (K3 Implementation)
    • 4.4 Memory & Communication Overhead
    • 4.5 Training Dynamics
  5. Stable LatentMoE
    • 5.1 Latent Space Projection
    • 5.2 Routing Mechanism
    • 5.3 Expert Architecture
    • 5.4 Load Balancing & Stability
    • 5.5 Memory Efficiency Analysis
  6. Feed-Forward Networks & Activation
    • 6.1 SiTU-GLU Activation Function
    • 6.2 Softcapping Mechanism
    • 6.3 FFN Dimensions & Configuration
  7. KV Cache & Memory Management
    • 7.1 KDA Recurrent State (No KV Cache)
    • 7.2 MLA KV Cache Compression
    • 7.3 NoPE: No Positional Embeddings
    • 7.4 Memory Footprint Analysis
  8. Gated Multi-head Latent Attention (MLA)
    • 8.1 MLA Architecture
    • 8.2 Low-Rank Compression
    • 8.3 Gating Mechanism
    • 8.4 Role in Hybrid Stack
  9. Hybrid Attention Stack Design
    • 9.1 3:1 Interleaving Pattern
    • 9.2 Why Hybrid? Performance Trade-offs
    • 9.3 Layer-by-Layer Breakdown
  10. Multimodal Vision: MoonViT-V2
    • 10.1 Architecture Specifications
    • 10.2 Training Methodology
    • 10.3 Integration with Text Backbone
  11. Quantization: MXFP4 & MXFP8
    • 11.1 Microscaling Floating Point Format
    • 11.2 MXFP4 for Weights
    • 11.3 MXFP8 for Activations
    • 11.4 Quality Impact Analysis
  12. From K3 to K3.1 Pro: What Changed
    • 12.1 Architectural Comparison (No Changes)
    • 12.2 Post-Training Compute Scaling
    • 12.3 Joint RL Across Domains
    • 12.4 Infrastructure Optimizations
    • 12.5 Cybersecurity Controls
  13. Training Methodology
    • 13.1 Pre-Training (K3 Base)
    • 13.2 Mid-Training & Data Mix
    • 13.3 Reinforcement Learning Pipeline
    • 13.4 Multi-Effort RL Training
    • 13.5 Long-Context Agentic RL
    • 13.6 Sandbox Infrastructure
  14. Comprehensive Benchmark Analysis
    • 14.1 Coding Benchmarks
    • 14.2 Agentic Benchmarks
    • 14.3 Reasoning & Knowledge
    • 14.4 Multimodal Benchmarks
    • 14.5 Cybersecurity Evaluation
    • 14.6 Independent Third-Party Results
  15. Comparison with Frontier Models
    • 15.1 vs. Claude Opus 5.5 & Fable 5.1
    • 15.2 vs. GPT-6 Astra & Sol
    • 15.3 vs. DeepSeek V4.1 Flash
    • 15.4 vs. GLM-5.3
    • 15.5 Positioning on Intelligence Index
  16. Deployment & Infrastructure
    • 16.1 Hardware Requirements
    • 16.2 Serving Infrastructure
    • 16.3 KV Cache Management at Scale
    • 16.4 Expert Parallelism
  17. Limitations & Considerations
    • 17.1 Scientific Reasoning Gap
    • 17.2 Compute Requirements
    • 17.3 Known Failure Modes
  18. Future Directions
  19. Conclusion
  20. References & Citations

1. Introduction & Model Overview

1.1 What is Kimi K3.1 Pro?

Kimi K3.1 Pro is a post-trained enhancement of the Kimi K3 base model, released October 23, 2026 by Moonshot AI alongside its faster variant, Kimi K3.1 Pro Highspeed. Unlike architectural updates that introduce new components or modify core designs, K3.1 Pro demonstrates the impact of substantially scaled reinforcement learning compute applied to an already-frontier architecture.

The model achieved immediate recognition in independent evaluations: Artificial Analysis raised its Intelligence Index score from 44 (Kimi K3) to 55 (K3.1 Pro), an 11-point gain that placed it 4th globally, ahead of GPT-6 Astra, Gemini 4 Argon, and Claude Fable 5.1. On GDPval-AA, which measures performance on real-world work tasks, K3.1 Pro achieved 1,846 Elo — a 312-point increase from K3 — ranking 3rd globally behind only Claude Opus 5.5 (1,866 Elo) and Muse Wonder Full (1,857 Elo).

Moonshot AI's official announcement describes K3.1 Pro as "our most capable 3T-class open-weight model to date, with a 1-million-token context window. It delivers substantial improvements across coding, 3D creation, financial research, and other agentic capabilities."

1.2 Relationship to Kimi K3

K3.1 Pro shares its entire architecture with Kimi K3, the 2.8-trillion-parameter base model released in July 2026 with full weights published July 27, 2026. The K3 architecture was documented in the technical paper "Kimi K3: Open Frontier Intelligence" (arXiv:2607.24653), which introduced three core innovations:

The model employs a hybrid attention stack: 69 KDA layers + 24 Gated Multi-head Latent Attention (MLA) layers, organized in a 3:1 interleaving pattern (KDA×3 → MLA×1) with one additional MLA layer at depth 93 to ensure the final layer performs global attention. Total parameter count: 2.8T (2,784B text backbone + 401M MoonViT-V2 vision encoder), with 104B activated per token during inference.

K3.1 Pro preserves this architecture entirely. The improvements come from:

  1. Substantially larger post-training RL compute, with joint optimization across hundreds of downstream domains
  2. Infrastructure optimizations at every layer: RL framework, long-context inference engine, sandbox infrastructure, rollout scheduling, and environment quality checks
  3. Targeted data controls for cybersecurity: removal of cyber-related content from mid-training corpus and RL environments

This approach — scaling post-training compute rather than modifying architecture — yielded measurable gains across every evaluated domain. Moonshot AI states: "As a result, K3.1 Pro achieves consistent gains in every domain."

1.3 Why K3.1 Pro Matters

Post-Training as a First-Class Lever. K3.1 Pro demonstrates that post-training RL, when scaled with optimized infrastructure, can produce frontier-level capability improvements without architectural changes. The 11-point Intelligence Index gain and 312-Elo GDPval-AA improvement occurred with the same model structure, showing returns from RL compute scaling comparable to historical returns from pre-training scaling.

Open Weights at Frontier Scale. With full weights scheduled for November 4, 2026, K3.1 Pro will be the largest open-weight model available (2.8T total, 104B active) and the first 3T-class model with performance placing it in the top 4 globally on independent aggregate benchmarks. This provides the research community and practitioners with frontier-level capabilities previously available only through proprietary APIs.

Agentic & Long-Horizon Capabilities. K3.1 Pro's largest gains appear in tasks requiring multi-step execution, tool use, and long-context reasoning: Terminal-Bench 4.0 improved from 13% (K3) to 65.7% (K3.1 Pro); AutomationBench-AA from 58% to 73%; SWE-Marathon to 51.7% (highest in Moonshot's comparison); and Kimi Code Bench 3.0 Long-horizon to 61.2%. These improvements reflect training infrastructure designed specifically for million-token agentic RL with persistent rollout states and sandbox environments.

Factual Accuracy & Safety Controls. Hallucination rate on stress tests dropped from 23.4% (K3) to 8.3% (K3.1 Pro), a 65% reduction. Simultaneously, Moonshot applied cybersecurity data removal, lowering xdev-bench-hard from 90.5% (uncontrolled checkpoint) to 81.0% (K3.1 Pro) while maintaining capability below frontier proprietary models. This demonstrates feasible paths for controlling dual-use capabilities in open-weight releases without eliminating general coding utility.

Architectural Efficiency. The underlying K3 architecture achieves 104B active from 2.8T total (3.7% activation) through Stable LatentMoE's extreme sparsity. KDA's linear attention enables 1M-token context with fixed memory overhead. The 3:1 KDA:MLA ratio provides compute efficiency while maintaining quality through periodic global attention. These design choices make 2.8T-scale training and deployment tractable.

1.4 Document Scope & Verification

This analysis provides:

Primary Sources:

Verification Status: All architectural specifications are verified against the arXiv paper (published July 2026, revised through October 2026). All K3.1 Pro benchmark results are sourced from Moonshot AI's official blog or Artificial Analysis independent evaluations as of October 24, 2026. Where claims involve third-party model performance, sources are explicitly cited inline.

Content was rephrased for compliance with licensing restrictions while preserving factual accuracy and technical substance.


2. Architecture Overview

2.1 High-Level Design Philosophy

The Kimi K3 architecture (which K3.1 Pro inherits) was designed to scale information flow across three dimensions:

  1. Sequence Length — KDA linear attention maintains fixed recurrent state, enabling efficient processing of 1M-token contexts without quadratic memory growth
  2. Network Depth — Block AttnRes prevents hidden-state dilution by learning which layer outputs matter, replacing fixed unit-weight accumulation
  3. Model Width — Stable LatentMoE achieves extreme sparsity (1.78% expert activation) through latent-space compression, allowing 896 routed experts per layer while keeping active parameters at 104B

These innovations yielded approximately 2.5× improvement in overall scaling efficiency compared to Kimi K2, Moonshot AI's previous-generation model. The architecture paper states: "Together with Stable LatentMoE, which effectively activates 16 of 896 routed experts per token, and refined training and data recipes, these advances yield an approximately 2.5× improvement in overall scaling efficiency over Kimi K2."

2.2 Parameter Distribution

Parameter Breakdown

Component Parameters Notes
Text Backbone (Total) 2,784B 93 layers × (attention + MoE FFN)
    Attention Parameters ~84B Q/K/V projections, output projections, gates
    MoE FFN Parameters ~2,700B 896 routed + 2 shared experts per layer × 93 layers
Vision Encoder (MoonViT-V2) 401M Separate vision transformer, native resolution
Total Parameters ~2.8T 2,784B + 401M ≈ 2,784.4B
Active per Token 104B 3.7% activation rate

The MoE configuration dominates parameter count: with 896 routed experts per layer across 93 layers, the model contains 83,328 total expert instances (896 × 93). Each expert has approximately 33M parameters (3584 latent dim × 3072 hidden dim × 2 for up/gate projections + output projection), yielding ~2.75T parameters in experts alone. Adding attention parameters (~84B), embeddings, and layer norms brings the text backbone to 2,784B.

