From Open Weights to Managed Agents: A Technical Landscape for Enterprise LLM Deployment

    This article examines the industry shift from pure API-based model access to a dual-track approach combining open-weight models and managed agent infrastructure. It covers the technical characteristics of open-weight LLMs (MoE architecture, million-token context windows, RL-based iteration on existing bases), engineering practices for private deployment (VRAM planning, configuration, inference framework adaptation), and the architecture logic behind managed agent services (Harness as a service). A comparison table of API-only, self-built Harness, and managed agent approaches is provided, along with compliance considerations around weight licensing versus true open source.

    Recently, another leading AI team released the full weights of a trillion-parameter model alongside a managed agent service, sparking widespread discussion in the technical community. This is not an isolated event but a microcosm of the industry’s evolution from “model-as-a-service” toward a dual-track approach of “open weights + agent infrastructure.” Using such events as an entry point, this article systematically examines the technical characteristics of open-weight large models, engineering practices for private deployment, and the architectural logic behind managed agent services, providing an actionable reference for developers and enterprise technical decision-makers.

    1. Evolution of Model Delivery Models: From “API-Only” to “Open Weights”

    1.1 The Boundaries of the API Model

    API calls have been the mainstream way enterprises use large models over the past few years. The advantages are zero operations overhead, pay-per-use, and short validation cycles—but the boundaries are equally clear:

    • Data must leave the premises, creating obstacles for highly regulated industries such as finance, healthcare, and government;
    • Model behavior customization relies on prompts and limited fine-tuning interfaces, making deep modification difficult;
    • Inference costs grow linearly with business scale, with limited optimization headroom at scale;
    • Service availability and rate-limiting policies are controlled by the provider, creating single-point risks in critical paths.

    1.2 What Open Weights Change

    Opening full model weights means developers and enterprises are no longer limited to calling models via API—they can directly download weights, deploy and run them on their own hardware with sufficient compute, and optimize and customize them based on actual needs. This brings three fundamental changes:

    • Data sovereignty: Inference is completed entirely within the internal network, and sensitive data never leaves the premises;
    • Customization freedom: Domain adaptation, distillation, and pruning can be performed based on general fine-tuning techniques;
    • Cost structure: Shifts from “per-token billing” to “compute asset depreciation + operations investment,” with lower marginal costs at scale.

    1.3 A Commonly Confused Concept: Open Weights ≠ Open Source

    It must be emphasized that such weight releases are not equivalent to traditional open source in the strict sense. The internationally recognized open source definition requires that source code be accessible, modifiable, and redistributable; the open-weight model typically only publishes the model weights and configuration files needed for inference, while training code and original training datasets are not disclosed. Commercial use must follow the custom license agreement defined by the model publisher. When enterprises evaluate models, license review must be placed on equal footing with technical assessment (see Section 6).

    2. Technical Profile of Open-Weight Models

    2.1 MoE Architecture: Balancing Capacity and Cost with Sparse Activation

    Taking the recently released trillion-parameter model as an example, its typical configuration is: total parameter scale of approximately 2.8 trillion, with approximately 104 billion active parameters per inference—a “3T-class” open-weight model.

    The core idea of MoE is “sparse activation”: each token passes through a router and is sent to only a few expert networks for processing, rather than the entire network. This yields two key conclusions:

    • Decoupling of capacity and compute: The model’s “knowledge capacity” is determined by total parameters, while “per-inference cost” is determined by active parameters. With 2.8T total parameters and 104B active, it achieves greater model capacity at controllable inference cost;
    • The VRAM trap in deployment: Although only hundreds of billions of parameters are activated per forward pass, all expert weights must reside in VRAM. At BF16 precision, 2.8 trillion parameters require approximately 5.6TB of VRAM for weights alone, necessitating multi-node, multi-GPU clusters. The 104B active parameters correspond to approximately 200GB of activated weights, which can be carried by a single 8-GPU node—this is precisely the key to “deploying an ultra-large MoE.”

    From an engineering perspective, expert load balancing and cross-GPU communication overhead also require attention: routing skew can cause some experts to overheat while others sit idle, and inference frameworks typically need to combine load balancing strategies with expert parallelism to address this.

