Skip to content

Capability · applied inside an engagement

Open-weight models & sovereign AI

Choose the model for your workload. Configure it for your hardware. Build an AI system whose data flows, permissions and operating costs you can explain.

Request a quote

Hyperion combines product leadership with scoped model engineering and cybersecurity work. A technical mission defines the configuration, adaptation, integration and handover to be delivered; specialist testing and independent qualification are agreed explicitly.

From a model candidate to an accepted system.

Define the workload and baseline, qualify candidates, configure and adapt only if justified, obtain human acceptance, then roll out with monitoring and handover. Failed acceptance returns to qualification or configuration.

  1. Define the workload

    Tasks, baseline and acceptance criteria

  2. Qualify candidates

    Exact release, rights, hardware and failure modes

    Same authorized task and corpus · same access rules

    • Search baseline

      No answer-generation model

    • Candidate A

      Exact release and configuration

    • Candidate B

      Exact release and configuration

  3. Configure; adapt if justified

    Compare prompting, retrieval and fine-tuning

  4. Human acceptance

    Named owner reviews evidence before release

    Compare on held-out cases · human acceptance · no winner assumed

  5. Controlled rollout

    Monitoring, rollback and operating handover

Evaluation and security across every stage.

If acceptance fails: revise the candidate or configuration.

Compare candidates against one workload, baseline and acceptance criteria.

The decision

From model choice to a system your team can own.

Specialist advice and bounded implementation for startups, scaleups and established enterprises. Evaluate Mistral, Qwen, DeepSeek and other suitable model families against your own tasks. The recommendation may be an open-weight model, a managed service, retrieval without fine-tuning, or no language model.

Qualify the model

Evaluate and select

Build a representative task set and compare quality, failure modes, language coverage, latency, hardware needs and total operating cost. Record the exact model revision, licence and acceptance criteria.

Design example

A model decision you can inspect

Design scenario with proposed checks. Technical record in English.

MODEL / 01

A maintenance planner needs the applicable manual revision and a cited answer about a spare-part record. The assistant must not provide machine commands or safety-critical operating advice.

Does answer generation improve this task enough to justify its operating cost and failure modes?

  1. Establish the baseline

    Permission-filtered BM25 search returns the authorized passages and their revisions. Assess whether the planner can find a usable answer.

  2. Qualify exact candidates

    Compare Ministral-3-3B-Instruct-2512 and Qwen3-8B using the same authorized retrieval and buyer task. These are example candidates, not a shortlist winner.

  3. Freeze the configuration

    Pin immutable release revisions or digests for weights, tokenizer and chat template; record runtime version, device, context and sampling settings, plus corpus/index revision, parser, chunking and access policy. Treat each quantization as a separate configuration.

  4. Decide from held-out evidence

    The named client owner sets pass/hold criteria before evaluation. Keep the acceptance set out of tuning data; assess retrieval quality separately from answer quality.

No winner selected. Keep the search baseline until an authorized evaluation establishes additional user value within the agreed constraints.

Explore the technical record

Proposed checks, not results

Exercise outdated and conflicting manuals, missing records, unauthorized documents and instructions embedded in source text. Check source selection, citation support, refusal and whether the planner reaches the right record. Latency, operating cost and operator workload remain unmeasured qualification questions.

Configuration before adaptation

Repair retrieval, access filtering, templates and inference settings first. Fine-tune only an evidenced residual gap with licensed data and a held-out regression set. A smaller model can be a starting candidate; adaptation is not its prerequisite.

Release record and ownership

Record the accepted configuration, unresolved failures, rollback reference and monitoring owner. Hosted API terms, downloaded weights and inference software have separate rights and data-processing conditions. A model label alone does not establish confidentiality or sovereignty.

A Product Decision Review can define the comparison and recommendation. A quoted Mission can include a named evaluation harness, configuration or adaptation task. Client acceptance and ongoing operation remain explicit.

Configure and adapt

Configure and serve

Set context limits, sampling parameters, structured outputs, batching and concurrency. Choose quantization and a serving runtime such as vLLM or llama.cpp for the target hardware, then measure the trade-offs.

Retrieve or fine-tune

Compare prompting and retrieval with supervised adaptation. Where justified, define a rights-cleared dataset, held-out evaluation and LoRA or QLoRA fine-tuning plan. Track regressions, provenance and adapter compatibility.

Control the boundary

Build bounded agents

Connect retrieval, tools and workflows with explicit permissions, budgets and stopping rules. Evaluate tool selection, prompt injection, data access, human approval and recovery from ambiguous effects.

Design the data boundary

Choose on-premises, edge, private cloud or a justified hosted path. Map storage, logs, telemetry, support, backups, keys and network egress. Confidentiality follows verified controls across that whole path.