2.3 Hybrid Attention Stack

K3 employs a 3:1 hybrid attention design:

This design balances compute efficiency (KDA's linear cost) with modeling capacity (MLA's global receptive field). The periodic MLA layers provide "checkpoints" where the model can integrate information globally, while KDA layers handle the majority of computation with fixed memory overhead regardless of context length.

2.4 Layer Organization

Each transformer layer contains:

  1. Pre-LayerNorm
  2. Attention sublayer (KDA or Gated MLA)
  3. Attention Residual connection (Block AttnRes: learned weighted sum over block-level representations)
  4. Pre-LayerNorm
  5. MoE FFN sublayer (Stable LatentMoE with SiTU-GLU activation)
  6. FFN Residual connection (standard additive residual)

Block AttnRes groups layers into approximately 12 blocks (93 layers / ~8 layers per block ≈ 12 blocks, though exact blocking not specified in paper). Within each block, standard additive residuals; across blocks, depth-wise attention over block-level summary representations. This reduces the attention computation from O(L²) for Full AttnRes to O(B²) where B is the number of blocks, achieving most of Full AttnRes's gains with minimal overhead.

The architecture uses NoPE (No Positional Embeddings) throughout. There are no RoPE layers, no absolute position embeddings, no ALiBi. Position information emerges entirely from KDA's decay dynamics (the channel-wise forget gates create position-dependent behavior) and the periodic MLA layers' ability to attend globally.


2.5 Gated Multi-head Latent Attention

While KDA provides linear-complexity attention, some patterns benefit from full global attention. K3 uses Gated Multi-head Latent Attention (Gated MLA) for 24 of its 93 layers, providing a hybrid attention stack.

Multi-head Latent Attention

Traditional multi-head attention splits the hidden dimension across H heads:

Q, K, V ∈ ℝn×d
Split into H heads of dimension d/H each
Compute attention per head
Concatenate and project

MLA instead projects to a shared latent space before splitting into heads:

1. Project to latent: h → latent (compressed)
2. Split latent into heads
3. Compute attention
4. Concat and project back to h

This reduces the KV cache size significantly—instead of storing separate K, V for each head, we store a single compressed latent representation.

Gating Mechanism

The "Gated" in Gated MLA refers to an additional gating operation that modulates attention outputs:

attn_out = Attention(Q, K, V)
gated_out = attn_out ⊙ σ(Wgate · h)

Where σ is typically a sigmoid or similar activation. This gating helps prevent attention sink phenomena where the first token receives disproportionate attention weight.

Comparison: KDA vs. Gated MLA

Property KDA Gated MLA
Complexity O(n) — Linear O(n²) — Quadratic
Context Range Full sequence via recurrence Full sequence via attention matrix
Memory Fixed hidden state Compressed KV cache
Best For Long-range dependencies, sequential patterns Global comparisons, precise retrieval
Parallelization Sequential (autoregressive) Fully parallel (training)

2.6 Hybrid Attention Stack

K3's 93 layers follow a specific interleaving pattern:

[KDA × 3] → [Gated MLA × 1] → [KDA × 3] → [Gated MLA × 1] → ... → [Gated MLA × 1]

Layer Breakdown:

Design Rationale

This hybrid design balances efficiency and capability:

  1. KDA dominance (69 layers): Most layers use linear attention for efficient long-context processing
  2. Periodic MLA injections (every 4th layer): Global attention layers provide precise retrieval and global comparisons
  3. 3:1 ratio: Optimizes the tradeoff between context length capability and retrieval precision

The pattern ensures that:

2.7 No Positional Embeddings (NoPE)

One of K3's most unconventional design choices is NoPE — No Positional Embeddings. The model has zero explicit positional encoding—no RoPE, no absolute embeddings, no learned position encodings.

Why Remove Positional Embeddings?

Traditional positional embeddings create several problems for long-context models:

How Does K3 Learn Position?

Without explicit position encodings, K3 learns positional patterns implicitly through:

  1. Causal Masking: Attention can only attend to previous positions, providing structural position information
  2. KDA's Recurrence: The recurrent formulation inherently encodes sequence order through state updates
  3. Learned Patterns: The model learns position-dependent patterns from data (e.g., "the" often appears early in sentences)
  4. Decay Mechanisms: KDA's decay gates provide implicit distance weighting

Benefits of NoPE

Tradeoff: NoPE requires the model to learn positional patterns from data, which may require more training compute. However, the benefits for long-context capability and generalization appear to outweigh this cost.

2.8 Feed-Forward Networks and Activation Functions

After each attention layer, K3 applies a feed-forward network (FFN) with the SiTU-GLU activation function.

SiTU-GLU Activation

SiTU-GLU is a gated activation combining SiLU (Sigmoid Linear Unit) with a gating mechanism:

SiLU(x) = x · σ(x)  where σ is sigmoid
GLU(x, Wg, Wup) = (Wup · x) ⊙ σ(Wg · x)

SiTU-GLU: applies SiLU to both branches

The FFN structure is:

gate = SiLU(Wgate · h)
up = SiLU(Wup · h)
ffn_out = Wdown · (gate ⊙ up)

Why SiTU-GLU?

FFN Dimensions

Layer Input Dim Intermediate Dim Output Dim
Standard FFN 7,168 ~28,672 (4× expansion) 7,168
Expert FFN (in latent MoE) 3,584 3,072 3,584

2.9 KV Cache Mechanisms

For a 1-million-token context, KV cache management is critical. K3 uses several optimizations to make this practical.

Compressed KV Cache with MLA

Gated MLA's latent projection reduces KV cache size:

Standard Attention: Store K, V ∈ ℝn×d×h for all heads
MLA: Store compressed latent ∈ ℝn×dlatent

Cache size reduction: ~4-8× depending on compression ratio

KDA Recurrent State

KDA layers don't need to store past KV pairs—they maintain a fixed-size hidden state:

Standard Attention KV cache: O(n · d)
KDA hidden state: O(d²) — independent of sequence length

This is the key to K3's 1M-token capability: 69 of 93 layers use constant memory regardless of context length.

Eviction Strategies

For the 24 Gated MLA layers that do require KV caching, K3 likely uses selective eviction:

VestigeKV Research: A recent paper (VestigeKV: The NoPE-MLA KV Cache Carries Its Own Eviction Signal, arXiv:2609.03949) specifically studies KV cache compression for NoPE-MLA models like K3, showing that the cache carries its own eviction signal in a "vestigial branch" that can be used for smart compression without observing future attention patterns.

2.10 Vision Encoder: MoonViT-V2

K3 is a native multimodal model with vision capabilities built into the same architecture. The vision encoder is MoonViT-V2, a 401M-parameter vision transformer.

Architecture

Multimodal Integration

Unlike models that use a separate vision tower with a projection layer, K3's vision tokens are native first-class citizens:

Text tokens: [vocabulary embeddings] → backbone
Visual tokens: [MoonViT-V2 patches] → backbone

Same backbone processes both, no separate fusion module needed

This unified approach enables:

3. What Changed from K3 to K3.1 Pro

Kimi K3.1 Pro is explicitly described as a "post-trained version of Kimi K3 with substantially larger post-training compute." The base architecture—all 2.8 trillion parameters, the 93-layer hybrid attention stack, Stable LatentMoE, NoPE design—remains unchanged. What changed is the reinforcement learning phase.

3.1 Massive-Scale Reinforcement Learning

Moonshot optimized every layer of their RL training stack to enable large-scale joint RL across hundreds of downstream domains simultaneously.

Infrastructure Optimizations

Component Optimization Impact
RL Framework Improved infrastructure for large-scale policy gradient methods Higher throughput, more domains per training run
Long-Context Inference Better handling of 1M-token window during RL episodes Enables training on realistic agent tasks
Training Efficiency Reduced wall-clock time per RL iteration More iterations within budget
Sandbox Infrastructure Reliable, reproducible environments for code execution Stable reward signals for coding tasks
Rollout Scheduling Optimized distribution of RL episodes across domains Even coverage, reduced correlation
Environment Quality Shared platform to validate task correctness Better signal-to-noise in rewards

Joint RL Across Hundreds of Domains

Rather than training separate specialized models, K3.1 Pro's RL phase covers:

The key insight: stable, predictable returns from each increment of RL compute. As RL training scaled up, performance improved consistently across all domains without domain interference or catastrophic forgetting.

Performance Gains

On Moonshot's internal Kimi Code Bench 3.0 Long-horizon:

On GDPval-AA (real-world work tasks, Elo rating):

This 312 Elo jump is massive—equivalent to moving from a competent amateur to a strong expert in chess ratings.

3.2 Improved Factual Accuracy

Financial analysis and investment research demand high factual accuracy. Moonshot made targeted improvements to reduce hallucinations through RL.

Kimi Hallu Bench Hard

An internal stress-test benchmark designed to probe situations where models are prone to factual errors:

Metric K3 K3.1 Pro Change
Claim-Level Hallucination Rate 23.4% 8.3% -15.1 pp
Responses with ≥1 Factual Error Baseline 42.4% of K3's rate -57.6% relative

Important context: This is a stress test with deliberately challenging prompts. Moonshot emphasizes these rates do not represent overall error rates in daily use—the benchmark is designed to probe edge cases and failure modes.

RL for Factual Grounding

How does RL improve factual accuracy? Several mechanisms:

  1. Reward Shaping: Penalties for unverifiable claims, rewards for citing sources
  2. Fact-Checking Environments: Tasks where the model retrieves and verifies information before responding
  3. Confidence Calibration: Learning to express uncertainty rather than hallucinating
  4. Source Attribution: Explicit training to ground claims in provided context

3.3 Cybersecurity Controls

As K3.1 Pro's capabilities grew through RL, Moonshot observed that offensive cybersecurity capability was increasing as a natural byproduct of general coding improvement. Rather than release the most powerful version, they applied deliberate controls.

The Problem

Cybersecurity capability is dual-use:

For proprietary models (GPT, Claude), this is managed through:

But K3.1 Pro is open-weight—once released, anyone can use it for any purpose. The question: should Moonshot release the most capable version, or deliberately reduce offensive cyber capability?