    2.2 Million-Token Ultra-Long Context: Capabilities and Costs

    A new generation of open-weight models generally features a 1-million-token ultra-long context window with native multimodal vision understanding. The business value of long context is direct: full-repository code analysis, hundred-page document review, and ultra-long conversation memory can all be completed within a single request.

    But the cost is equally clear—KV cache expands linearly with context length, estimable with the following formula:

    1. KV VRAM ≈ 2 × layers × KV heads × head dimension × tokens × bytes per element

    For a typical tens-of-billions dense model, at 128K context and FP16 precision, KV cache is approximately tens of GB; scaled to a million tokens, a single request’s KV cache can reach hundreds of GB, enough to fill a high-end accelerator card. Therefore, long-context deployment must combine:

    • Prefix caching: Reuse KV across multi-turn conversations and batch tasks with the same prefix, with near-zero overhead on cache hits;
    • KV cache quantization: Compress FP16 KV to INT8/INT4, halving VRAM or more, with typically manageable precision loss;
    • Sparse/layered attention: Compute full attention only for key tokens;
    • Beware the gap between “nominal context” and “effective context”: Validate with “needle-in-a-haystack” style long-context retrieval evaluations rather than relying solely on spec sheets.

    2.3 RL-Based Iteration on Existing Bases

    It is worth noting that such models are typically not entirely new bases trained from scratch, but rather capability iterations completed through large-scale cross-domain joint reinforcement learning on top of existing bases. The significance of this path for users is often underestimated:

    • Capability continuity: The base’s proven language and reasoning capabilities are retained, reducing the risk of quality fluctuation in new versions;
    • Faster iteration cadence: Reusing the base significantly compresses training cycles and compute costs, enabling more frequent version upgrades;
    • Smoother upgrades: Smaller changes in interface behavior and prompt compatibility mean lower migration costs on the application side.

    3. Engineering Practices for Private Deployment

    3.1 Compute and VRAM Planning

    Planning can be estimated in three segments: “weight VRAM + KV cache VRAM + activation values and framework overhead”:

    • Weights: parameter count × bytes per parameter (BF16 ~2 bytes, INT8 ~1 byte, INT4 ~0.5 bytes);
    • KV cache: per the formula in Section 2.2 × number of concurrent requests;
    • Redundancy: typically reserve an additional 20%–30% for communication buffers and framework overhead.

    3.2 Deployment Configuration Example

    Mainstream inference frameworks have broadly similar configurations for “ultra-large MoE + ultra-long context” models. Key fields are illustrated below (refer to your framework’s documentation for exact parameter names):

    1. # Private deployment configuration example
    2. model_path: /models/moe-2.8t
    3. dtype: bfloat16
    4. quantization: weight_int8 # Weight quantization: weight VRAM 5.6TB → 2.8TB
    5. kv_cache_dtype: int8 # KV cache quantization
    6. max_context_len: 1048576 # 1M token context
    7. tensor_parallel_size: 8 # Tensor parallelism: split single-layer weights
    8. expert_parallel_size: 4 # Expert parallelism: split expert distribution
    9. enable_prefix_caching: true # Prefix caching: reuse KV for multi-turn/batch tasks

    3.3 Inference Framework and Hardware Ecosystem Adaptation

    Another trend on the inference side is the rapid follow-up of the hardware ecosystem. On the day weights were released, multiple compute vendors announced Day-0 inference adaptation: leveraging the hardware plugin layer of mainstream inference frameworks, models can be directly deployed and validated on domestic accelerator cards; for the high VRAM demands of million-token context and ultra-large MoE, optimization techniques such as caching and quantization alleviate resource pressure, providing hardware ecosystem support for local deployment by domestic enterprises.

    The practical recommendation for enterprises is: first validate throughput, latency, and precision metrics with a small-scale POC, then scale horizontally; at the same time, prioritize reusing general infrastructure capabilities from cloud platforms—GPU compute instances, container platforms, object storage, logging services, and monitoring/alerting (major cloud platforms offer mature corresponding product categories)—delegating underlying resource operations to the cloud and focusing energy on model effectiveness and business logic.

    4. Managed Agents: Turning the Agent Runtime into a Cloud Service

    4.1 The Real Bottleneck Is Not the Model—It’s the Harness

    A production-grade agent that works reliably = model + runtime framework (Harness). The Harness handles all the “dirty work” beyond the model:

    • Sandboxed code execution environment;
    • Context and state management: long-task memory, session persistence;
    • Tool invocation and permission control: which agents can access which systems;
    • Task interruption recovery: resuming from checkpoints after process crashes or timeouts;
    • Logging, monitoring, and auditing: replay and accountability when issues arise.