Design example

Permission, refusal and an uncertain write

Design scenario with proposed checks. Technical record in English.

AGENT / 02

An assistant drafts a maintenance work order. A retrieved note asks it to bypass approval; a separately authorized request later times out after dispatch. Neither source text nor model output grants permission.

What may happen, who permits it, and what establishes that a write actually committed?

A · Refuse and stop — no execution follows this branch

  1. Identify the caller

    The application resolves caller identity and tenant independently of the model. Retrieved instructions remain untrusted data.

  2. Enforce external policy

    An out-of-scope proposal is denied before credentials or a tool invocation are available. The assistant refuses or escalates; no write is attempted in this branch.

B · A separate, authorized request — dispatch and reconcile

  1. Bind an authorized operation

    Human approval binds subject, tenant, target and payload. A constrained execution adapter uses a stable operation key and the allowed credentials only for that operation.

  2. Reconcile uncertainty

    A timeout produces UNKNOWN, not failure. Authoritative readback must establish a committed operation matching the key, tenant, target and payload before reporting success.

In this proposed branch, committed matching readback would reconcile the original write without a second write. Missing, pending or conflicting readback keeps the outcome unresolved and escalates it.

Explore the technical record

Two independent branches

Branch A: untrusted bypass request → identity and tenant check → policy denial → no credentials and no invocation → refusal or escalation. Branch B: authorized proposal → bound approval → adapter dispatch → timeout/UNKNOWN → authoritative readback. These are authored traces, not a tool execution log.

Retry is a contract

A caller cancellation or client timeout does not prove server execution stopped. A missing record does not prove failure. Retry only where the target's idempotency contract and reconciliation evidence permit it; never infer exactly-once execution from an agent prompt.

Proposed adversarial checks

Test cross-tenant references, changed payloads after approval, expired authority, instruction injection, duplicate delivery, delayed commit and unavailable readback. Keep the identity provider, policy decision, execution adapter and readback authority distinct in the evidence record.

A scoped Mission can implement the named harness and bounded integration. The client supplies system ownership and authorization decisions; independent security assurance is separately scoped. This record is not a penetration-test result.

Choose the operating arrangement

Model rights and hosting are separate decisions. Open-weight models can run in your environment or through a managed service. Compare the complete data flow, operating capacity and lifecycle obligations for your workload.

Neither arrangement is universally preferable. Record responsibilities and verify controls for the selected model and service.
DimensionSelf-managed inferenceManaged inference
Model rightsCheck the exact model release and licenceCheck model rights and service terms
Data residencyCan remain in a verified perimeterDepends on vendor regions, contracts and flows
Cost modelInfrastructure plus operationsUsage- and contract-based
AdaptationLicence-dependent fine-tune / LoRAProvider-dependent
LifecycleOwn updates, security maintenance, regression checks and rollbackCheck version support, deprecation and portability

Evidence and handover

Measure and hand over

Deliver the agreed reference implementation, evaluation pack, configuration baseline and runbook. Define monitoring, change control, rollback and ownership so the client can operate and improve the system.

What your team receives

  • A workload-specific model decision record and evaluation plan
  • A deployment and data-flow design, configuration baseline and adaptation strategy
  • The code, evaluation results and operating handover explicitly agreed in the Mission scope

Buy an independent decision through a Review, agreed implementation through a Mission, or ongoing product authority through Executive Product Leadership. The Review excludes implementation. A Mission names the code, tests and handover included; specialist assurance and client operating responsibilities remain explicit.

Individually scoped and quoted after a fit conversation.

Frame a model and deployment decision

Technical depth

Architecture view

Start with a representative workload, baseline and acceptance criteria. Qualify the exact model release for the target hardware and operating boundary. Configure inference, compare prompting and retrieval, and fine-tune only when the evidence justifies changing model weights. Evaluate the complete system before a named owner accepts controlled rollout; maintain regression, security and rollback checks afterward.

Engineering detail

Mistral and other open-weight models; GGUF model packaging where supported; quantization methods such as AWQ or GPTQ where compatible with the target hardware and runtime; serving with vLLM, llama.cpp or Ollama; LoRA/QLoRA fine-tuning; retrieval integration; evaluation harnesses for quality and regression; on-premise GPU and edge deployment.

Are open weights the same as open-source AI?

No. Access to weights is one property. Open-source AI also concerns the freedoms and components needed to use, study, modify and share the system. Check the exact release and its licence; family names do not establish commercial rights.

Does a local or European model guarantee sovereignty?

No. Define who controls the data, keys, infrastructure, updates and exit path. European and Chinese-origin models can both be evaluated; model provenance, hosting, licences and the complete data flow are separate decisions.