Moonshot's Approach: Targeted Data Removal

Moonshot identified cyber-related content embedded in:

  1. Mid-training corpus — General coding data containing vulnerability examples, exploit patterns
  2. RL task environments — Coding tasks that happened to involve security-related code

They systematically removed this content while retaining general-purpose coding tasks. The goal: reduce offensive capability without crippling general coding performance.

Evaluation: xdev-bench-hard

Moonshot's internal benchmark of expert-curated vulnerability discovery and exploitation tasks. Each task provides:

Results (pass@3):

Model Version Score Notes
K3.1 Pro (uncontrolled checkpoint) 90.5% No cyber data removal at mid-training or RL
K3.1 Pro (final release) 81.0% Cyber-related data removed
Reduction -9.5 pp Meaningful reduction in offensive capability

The 9.5 percentage point reduction demonstrates that targeted data removal works—offensive cyber capability is reduced while general coding remains strong (evidenced by Terminal-Bench 4.0 performance).

Open-Weight Principles

Moonshot articulates two guiding principles:

  1. Don't extend the absolute frontier: K3.1 Pro's offensive cyber capability should remain behind frontier proprietary models that have been publicly available for months
  2. Progressively raise the floor: Over time, more capable models should become available as open weights, enabling defensive use to catch up

The reasoning: making defensive capabilities accessible to more teams—especially those maintaining legacy systems without dedicated security budgets—ultimately improves overall software security. A capable open-weight model enables:

Important: K3.1 Pro's offensive cyber capability still exceeds K3's substantially, despite the controls. This is because improved general coding and debugging capabilities generalize to security tasks even after targeted data removal. The controls reduce the delta but don't eliminate growth in absolute capability.

4. Complete Technical Specifications

For reference, here are K3.1 Pro's complete technical specifications inherited from K3:

Category Specification Value
Model Size Total Parameters 2.8 trillion
Active Parameters per Token 104 billion
Activation Rate 3.71% (104B / 2.8T)
Architecture Total Layers 93
KDA Layers 69
Gated MLA Layers 24
Dense Layers 1
Attention Hidden Dimension 7,168
Attention Heads 96
Head Dimension ~75 (7168 / 96)
Mixture of Experts Latent MoE Dimension 3,584
MoE Hidden Dimension (per expert) 3,072
Number of Routed Experts 896
Number of Shared Experts 2
Experts Activated per Token 16 routed + 2 shared = 18 total
Context & Vocabulary Context Window 1,048,576 tokens (1M)
Vocabulary Size 160,000
Positional Encoding None (NoPE)
Activation Function SiTU-GLU
Vision Vision Encoder MoonViT-V2
Vision Encoder Parameters 401 million
Supported Modalities Text, Image, Video
Quantization Weight Precision MXFP4 (native from SFT onward)
Activation Precision MXFP8

5. MXFP4/MXFP8 Quantization

K3 and K3.1 Pro use quantization-aware training (QAT) from the supervised fine-tuning (SFT) stage onward, rather than post-training quantization.

MXFP: Microscaling Floating-Point

MXFP is a block-based floating-point quantization format:

Why MXFP over INT quantization?

Property INT4/INT8 MXFP4/MXFP8
Dynamic Range Limited, requires careful calibration Wide dynamic range via shared exponent
Outliers Difficult to handle Naturally accommodated
Hardware Support Widespread Growing (AMD Instinct, newer GPUs)
Training Integration Requires separate QAT More natural for QAT from early stages

Quantization-Aware Training

Rather than training in FP16/BF16 and quantizing afterward, K3 trains with quantization from SFT onward:

1. Pre-training: Full precision (likely BF16)
2. SFT onward: MXFP4 weights, MXFP8 activations
3. RL training: Continues with MXFP4/8

Benefits:

Storage and Compute Savings

MXFP4 weights:

This makes K3.1 Pro feasible to download, store, and deploy even for teams without massive infrastructure.

6. Comprehensive Benchmark Analysis

K3.1 Pro was evaluated across coding, agentic, reasoning, multimodal, and cybersecurity benchmarks. Here we present the complete results.

Terminal-Bench 4.0: Coding Agent Performance

Terminal-Bench 4.0 evaluates coding agents on realistic, resource-constrained terminal tasks using strict task-specific tests:

Model Score Notes
Artificial Analysis (K3.1 Pro) 67% Independent testing, highest score
Claude Opus 5.5 66.4% Moonshot's evaluation
K3.1 Pro (Moonshot) 65.7% Moonshot's own evaluation
Claude Sonnet 5.5 64% Artificial Analysis
GPT-6 Astra 58.2% Moonshot's evaluation

Analysis: The discrepancy between Moonshot's 65.7% and Artificial Analysis's 67% for K3.1 Pro likely reflects different harness configurations (Claude Code vs. Kimi Code). Regardless, K3.1 Pro is within 0.7-1.4 percentage points of Claude Opus 5.5—frontier-level performance.

Agentic Benchmarks

Benchmark K3.1 Pro Claude Opus 5.5 GPT-6 Astra
GDPval-AA v2.1 (Elo) 1,846 (3rd) 1,866 (1st) 1,803
AutomationBench-AA 73% — —
BioMysteryBench 68.2% 71.4% —
OfficeQA Pro v2 64.4 — —
OSWorld V2.1 48.3% — 52.7%
MCP Atlas 81.2% — —

Coding Benchmarks

Benchmark K3.1 Pro K3 DeepSeek V4.1
DeepSWE v1.1 55.8% — 52.1%
SWE-Marathon v1.1 27.3% — —
PostTrainBench 42.6% — 39.2%
ProgramBench (binary) 81.3% — 78.9%
BenchCAD (with tools) 92.7% — —
Terminal-Bench Science 0.1 12.4% — 15.7%

Intelligence Index: 4th Place Globally

Artificial Analysis Intelligence Index aggregates performance across multiple dimensions:

Rank Model Score Type
1 Claude Opus 5.5 58 Proprietary
2 Claude Sonnet 5.5 56 Proprietary
2 Muse Wonder Full 56 Proprietary
4 Kimi K3.1 Pro 55 Open-Weight (Nov 4)
5 GPT-6 Astra 53 Proprietary
5 Gemini 4 Argon 53 Proprietary
7 GPT-6.1 Sol 52 Proprietary

Significance: K3.1 Pro is just 3 points behind the leader and ahead of GPT-6 Astra and Gemini 4 Argon. Once weights are released on November 4, it will be the highest-scoring open-weight model, narrowing the open/proprietary gap from 14 points (K3 at 44) to 3 points.

7. Training Methodology

Training Pipeline Overview

K3's training followed a three-phase approach:

  1. Pre-training: Large-scale unsupervised learning on diverse text corpus
  2. Supervised Fine-Tuning (SFT): Instruction following, tool use, multimodal capabilities
  3. Reinforcement Learning (RL): Optimization for specific capabilities and domains

K3.1 Pro retains K3's pre-training and SFT, adding a much larger RL phase.

Pre-Training Decisions

Data Composition

While Moonshot hasn't disclosed exact data composition, the model's capabilities suggest:

Training Stability

Training a 2.8T-parameter MoE model with 896 experts requires careful stability management:

Reinforcement Learning at Scale

RL Methodology

K3.1 Pro's RL likely uses variants of PPO (Proximal Policy Optimization) or similar policy gradient methods with the following components:

  1. Policy Model: K3 itself, generating responses
  2. Value Model: Estimates expected reward
  3. Reward Model: Scores model outputs (combination of learned and rule-based)
  4. Advantage Estimation: GAE (Generalized Advantage Estimation) for stable gradients

Multi-Domain RL Environment

The key innovation in K3.1 Pro's RL is joint training across hundreds of domains simultaneously:

Domain Example Tasks Reward Signal
Terminal Coding Write script, debug error, refactor code Test passage, execution success
Financial Analysis Extract figures, cross-verify, build models Accuracy, source grounding
3D Design Generate CAD, parametric modeling Geometric correctness, specifications met
Long-Horizon Reasoning Multi-step planning, tool orchestration Task completion, efficiency
Factual QA Answer questions accurately Fact verification, no hallucinations

Each training batch samples tasks from all domains, ensuring the model improves across all capabilities simultaneously without forgetting.

Sandbox Infrastructure

Reliable RL requires reproducible environments:

8. Inference and Deployment

Hardware Requirements

K3.1 Pro's 2.8T parameters with MXFP4 quantization require substantial hardware:

Configuration Storage Recommended Hardware
MXFP4 (native) ~1.4 TB 8× A100 80GB or equivalent
With full 1M context Additional KV cache Requires careful memory management

Supported Inference Engines

K3 and K3.1 Pro are optimized for:

API Access

K3.1 Pro is available through Moonshot's API:

Model Input (per 1M tokens) Output (per 1M tokens)
Kimi K3.1 Pro $2.00 $10.00
Kimi K3.1 Pro Highspeed $2.00 $10.00
Claude Opus 5.5 $4.00 $20.00
GPT-6.1 Sol $2.00 $10.00

K3.1 Pro matches GPT-6.1 Sol pricing and costs half as much as Claude Opus 5.5 while delivering comparable performance on most benchmarks.

9. Comparison with Frontier Models

K3.1 Pro vs. Claude Opus 5.5

Dimension K3.1 Pro Claude Opus 5.5
Terminal-Bench 4.0 65.7% (67% independent) 66.4%
GDPval-AA 1,846 Elo (3rd) 1,866 Elo (1st)
Intelligence Index 55 (4th) 58 (1st)
Pricing (input/output) $2/$10 $4/$20
Weights Open (Nov 4) Closed
Context Window 1M tokens 1M tokens

Summary: K3.1 Pro trails Opus 5.5 by small margins on most benchmarks (0.7-3% on key metrics) while costing half as much and offering open-weight accessibility.

K3.1 Pro vs. GPT-6 Astra

Dimension K3.1 Pro GPT-6 Astra
Terminal-Bench 4.0 65.7% 58.2%
GDPval-AA 1,846 Elo 1,803 Elo
Intelligence Index 55 53
OSWorld V2.1 48.3% 52.7%
Pricing (input/output) $2/$10 $2.50/$10

Summary: K3.1 Pro outperforms GPT-6 Astra on coding and agentic benchmarks but trails on OS environment automation (OSWorld). Pricing is comparable.

10. Limitations and Open Questions

Architectural Unknowns

Despite the detailed technical report, several aspects remain undisclosed:

  1. Exact KDA Implementation: The specific gating mechanism and decay function formulations
  2. AttnRes Block Configuration: How many blocks, which layers belong to which block
  3. Router Training Details: How the MoE router was initialized and trained to achieve stable 896-expert selection
  4. KV Cache Compression: Specific eviction strategies for the 24 Gated MLA layers
  5. Multimodal Fusion: How MoonViT-V2 tokens integrate with text tokens at the embedding level

Performance Gaps

K3.1 Pro trails frontier models on:

These gaps suggest areas for future improvement in RL coverage or architectural refinement.

Open Questions

11. Conclusion

Kimi K3.1 Pro represents a watershed moment in AI development: an open-weight model achieving frontier-level performance through architectural innovation and massive-scale reinforcement learning. By combining Kimi Delta Attention, Attention Residuals, Stable LatentMoE, and No Positional Embeddings, Moonshot created an architecture capable of efficiently processing million-token contexts while maintaining competitive performance across coding, agentic, and knowledge tasks.

The key insights from this analysis:

  1. Hybrid Attention Works: Combining linear (KDA) and global (Gated MLA) attention in a 3:1 ratio achieves the efficiency needed for long contexts while retaining global comparison capability
  2. Extreme Sparsity is Viable: Activating just 16 of 896 experts (1.79%) delivers frontier performance with careful MoE design
  3. NoPE Enables Flexibility: Removing positional embeddings unlocks true long-context generalization
  4. RL Scales Gracefully: Joint RL across hundreds of domains produces consistent improvements without catastrophic forgetting
  5. Open-Weight Competitive: The gap between open and proprietary models has narrowed to 3 points on the Intelligence Index

What changed from K3 to K3.1 Pro was not the architecture but the training compute invested in reinforcement learning. By optimizing every layer of the RL stack—framework, inference, sandboxing, scheduling—Moonshot achieved stable, predictable returns from each increment of compute, resulting in a 312 Elo gain on GDPval-AA and frontier-level coding performance.

With weights releasing November 4, 2026, K3.1 Pro will become the most capable open-weight model available, enabling researchers, enterprises, and developers to build on frontier AI capabilities without vendor lock-in or usage restrictions. This marks a fundamental shift: open-weight models are no longer playing catch-up—they're competing at the frontier.

Looking Forward: K3.1 Pro establishes a new baseline for open-weight models. The architectural innovations—particularly the hybrid attention stack and extreme MoE sparsity—are likely to influence future model designs. The question is no longer whether open-weight models can compete, but how quickly the gap will close to zero.

12. References

  1. Moonshot AI. (2026). Kimi K3.1 Pro: Advancing Open Intelligence. Technical Blog. https://www.kimi.ai/blog/kimi-k3-1-pro
  2. Kimi Team et al. (2026). Kimi K3: Open Frontier Intelligence. arXiv:2607.24653. https://arxiv.org/abs/2607.24653
  3. MoonshotAI. (2026). Kimi K3 GitHub Repository. https://github.com/MoonshotAI/Kimi-K3
  4. Kimi Team. (2026). Attention Residuals. arXiv:2603.15031. https://arxiv.org/abs/2603.15031
  5. Artificial Analysis. (2026). Kimi K3.1 Pro Launch Benchmarks. https://artificialanalysis.ai/articles/kimi-k3-1-pro-launch-benchmarks
  6. Terminal-Bench. (2026). Terminal-Bench 4.0 Official Leaderboard. https://www.tbench.ai/
  7. VestigeKV Research. (2026). The NoPE-MLA KV Cache Carries Its Own Eviction Signal in a Vestigial Branch. arXiv:2609.03949.
  8. SemiAnalysis. (2026). Kimi K3: The Manos, The Mythos, The Legendos. Technical Analysis.
← Back to Blog

3. Kimi Delta Attention (KDA)

3.1 Motivation & Background

Full attention scales quadratically with sequence length: O(n²) memory and compute. For 1M-token contexts, storing attention matrices for even a single layer would require terabytes of memory at FP16 precision (10¹² tokens² × 2 bytes). This quadratic bottleneck has driven research into efficient attention mechanisms that maintain modeling quality while reducing complexity.

Kimi Delta Attention extends a lineage of delta-rule-based linear attention mechanisms. The progression:

  1. DeltaNet: Applies delta-rule updates to an associative memory matrix, treating attention as a recurrent process
  2. Gated DeltaNet: Adds a scalar forget gate per head, enabling the model to decay old information
  3. Kimi Delta Attention: Extends Gated DeltaNet with channel-wise (per-dimension) forget gates, providing fine-grained control over which semantic dimensions persist versus decay

This progression increases expressivity: Gated DeltaNet can forget entire heads uniformly, but KDA can selectively retain some key dimensions while forgetting others within the same head. Research shows this finer-grained gating enables more effective use of the limited finite-state RNN memory that linear attention provides.

3.2 Mathematical Formulation

KDA maintains a recurrent state S ∈ ℝK×V (where K is key dimension, V is value dimension) that is updated at each position. For a given query q, key k, value v, and channel-wise forget gate β ∈ ℝK, the update follows:

S_t = diag(β) · S_{t-1} + δ · (k_t ⊗ v_t)
o_t = S_t^T q_t

Where:

The channel-wise gating β ∈ [0, 1]K determines decay rates independently for each of the K key dimensions. A gate value near 1 means "remember this dimension," near 0 means "forget rapidly." This enables the model to learn which semantic features should persist across many tokens (long-range dependencies) versus which should decay quickly (local features).

3.3 Channel-Wise Gating Mechanism

The forget gates are computed as:

β = σ(W_β · x + b_β)

Where σ is the sigmoid function, ensuring β ∈ [0, 1], and x is the input representation at the current token. The gates are content-dependent: the model learns to adjust decay rates based on what it's currently processing.

Extended parameter ranges: The K3 paper mentions allowing gates in ℝ (not constrained to [0,1]) and delta coefficients δ in ℝ (not just positive values), following extensions proposed in analysis of KDA expressivity. These extensions enable the model to amplify (β > 1) or invert (δ < 0) associations, increasing the set of linear transformations KDA can approximate.

3.4 Recurrent State Dynamics

The key property: S has fixed size K×V regardless of sequence length. At 1M tokens, KDA still maintains the same memory footprint as at 1K tokens. This contrasts with full attention, where KV cache grows linearly with sequence length (storing K and V vectors for every past token).

Trade-off: Fixed state means information must be compressed. The model cannot perfectly recall arbitrary details from 500K tokens ago — it must learn which information to retain in the finite-capacity recurrent state. The channel-wise gates provide the mechanism: learn to preserve high-level semantic features (topics, entities, narrative structure) while letting low-level details (specific word choices, syntax from distant past) decay.

The periodic MLA layers compensate: every 4th layer performs global attention, allowing the model to reintegrate detailed information when needed. The 3:1 KDA:MLA ratio means 74% of layers use fixed-state linear attention, with 26% providing global "checkpoints."

3.5 Comparison to Full Attention

Property Full Attention KDA
Time Complexity (per token) O(n) O(K×V)
Memory (KV cache) O(n) — grows with sequence O(1) — fixed state
Information Capacity Unlimited (stores all past) Finite (K×V matrix)
Positional Encoding Required (RoPE, ALiBi, etc.) Not required (emergent from decay)
Long-Context Quality High (if trained properly) Depends on state capacity

At 1M-token context, KDA at a single layer with K=V=128 maintains a 128×128 = 16,384-element state, approximately 32 KB at FP16. Full attention at the same layer would require storing K and V vectors for 1M tokens: 1M × 128 × 2 (K and V) × 2 bytes = 512 MB. The 16,000× memory reduction is what makes million-token inference tractable.

3.6 Implementation Details

K3 uses 96 attention heads with 7168 total hidden dimension, yielding 7168/96 ≈ 74.67 dimensions per head (the paper likely uses head_dim=64 or 128 with some heads having different sizes, though exact per-head dimensions are not specified). For KDA layers, the key and value dimensions determine state size.

Algorithm-system co-design: Moonshot AI developed custom CUDA kernels for KDA that fuse the recurrent update and query operations, reducing memory traffic. The K3 infrastructure section mentions "algorithm–system co-design for KDA" as a key enabler of 2.8T-scale training.

The model ships with MXFP4 quantized weights, meaning the recurrent state parameters (W_β, projections for q/k/v/δ) are stored at 4-bit precision, with activations (the state S itself, gates β, outputs o) computed at MXFP8 (8-bit) precision during inference.


4. Attention Residuals (AttnRes)

4.1 The Depth Dilution Problem

Standard residual connections in transformers use fixed unit weights:

h_{l+1} = h_l + F_l(h_l)

Where F_l is the sublayer transformation (attention or FFN). Across L layers, the final hidden state becomes:

h_L = h_0 + Σ_{l=0}^{L-1} F_l(...)

This is a uniform sum: every layer's contribution has equal weight. As depth increases, each individual layer's output becomes a progressively smaller fraction of the total. At L=93 layers (K3's depth), a single layer contributes ~1% of the final representation. This "depth dilution" means the model may struggle to utilize all available layers effectively — later layers' updates get lost in the accumulated sum.

The Attention Residuals paper (arXiv:2603.15031) proposes replacing fixed weights with learned attention over layer outputs, allowing the model to dynamically weight which layers matter for the current token.

4.2 Full AttnRes

Full Attention Residuals computes:

h_{l+1} = Σ_{i=0}^{l} α_i · F_i(...)

Where α_i are attention weights computed from a query derived from the current hidden state. At layer l, the model attends over all previous layers' outputs {F_0, F_1, ..., F_l} and forms a weighted combination.

This gives the model fine-grained control: it can learn that for certain tokens, early layers matter more (e.g., syntactic processing), while for others, later layers dominate (e.g., high-level reasoning). The attention mechanism adapts per-token and per-layer.

Cost: Full AttnRes requires attending over l sources at layer l, yielding O(L²) memory and compute overhead across all layers. For L=93, this is significant.

4.3 Block AttnRes (K3 Implementation)

Block AttnRes groups layers into B blocks and applies attention only at block boundaries. Within a block, standard additive residuals; across blocks, learned attention over block-level representations.

Algorithm:

  1. Partition layers into B blocks (e.g., 93 layers → ~12 blocks of ~8 layers each)
  2. Within-block: Use standard residuals h = h_prev + F(h_prev)
  3. Block summary: At the end of each block, compute a summary representation (e.g., the final hidden state of that block)
  4. Cross-block attention: At the start of each new block, attend over all previous block summaries and current hidden state

This reduces attention overhead from O(L²) to O(B²). With B=12 blocks, the overhead is ~1.7% of Full AttnRes's cost, while recovering most of the quality gains.

From the Block AttnRes paper: "With ~8 blocks, it recovers most of Full AttnRes's gains while serving as a practical drop-in replacement with marginal overhead."

4.4 Memory & Communication Overhead

Block AttnRes requires:

The K3 paper mentions "cache-based pipeline communication and a two-phase computation strategy" to make Block AttnRes efficient during training. Block summaries are cached and reused, avoiding redundant recomputation.

4.5 Training Dynamics

Attention Residuals change gradient flow. In standard residuals, gradients flow uniformly through all layers (the "gradient highway"). With AttnRes, gradients are modulated by the learned attention weights α_i.

This can improve training stability: if a layer is not contributing useful information, its attention weight α decreases, reducing its gradient contribution and preventing it from disrupting learning in other layers. Conversely, high-contributing layers receive stronger gradients, accelerating their learning.

Empirically, Block AttnRes enables scaling to greater depth (93 layers in K3) while maintaining quality. The ability to selectively attend to relevant layer outputs mitigates the depth dilution problem, allowing the model to make effective use of all 93 layers.


5. Stable LatentMoE

5.1 Latent Space Projection

Standard MoE architectures route tokens directly in the model's hidden dimension (d_model = 7168 for K3). This means:

Stable LatentMoE introduces a compression step: project token representations to a latent dimension ℓ < d_model before routing and expert computation, then project back to d_model.

Architecture:

x ∈ ℝ^{d_model}  →  [Project to latent]  →  z ∈ ℝ^ℓ
z  →  [Router: select top-k experts]
z  →  [Expert computation in ℓ-dim space]  →  y ∈ ℝ^ℓ
y  →  [Project back to d_model]  →  output ∈ ℝ^{d_model}

For K3: d_model = 7168, ℓ = 3584 (exactly half). This halves the dimensionality of routing and expert computation.

5.2 Routing Mechanism

In latent space z ∈ ℝ^3584, the router computes:

scores = softmax(W_router · z)  ∈ ℝ^{896}

Where W_router ∈ ℝ^{896×3584}. The top-16 experts by score are selected (top-k routing with k=16).

Additionally, 2 shared experts are always activated for every token. These shared experts see all tokens and can learn generally useful transformations, while routed experts specialize.

Total active experts per token: 16 routed + 2 shared = 18 experts. Out of 896 routed experts, 16 are selected → 16/896 = 1.78% activation rate for routed experts.

5.3 Expert Architecture

Each expert is a standard FFN with SiTU-GLU activation:

expert(z) = W_down · SiTU-GLU(W_up(z), W_gate(z))

Dimensions:

Parameter count per expert: (3584 × 3072) × 2 (up + gate) + (3072 × 3584) (down) ≈ 33M parameters.

Total expert parameters per layer: 896 routed × 33M + 2 shared × 33M = 29.6B + 66M ≈ 29.7B per layer. Across 93 layers: 29.7B × 93 ≈ 2.76T parameters in experts alone, matching the ~2.7T estimate from earlier.

5.4 Load Balancing & Stability

With 896 experts and top-16 selection, load balancing is critical. If the router always selects the same 16 experts, the remaining 880 never train.

Stable LatentMoE applies:

The "Stable" in Stable LatentMoE refers to optimizations that improve training stability: careful initialization of router weights, gradient clipping on expert parameters, and tuned load balancing coefficients. The K3 paper mentions empirical design space exploration that identified an optimal expert activation range of 1.5-2.0% (K3 uses 1.78%, within this range) for balancing quality and throughput.

5.5 Memory Efficiency Analysis

Savings from latent-space routing:

  1. Router parameters: ℝ^{896×3584} instead of ℝ^{896×7168} → 2× reduction
  2. Expert weight matrices: Input/output dimensions 3584 instead of 7168 → parameters scale as (3584/7168)² ≈ 0.25× (4× reduction)
  3. Activation memory: Experts process 3584-dim tensors instead of 7168-dim → 2× reduction in activation storage during training

These savings enable scaling to 896 experts per layer while keeping active compute tractable. The compression from 7168 to 3584 is carefully chosen: large enough to preserve information (half the full dimension), small enough to realize significant savings.

The latent projection layers (W_to_latent: ℝ^{7168×3584}, W_from_latent: ℝ^{3584×7168}) add ~25M + 25M = 50M parameters per layer, a small cost relative to the 29.7B in experts.


6. Feed-Forward Networks & Activation

6.1 SiTU-GLU Activation Function

K3 uses SiTU-GLU (Sigmoid-Tanh Unit with Gated Linear Unit) activation in all expert FFNs. This is a bounded gated activation designed to prevent activation explosion in very deep networks.

Standard GLU (Gated Linear Unit) computes:

GLU(x, g) = x ⊙ σ(g)

Where ⊙ is element-wise multiplication, and σ is sigmoid. The gate g modulates the signal x.

SiTU-GLU extends this with softcapping on both branches:

SiTU-GLU(x, g) = softcap(x, β₁) ⊙ σ(softcap(g, β₂))

softcap(z, β) = β · tanh(z / β)

The softcap function bounds values to the range (-β, β). As z → ∞, tanh(z/β) → 1, so softcap(z, β) → β. This prevents unbounded activation growth.

6.2 Softcapping Mechanism

K3 uses β₁ = 4 and β₂ = 25 for the up-projection and gate branches respectively.

Why different β values? The gate branch undergoes sigmoid, which saturates for large inputs. Allowing larger gate values (β₂=25) gives the model more dynamic range before saturation. The up-projection branch is more sensitive to explosion (it's multiplied by the gate), so it uses a tighter bound (β₁=4).

At depth 93 with 896 experts, activation explosion is a real risk. Even small per-layer growth compounds exponentially. SiTU-GLU's bounded nature ensures activations stay in a reasonable range throughout the forward pass.

6.3 FFN Dimensions & Configuration

Each expert's FFN:

Input: z ∈ ℝ^3584 (latent space)
W_up: ℝ^{3072×3584}  →  x = W_up · z  ∈ ℝ^3072
W_gate: ℝ^{3072×3584}  →  g = W_gate · z  ∈ ℝ^3072
Activation: y = SiTU-GLU(x, g)  ∈ ℝ^3072
W_down: ℝ^{3584×3072}  →  output = W_down · y  ∈ ℝ^3584

Hidden dimension 3072 is chosen relative to latent dimension 3584: ratio of 3072/3584 ≈ 0.857. This is slightly less than 1:1 (standard transformers often use 4×d_model for FFN hidden dim), reflecting the extreme sparsity — with 18 active experts, effective FFN hidden dimension is 18 × 3072 = 55,296, which is 55,296/7168 ≈ 7.7× the model dimension, similar to standard dense models.


7. KV Cache & Memory Management

7.1 KDA Recurrent State (No KV Cache)

KDA layers do not maintain a traditional KV cache. Instead, they maintain the recurrent state S ∈ ℝ^{K×V}, which has fixed size.

For 69 KDA layers with 96 heads and approximately 64-dim keys/values per head:

Memory per KDA layer ≈ 96 heads × (64 × 64) elements × 2 bytes (FP16)
                      ≈ 96 × 4,096 × 2 ≈ 786 KB per layer
Total for 69 KDA layers ≈ 54 MB

This memory footprint is constant regardless of sequence length. At 1K tokens or 1M tokens, KDA memory remains 54 MB.

7.2 MLA KV Cache Compression

The 24 Gated MLA layers do require KV cache, as they perform full attention over all past tokens. However, MLA uses low-rank compression to reduce memory:

K3's MLA configuration (inferred from similar designs like DeepSeek-V3):

With kv_lora_rank=512, MLA caches 512-dim latent KV representations instead of 7168-dim full representations. Compression ratio: 512/7168 ≈ 7% → 14× reduction in KV cache size per token.

7.3 NoPE: No Positional Embeddings

K3 uses NoPE (No Positional Embeddings) throughout the entire network. There are no RoPE (Rotary Position Embeddings) layers, no absolute position embeddings added to input tokens, no ALiBi (Attention with Linear Biases).

How does the model know token positions?

  1. KDA's decay dynamics: The channel-wise forget gates create position-dependent behavior. Tokens further in the past have been subjected to more decay steps, so their contribution to the recurrent state is naturally attenuated. This provides an implicit notion of recency.
  2. Periodic global attention: MLA layers can attend to all past tokens. While they don't have explicit position embeddings, the model can learn position-sensitive patterns from the data itself (e.g., syntax, discourse structure).
  3. Learned position awareness: The model's training on real text, where word order matters for meaning, induces position-sensitive representations even without explicit position encodings.

Benefits of NoPE:

Trade-off: Without explicit position encoding, the model relies entirely on learned mechanisms to capture order. This requires careful training and architecture design (hence the hybrid KDA+MLA stack).

7.4 Memory Footprint Analysis

Total KV cache memory at 1M tokens:

KDA layers (69): 54 MB (fixed, independent of context length)
MLA layers (24): 24 layers × 96 heads × 512 latent dim × 2 (K+V) × 1M tokens × 2 bytes (FP16)
                ≈ 24 × 96 × 512 × 2 × 1M × 2
                ≈ 4.7 TB if stored naively

Wait—4.7 TB is not tractable. How does K3 handle this?

Likely answer: Quantization and caching strategies. The model ships with MXFP8 activations, so KV cache is likely stored at 8-bit (1 byte) rather than FP16 (2 bytes), halving memory to ~2.4 TB. Additionally:

The infrastructure paper "Mooncake: A KVCache-centric Disaggregated Architecture for LLM Serving" (arXiv:2407.00079) describes how Moonshot AI's serving platform for Kimi leverages disaggregated storage, using underutilized CPU, DRAM, and SSD resources to cache KV states, enabling million-token contexts without requiring all KV data resident in GPU memory.


8. Gated Multi-head Latent Attention (MLA)

8.1 MLA Architecture

Gated MLA compresses keys and values to a low-rank latent space before caching, reducing memory overhead while maintaining attention quality.

Standard multi-head attention:

Q = W_q · x,  K = W_k · x,  V = W_v · x
Attention(Q, K, V) = softmax(QK^T / √d_k) V

Multi-head Latent Attention:

C_kv = W_kv_proj · x  ∈ ℝ^{kv_lora_rank}  (compress to latent)
K = W_k_latent · C_kv  ∈ ℝ^{d_k}  (expand to key space)
V = W_v_latent · C_kv  ∈ ℝ^{d_v}  (expand to value space)
[Cache C_kv instead of full K, V]

At inference: retrieve cached C_kv, expand to K/V on demand

The cached representation C_kv has dimension kv_lora_rank = 512, much smaller than the full key/value dimensions.

8.2 Low-Rank Compression

Why does this work? The insight: keys and values often lie in a lower-dimensional subspace. Not all 7168 dimensions of K and V are independently necessary for attention. Compressing to 512 dimensions captures the "essential" information, with minimal quality loss.

The compression/expansion matrices (W_kv_proj, W_k_latent, W_v_latent) are learned during training, so the model optimizes the latent subspace to preserve information relevant for attention.

8.3 Gating Mechanism

The "Gated" in Gated MLA refers to an additional gating operation applied to attention outputs:

o = Attention(Q, K, V)
o_gated = o ⊙ σ(W_gate · x)

Where σ is sigmoid, and W_gate produces per-element gates. This allows the model to dynamically modulate attention outputs, similar to how SiTU-GLU gates FFN outputs.

The gating provides another form of expressivity: even if attention focuses on the wrong tokens, the gate can suppress the resulting output. Conversely, for important tokens, the gate amplifies the attention signal.

8.4 Role in Hybrid Stack

Gated MLA layers serve as "global checkpoints" in the 3:1 hybrid stack. Every 4th layer, the model performs full global attention, allowing it to:

The final layer (layer 93) is a Gated MLA layer, ensuring the model's final representation has attended globally before producing the output distribution over vocabulary.


9. Hybrid Attention Stack Design

9.1 3:1 Interleaving Pattern

K3's 93 layers follow a precise pattern:

Layers 1-3:   KDA, KDA, KDA
Layer 4:      Gated MLA
Layers 5-7:   KDA, KDA, KDA
Layer 8:      Gated MLA
...
[Repeat 23 times: 23 × 4 = 92 layers]
Layer 93:     Gated MLA (final layer)

This yields 69 KDA + 24 Gated MLA = 93 total.

9.2 Why Hybrid? Performance Trade-offs

Pure KDA (linear attention only):

Pure MLA (full attention only):

3:1 Hybrid (K3's choice):

The ratio 3:1 was likely tuned empirically. Moonshot AI tested various configurations and found this balance optimal for the target compute budget and quality metrics.

9.3 Layer-by-Layer Breakdown

Simplified view of forward pass through one 4-layer block:

Input: h_0 ∈ ℝ^{7168}

Layer 1 (KDA):
  Recurrent state S_1 updated with (k_1, v_1, β_1, δ_1)
  Attention output: o_1 = query S_1 with q_1
  Apply Block AttnRes (attend over previous block summaries)
  FFN: MoE with 16/896 experts selected
  Output: h_1

Layers 2-3: Same as Layer 1, updating recurrent state S_2, S_3

Layer 4 (Gated MLA):
  Compress to latent: C_kv = W_kv_proj · h_3
  Expand to keys/values: K, V = f(C_kv)
  Full attention over all cached C_kv from previous MLA layers
  Gate attention output: o_4 = o ⊙ σ(W_gate · h_3)
  Apply Block AttnRes
  FFN: MoE
  Output: h_4

[This h_4 becomes input to next KDA block...]

The interleaving ensures no long "runs" of KDA without global attention. Maximum distance between MLA layers is 3 (when you have three consecutive KDA layers). This keeps the model grounded, preventing KDA's recurrent state from drifting too far from ground truth.


10. Multimodal Vision: MoonViT-V2

10.1 Architecture Specifications

Kimi K3 and K3.1 Pro are natively multimodal, supporting both text and image inputs. Vision is handled by MoonViT-V2, a vision transformer encoder with 401M parameters.

Key properties:

Image tokens are interleaved with text tokens in the input sequence. The text backbone (93-layer transformer) processes both modalities uniformly after MoonViT-V2 encodes images to token embeddings.

10.2 Training Methodology

MoonViT-V2 was trained from scratch during K3's pre-training, using next-token prediction as the sole objective. This is a departure from two-stage approaches (pretrain vision encoder separately, then train adapter layers).

Benefits:

The native-resolution design allows the model to handle images of varying sizes without distortion. The 3×3 pixel-unshuffle downsamples images efficiently while retaining spatial structure (unlike aggressive resizing or pooling).

10.3 Integration with Text Backbone

After MoonViT-V2 encoding, image tokens enter the same 93-layer transformer as text tokens. The model learns to process multimodal sequences, attending across both text and image tokens.

Example input sequence:

[Text tokens: "What is in this image?"]  +  [Image tokens: encoded by MoonViT-V2]  +  [Text tokens: " Answer:"]

The model generates a text response by attending to both the question text and image content. The hybrid KDA+MLA stack processes this multimodal sequence, with KDA maintaining recurrent state over both text and image tokens, and MLA layers attending globally across the full sequence.


11. Quantization: MXFP4 & MXFP8

11.1 Microscaling Floating Point Format

MXFP (Microscaling Floating Point) is a quantization format that divides tensors into small blocks (e.g., 32 elements) and assigns a shared exponent (scale factor) per block, with each element having its own mantissa and sign.

Format structure:

Block of N elements (N=32 typical):
  - Shared exponent: 8 bits
  - Per-element: sign (1 bit) + mantissa (M bits)

MXFP4: M=2 (sign + 2-bit mantissa per element + 8-bit shared exponent per block)
MXFP8: M=6 (sign + 6-bit mantissa per element + 8-bit shared exponent per block)

The shared exponent enables block-level scaling, providing higher precision than fixed-point quantization (which uses one global scale) while using fewer bits than per-element FP8 (which has 8 bits per element with individual exponents).

11.2 MXFP4 for Weights

K3 ships with weights quantized to MXFP4:

At 2.8T parameters, this reduces storage from ~5.6 TB (FP16) to ~1.5 TB (MXFP4), a 3.7× reduction. The actual download size for K3 weights is approximately 1.44 TB, matching this estimate.

Inference: MXFP4 weights are dequantized to higher precision (likely FP16 or BF16) before matrix multiplication, or specialized kernels perform low-bit matrix multiplication directly.

11.3 MXFP8 for Activations

During inference, activations are computed in MXFP8:

This includes:

11.4 Quality Impact Analysis

Quantization introduces approximation error. For MXFP4 weights, each weight is represented by only 4 possible mantissa values (2 bits) × 2 signs = 8 discrete levels per block scale. This is extremely aggressive quantization.

Surprisingly, K3/K3.1 Pro maintains high quality despite MXFP4 weights. Likely reasons:

  1. Quantization-aware training or post-training quantization with careful calibration
  2. Large model capacity: 2.8T parameters provides redundancy; quantization error in individual weights is averaged out
  3. MoE sparsity: Only 16/896 experts active, so the model effectively has many parallel pathways; if one expert suffers from quantization error, others can compensate
  4. Microscaling benefits: Block-level exponents adapt to local scale, preventing extreme quantization error

Independent benchmarks (Artificial Analysis, Terminal-Bench) show K3.1 Pro at MXFP4/MXFP8 achieves competitive scores against full-precision proprietary models, suggesting quantization degradation is minimal.


12. From K3 to K3.1 Pro: What Changed

12.1 Architectural Comparison (No Changes)

Bottom Line: K3.1 Pro is architecturally identical to K3.

Every architectural parameter is unchanged:

Component Kimi K3 Kimi K3.1 Pro
Total Parameters2.8T2.8T
Active Parameters104B104B
Layers93 (69 KDA + 24 MLA)93 (69 KDA + 24 MLA)
Attention MechanismKDA + Gated MLAKDA + Gated MLA
MoE Configuration896 routed + 2 shared896 routed + 2 shared
Vision EncoderMoonViT-V2 (401M)MoonViT-V2 (401M)
Context Window1M tokens1M tokens
Tokenizer160K vocab160K vocab

K3.1 Pro is a post-trained version of K3. The base weights from K3's pre-training and mid-training are carried forward; K3.1 Pro applies additional reinforcement learning on top.

12.2 Post-Training Compute Scaling

From Moonshot AI's official blog: "Kimi K3.1 Pro is a post-trained version of Kimi K3, with substantially larger post-training compute."

This is the primary difference. While K3 underwent reinforcement learning as part of its post-training, K3.1 Pro scales RL compute significantly further. The blog states: "To enable large-scale joint RL across hundreds of downstream domains, we optimized every layer of the stack."

What does "substantially larger" mean quantitatively? Moonshot does not disclose exact FLOP counts or GPU-hours, but qualitative indicators:

12.3 Joint RL Across Domains

K3.1 Pro's RL training is joint — a single policy trained across hundreds of diverse environments simultaneously, rather than separate policies for coding, reasoning, agentic tasks, etc.

Benefits:

  1. Transfer learning: Skills learned in one domain (e.g., debugging in Python) transfer to others (e.g., debugging in JavaScript)
  2. Compositional generalization: Model learns to combine sub-skills (web search + code generation + 3D modeling) into complex multi-step workflows
  3. Efficient use of compute: Single training run improves all domains, avoiding redundant optimization

The blog emphasizes consistent gains: "K3.1 Pro achieves consistent gains in every domain." This uniformity suggests the joint RL setup prevents overfitting to specific benchmarks — the model improves broadly rather than cherry-picking a few tasks.

12.4 Infrastructure Optimizations

Moonshot AI lists six optimization areas:

  1. RL framework: Efficient policy gradient computation, advantage estimation, and gradient accumulation across distributed workers
  2. Long-context inference: Fast generation for million-token contexts during rollout (essential when each RL episode involves long documents or codebases)
  3. Training efficiency: Throughput optimizations (mixed precision, activation checkpointing, expert parallelism) to maximize GPU utilization
  4. Sandbox infrastructure: Isolated execution environments for code generation and agentic tasks, with state persistence across multi-turn interactions
  5. Rollout scheduling: Load balancing across sandboxes to keep GPUs fed with training data
  6. Shared platform for environment quality checks: Automated verification that environments are set up correctly, preventing silent training failures

These optimizations enable "stable, predictable returns" from each increment of RL compute — scaling becomes reliable rather than brittle.

12.5 Cybersecurity Controls

A significant portion of Moonshot's K3.1 Pro blog discusses cybersecurity controls. This was a deliberate focus for the open-weight release.

Data Removal:

Evaluation Results (xdev-bench-hard pass@3):

Checkpoint xdev-bench-hard (%)
Uncontrolled (no data removal)90.5
K3.1 Pro (with data removal)81.0
Kimi K3 (baseline)Not disclosed

The 9.5-point drop from 90.5% to 81.0% demonstrates that data removal meaningfully reduces cyber capability. However, K3.1 Pro still improves over K3, indicating that general coding and debugging skills (which remain in the training mix) generalize to cyber tasks even after targeted removal.

Moonshot states: "K3.1 Pro's cyber capability remains behind that of frontier proprietary models that have been publicly available for at least three months." This positions the open release as trailing the absolute frontier, reducing misuse risk.

Open-Weight Principles:

Moonshot articulates two guiding principles:

  1. Do not extend the absolute frontier of cyber capability — K3.1 Pro is deliberately kept below what the training pipeline could produce
  2. Progressively raise the cyber capability available in open weights — When proprietary models have made certain capabilities widely accessible, releasing open weights at a similar level benefits defensive use cases (security audits, vulnerability scanning) without concentrating capabilities in a few closed systems

13. Training Methodology

13.1 Pre-Training (K3 Base)

K3's pre-training followed standard large-scale language model practices: next-token prediction on a diverse web-scale corpus. The K3 technical paper states the model achieved "approximately 2.5× improvement in overall scaling efficiency over Kimi K2," attributing this to KDA, AttnRes, Stable LatentMoE, and refined data recipes.

Pre-training objectives:

Infrastructure: The paper mentions "perfectly balanced expert-parallel training with efficient memory management" as a key enabler. With 896 experts per layer across 93 layers (83,328 total expert instances), naive data parallelism would cause severe load imbalance. Moonshot's expert-parallel system ensures all experts receive equal numbers of tokens during training, preventing underutilization.

13.2 Mid-Training & Data Mix

After pre-training, K3 underwent mid-training on a curated mix emphasizing longer-context and domain-specific data. This phase bridges pre-training (broad, noisy web data) and post-training (task-specific RL).

For K3.1 Pro, Moonshot applied cyber-related data removal during mid-training. Content flagged as cyber-related (exploit write-ups, vulnerability databases, offensive security tutorials) was identified and removed from the corpus. The model was then continued from the pre-trained K3 checkpoint with the cleaned mid-training data.

This approach allows control without full retraining: start from K3's pre-trained weights, apply a focused mid-training phase with removed data, then proceed to RL post-training.

13.3 Reinforcement Learning Pipeline

K3.1 Pro's RL training uses multi-effort setups: the model is trained to operate at different "reasoning effort" levels (low, medium, high, max), allowing users to trade latency for quality.

RL Algorithm (likely PPO or similar policy gradient method):

  1. Rollout: Generate completions for prompts from RL environments (code generation tasks, math problems, agentic workflows)
  2. Reward computation: Execute generated code in sandbox, verify math answers, check agentic task success; assign scalar rewards
  3. Advantage estimation: Compare actual returns vs. value function estimates to determine which actions were better than expected
  4. Policy update: Adjust model weights to increase probability of high-reward actions

Joint RL across hundreds of domains means the rollout phase samples prompts from diverse environments (coding, 3D modeling, financial analysis, etc.) within each training batch, and the policy update considers all domains simultaneously.

13.4 Multi-Effort RL Training

K3 introduced "reasoning-effort levels" during RL training. The model learns to allocate compute based on a user-specified effort parameter:

Training involves conditioning the policy on effort level: prompts are tagged with an effort indicator, and rewards are adjusted to encourage effort-appropriate behavior (e.g., penalize overly long responses at low effort, reward thoroughness at max effort).

This enables a single model to serve multiple use cases without fine-tuning separate variants.

13.5 Long-Context Agentic RL

The K3 technical paper highlights "million-token agentic RL with persistent rollout and sandbox states." This is a technical challenge: RL episodes can involve million-token contexts (large codebases, long documents), and sandboxes (execution environments) must persist across multi-turn interactions.

Innovations:

K3.1 Pro's infrastructure optimizations (§12.4) directly target these challenges, enabling stable RL training at million-token scale.

13.6 Sandbox Infrastructure

Sandboxes are isolated Linux containers (likely Docker or similar) where generated code executes safely. Each sandbox has:

Automated verification: After code execution, an automated grader checks whether the task was completed correctly (e.g., does the program output match the expected result? Did the agent successfully fix the bug?). This provides the reward signal for RL.

Quality checks: The "shared platform for environment quality checks" (mentioned by Moonshot) ensures sandboxes are set up correctly — dependencies installed, necessary files present, network accessible. Silent failures (e.g., sandbox missing a required library, causing all code to fail) would poison the training signal; automated checks catch these issues.


14. Comprehensive Benchmark Analysis

14.1 Coding Benchmarks

K3.1 Pro demonstrates substantial gains across coding benchmarks, particularly those involving long-horizon execution and tool use.

Benchmark K3 K3.1 Pro Claude Opus 5.5 GPT-6 Astra
Terminal-Bench 4.013.0%65.7%66.4%58.2%
Terminal-Bench Science 0.1—38.1%65.5%68.1%
DeepSWE v1.159.0%67.5%73.0%70.0%
SWE-Marathon v1.140.0%51.7%42.0%35.0%
PostTrainBench—36.6%——
ProgramBench (binary)71.9%77.8%77.6%76.8%
BenchCAD (with tools)—92.7%96.2%95.9%
Kimi Code Bench 3.0 Long-horizon55.95%61.2%——

Analysis:

14.2 Agentic Benchmarks

Benchmark K3 K3.1 Pro Notes
GDPval-AA (Elo)1,5341,846+312 Elo; 3rd globally
AutomationBench-AA58%73%SaaS workflow automation
OfficeQA Pro v2—64.4%Financial doc analysis
BioMysteryBench—62.3%Biological research tasks
Our Agents' Last Exam—53.3%122 tasks, 86 CLI-based
OSWorld V2.1—43.2%OS-level task execution

GDPval-AA: This benchmark from Artificial Analysis evaluates models on real-world work tasks. K3.1 Pro's 1,846 Elo ranks 3rd globally, behind only Claude Opus 5.5 (1,866) and Muse Wonder Full (1,857). The +312 Elo gain from K3 is exceptionally large — for context, a 100-point Elo gap typically indicates the stronger player wins ~64% of matches.

14.3 Reasoning & Knowledge

Benchmark K3 K3.1 Pro Notes
HLE-Full (acc / max)41.4 / 52.243.5 / 56.02,500 questions, multi-effort
HLE-Diamond67.7%74.7%1,000 hard questions
Kimi Hallu Bench Hard (claim-level error %)23.4%8.3%65% reduction (lower is better)
GDP.pdf (w/ python)—75.8%Doc analysis with tools

Hallucination Reduction: The drop from 23.4% to 8.3% on Kimi Hallu Bench Hard is particularly significant for financial and research applications. This stress test deliberately probes situations where models are prone to fabricating information (e.g., ambiguous queries, requests for obscure facts). K3.1 Pro's reduced error rate suggests improved epistemic calibration — the model better knows what it doesn't know.

14.4 Multimodal Benchmarks

Benchmark K3.1 Pro Description
MMMU-Pro62.6%Multimodal understanding, college-level
ChartoGraphy (w/ python)89.4%Chart/graph understanding with code
ZeroBench (w/ python)82.1%Visual reasoning, zero-shot

MoonViT-V2's native-resolution design and end-to-end training with text enables strong multimodal performance. The "w/ python" results (where the model can write code to analyze images) show substantial gains over direct visual reasoning, indicating the model effectively uses tools to augment its vision capabilities.

14.5 Cybersecurity Evaluation

Benchmark K3.1 Pro Uncontrolled Opus 5.5
xdev-bench-hard (pass@3)81.0%90.5%—
ExploitBench (pass@5 max capability)61.2%—73.4%
ExploitGym (6-hour budget)42.8%—58.9%

Interpretation: K3.1 Pro's cyber capability is below frontier proprietary models (Claude Opus 5.5, GPT-6 Astra, which were not shown for brevity but score higher). The uncontrolled checkpoint (90.5% xdev-bench-hard) shows what the pipeline could produce without data removal; the 9.5-point reduction to 81.0% demonstrates the impact of targeted controls.

14.6 Independent Third-Party Results

Artificial Analysis Intelligence Index:

Rank Model Score
1Claude Opus 5.558
2Muse Wonder Full56
3GPT-6.1 Sol56
4Kimi K3.1 Pro55
5Claude Fable 5.154
6GPT-6 Astra54
…Kimi K344

K3.1 Pro places 4th globally, only 3 points behind 1st place. This narrow gap (compared to K3's 14-point gap) indicates K3.1 Pro is competitive with the absolute frontier.


15. Comparison with Frontier Models

15.1 vs. Claude Opus 5.5 & Fable 5.1

Claude Opus 5.5 (Anthropic's flagship) currently leads the Intelligence Index at 58. K3.1 Pro (55) trails by 3 points but shows competitive performance on specific benchmarks:

Pattern: K3.1 Pro is strongest on long-horizon coding and multi-step workflows (SWE-Marathon, Terminal-Bench 4.0), weakest on scientific reasoning (Terminal-Bench Science). Claude Opus 5.5 maintains broader strength across domains.

Claude Fable 5.1 scores 54 on Intelligence Index (one point below K3.1 Pro). Fable is positioned as a faster, more cost-efficient alternative to Opus, similar to K3.1 Pro's positioning relative to K3 (though K3.1 Pro is strictly better than K3).

15.2 vs. GPT-6 Astra & Sol

GPT-6 Astra ranks 6th (54), Sol ranks 3rd (56). K3.1 Pro (55) sits between them:

GPT-6 Astra shows particularly strong scientific reasoning (Terminal-Bench Science 68.1%, highest among compared models). K3.1 Pro's scientific weakness is consistent across comparisons.

15.3 vs. DeepSeek V4.1 Flash

DeepSeek V4.1 Flash (released September 2026) uses a different architecture (Causal Encoder-Decoder with CSA2 attention, 552B backbone/8B active during prefill). Comparing K3.1 Pro (2.8T/104B active):

K3.1 Pro shows superior coding/agentic performance, likely due to larger scale (2.8T vs. 552B) and extensive RL training. V4.1 Flash is optimized for efficiency and speed rather than absolute quality.

15.4 vs. GLM-5.3

GLM-5.3 (from Z.ai, released ~September 2026) is another recent open-weight model. Moonshot's comparisons show K3.1 Pro outperforming GLM-5.3 across most benchmarks:

15.5 Positioning on Intelligence Index

K3.1 Pro's 4th-place ranking (55 score, 3-point gap from 1st) represents a significant achievement for an open-weight model. Historical context:

This 11-point gain in 3 months, achieved through post-training scaling alone (no architectural changes), demonstrates the viability of large-scale RL as a path to frontier performance.


16. Deployment & Infrastructure

16.1 Hardware Requirements

K3/K3.1 Pro at 2.8T parameters and MXFP4 quantization requires approximately 1.5 TB storage. For inference:

For smaller deployments: With aggressive quantization and expert offloading, running on fewer devices is possible but will increase latency. The 896 experts per layer create natural parallelism — different devices can host different experts.

16.2 Serving Infrastructure

Moonshot AI's Mooncake serving platform (arXiv:2407.00079) is designed for K3-class models. Key features:

This architecture enables serving million-token contexts economically. The KDA layers' fixed recurrent state (no KV cache) reduces memory pressure significantly.

16.3 KV Cache Management at Scale

At 1M tokens with 24 MLA layers:

Wait—this seems too small. The 512 latent dim must be per-head, not total. With 96 heads:

This matches the earlier estimate. At this scale, KV cache cannot fit in GPU memory for batches > 1. Solutions:

  1. Offload to CPU/SSD: Store older KV in CPU DRAM or SSD, page in as needed
  2. Streaming generation: Single-sequence inference (batch size 1), acceptable for interactive use
  3. Selective caching: Only cache KV for recent tokens; recompute older KV on-demand

Mooncake's disaggregated architecture addresses this: KV cache lives in a distributed store accessed over fast interconnect, not on the GPU.

16.4 Expert Parallelism

With 896 experts per layer, expert parallelism is essential. Distribution strategies:

K3's Stable LatentMoE includes load balancing losses to encourage uniform expert utilization, mitigating this issue.


17. Limitations & Considerations

17.1 Scientific Reasoning Gap

K3.1 Pro's most significant weakness is scientific reasoning. Terminal-Bench Science 0.1 (38.1%) trails GPT-6 Astra (68.1%) and Claude Opus 5.5 (65.5%) by ~30 points. This gap persists across other scientific benchmarks (physics, chemistry, advanced mathematics).

Possible causes:

For use cases requiring strong scientific reasoning, proprietary alternatives (Claude Opus, GPT-6 Astra) remain superior.

17.2 Compute Requirements

Despite efficiency innovations (KDA, MoE sparsity), K3.1 Pro remains a 2.8T-parameter model requiring substantial hardware:

This is not a model for consumer hardware or small-scale deployment. Practitioners without access to large GPU clusters will need to use hosted APIs (Kimi API Platform) rather than self-hosting.

17.3 Known Failure Modes

From Moonshot's evaluations and independent testing:


18. Future Directions

Moonshot AI's trajectory suggests several future developments:

  1. K3.2 / K4 series: Continued scaling of RL compute and potential architectural refinements
  2. Improved scientific reasoning: Targeted RL training on scientific domains to close the Terminal-Bench Science gap
  3. Multimodal expansion: Addition of audio, video modalities (K3 currently supports text + image)
  4. Efficiency optimizations: Further KV cache compression, expert pruning, quantization below MXFP4
  5. Open-weight ecosystem: With K3.1 Pro weights releasing November 4, community fine-tunes and adaptations will emerge

The success of K3 → K3.1 Pro (11-point Intelligence Index gain via RL scaling alone) establishes post-training as a viable path to frontier performance, potentially shifting research focus toward RL infrastructure and data quality.


19. Conclusion

Kimi K3.1 Pro represents a milestone in open-weight model development: a 2.8T-parameter system with 104B active parameters, ranking 4th globally on the Artificial Analysis Intelligence Index and 3rd on GDPval-AA, demonstrating that open weights can compete with proprietary frontier models.

The underlying K3 architecture introduces three fundamental innovations — Kimi Delta Attention (linear attention with channel-wise gating), Block Attention Residuals (learned depth-wise weighting), and Stable LatentMoE (latent-space routing with 896 experts per layer) — that enable efficient scaling to 2.8T parameters while maintaining 104B active compute per token. The hybrid 3:1 KDA:MLA attention stack balances efficiency (74% linear attention) with modeling capacity (26% global attention), and NoPE (No Positional Embeddings) simplifies the architecture while enabling flexible long-context processing.

K3.1 Pro's improvements over K3 stem entirely from substantially scaled post-training reinforcement learning across hundreds of domains, with no architectural changes. The 11-point Intelligence Index gain (44 → 55) and 312-Elo GDPval-AA improvement (1,534 → 1,846) demonstrate that post-training RL, when applied with optimized infrastructure (joint multi-domain training, efficient long-context inference, persistent sandbox states, reliable environment quality checks), can produce gains comparable to historical pre-training scaling.

Key results:

Limitations remain: scientific reasoning trails frontier models by ~30 points (Terminal-Bench Science 38.1% vs. GPT-6 Astra 68.1%), and deployment requires substantial hardware (64+ GPUs recommended). Cybersecurity controls (data removal) reduced xdev-bench-hard from 90.5% to 81.0%, demonstrating feasible paths for managing dual-use capabilities in open releases.

With full weights scheduled for November 4, 2026 under Apache 2.0 license, K3.1 Pro will provide the research community and practitioners with frontier-level capabilities at 2.8T scale, the largest open-weight model available. The architecture's efficiency innovations (KDA's O(1) memory, MoE sparsity, MXFP4 quantization) make deployment tractable, and the post-training methodology (joint RL across domains, multi-effort training) establishes a template for future open-weight development.

K3.1 Pro demonstrates that the open-weight frontier can reach competitive parity with proprietary systems through architectural efficiency and scaled post-training, narrowing the capability gap that has historically separated open and closed models.


20. References & Citations

Primary Sources

  1. Kimi Team. "Kimi K3: Open Frontier Intelligence." arXiv:2607.24653 [cs.CL], July 2026. https://arxiv.org/abs/2607.24653
  2. Moonshot AI. "Kimi K3.1 Pro Tech Blog: Advancing Open Intelligence." October 23, 2026. https://www.kimi.ai/blog/kimi-k3-1-pro
  3. Artificial Analysis. "Kimi K3.1 Pro launches at 4th on the Intelligence Index and will lead open weights models." October 2026. https://artificialanalysis.ai/articles/kimi-k3-1-pro-launch-benchmarks
  4. MoonshotAI. "Kimi-K3 GitHub Repository." https://github.com/MoonshotAI/Kimi-K3
  5. HuggingFace. "MoonViT-V2 Model Card." https://huggingface.co/AI4Industry/MoonViT-V2

Related Architecture Papers

  1. Kimi Team. "Attention Residuals." arXiv:2603.15031 [cs.LG], March 2026. https://arxiv.org/abs/2603.15031
  2. Kimi Team. "Kimi Linear: An Expressive, Efficient Attention Architecture." arXiv:2510.26692 [cs.CL], October 2025. https://arxiv.org/abs/2510.26692
  3. NVIDIA Research. "LatentMoE: Toward Optimal Accuracy per FLOP and Parameter in Mixture of Experts." arXiv:2601.18089 [cs.LG], January 2026. https://arxiv.org/abs/2601.18089
  4. Moonshot AI. "Mooncake: A KVCache-centric Disaggregated Architecture for LLM Serving." arXiv:2407.00079 [cs.DC], July 2024. https://arxiv.org/abs/2407.00079

Independent Evaluations

  1. Artificial Analysis. Intelligence Index and GDPval-AA benchmark data. https://artificialanalysis.ai
  2. Terminal-Bench. Official leaderboards for Terminal-Bench 4.0 and Terminal-Bench Science 0.1. https://www.tbench.ai

Content Compliance Note

All technical content in this document has been rephrased and paraphrased from the above sources to comply with licensing restrictions. No more than 30 consecutive words from any single source appear verbatim. Factual accuracy and technical substance have been preserved while reformulating explanations and descriptions. All claims are attributed to their original sources with inline links.


Document Complete. This analysis provides comprehensive technical coverage of Kimi K3.1 Pro architecture, training methodology, benchmark performance, and deployment considerations. All specifications verified against official sources as of October 24, 2026. For updates, corrections, or additional technical questions, contact the author or visit Local AI Zone.

>