    In the traditional development model, for an agent to run reliably, enterprises need to build the above code execution environment themselves and solve context management, tool invocation, permission control, and task interruption recovery one by one. Experience suggests that building a reliable Harness infrastructure can take months, with ongoing maintenance costs thereafter. This is the fundamental reason why agents are “easy to demo, hard to productionize.”

    4.2 Delivery Form of Managed Services

    The approach of managed agent services is to encapsulate the entire Harness as a cloud service: enterprises only need to define tasks, configure agents, and connect business tools, while the service provider handles maintenance and upgrades of the underlying runtime environment. Its value can be compared to what container orchestration did for microservices—pushing the complexity of distributed systems down into platform capabilities. Typical capabilities include:

    • 24/7 managed runtime environment;
    • Support for long-running complex tasks (hour-level and day-level tasks without interruption);
    • Multi-agent collaborative scheduling.

    4.3 Two Typical Application Scenarios

    • Integrated into enterprise internal systems: Handling business monitoring, operations response, and similar work, characterized by event-driven, round-the-clock duty, and deep coupling with internal permission systems;
    • Embedded in user-facing products: Providing investment research assistants, intelligent customer service, and similar services, characterized by high traffic fluctuation and high requirements for response stability and content safety.

    The overall architecture can be illustrated as follows:

    1. Enterprise Internal Systems User-Facing Products
    2. (Monitoring/Ops Response) (Research Assistant/Customer Service)
    3. │ │
    4. └──────────┬──────────┘
    5. ▼
    6. ┌─────────────────────────────────┐
    7. │ Managed Agent Runtime │
    8. │ Task Scheduling │ Context Mgmt │ Tool Gateway │
    9. │ Sandbox Exec │ Permission │ Recovery │
    10. └─────────────────────────────────┘
    11. │
    12. ▼
    13. Model Inference Layer (Cloud API or Private Deployment)

    5. Technical Selection Comparison: API, Self-Built Runtime, and Managed Agents

    Dimension Pure API Self-Built Harness Managed Agents
    Data Security Data leaves premises Never leaves premises Depends on deployment form
    Customization Depth Limited Deepest Moderate
    Startup Time Days Months Days to weeks
    Long-Term Ops Cost Low (pay-per-use) High Low
    Applicable Scenarios Rapid validation, lightweight integration Strong compliance, deep customization Fast productionization of long-tail agents

    A mature engineering strategy typically combines all three: use APIs to quickly validate scenario value, use open-weight private deployment to carry core high-sensitivity paths, and use managed agents to handle the large volume of long-tail demands with moderate per-unit value but frequent updates—achieving a balance among security, cost, and delivery speed.

    6. Open Weights ≠ Open Source: License and Compliance Essentials

    To reiterate, there is a clear boundary between “open weights” and “open source”: the open-weight model typically only publishes inference weights, while training code and original training datasets are not disclosed. Commercial use must follow the publisher’s custom license agreement. Before deployment, enterprises should complete the following compliance actions:

    1. Legal review of the license agreement: Focus on confirming commercial terms, boundaries of redistribution and modification rights, and whether use restrictions or user-scale thresholds apply;
    2. Establish a model version ledger: Record weight sources, verification hashes, and license versions to meet audit and traceability requirements;
    3. Dual-line data compliance confirmation: Confirm both that input data can be used for inference and that the purpose and ownership rights of generated content are clear;
    4. Assess exit costs: If switching models in the future, how transferable are prompts, toolchains, and fine-tuning data?

    7. Conclusion

    Openness is a spectrum, not a switch: from API-only, to open weights, to fully open source, the forms of model supply are becoming multi-layered. At the same time, the servitization of agent infrastructure—turning the Harness from “a heavy asset enterprises build themselves” into “a ready-to-use cloud service”—is another equally clear evolutionary thread. For developers, two core competencies worth investing in become clear: first, understanding underlying technologies such as MoE, long context, and quantization to make correct resource and precision trade-offs in private deployment; second, mastering the design paradigm of agent runtimes so that, whether choosing self-built or managed, they have control over key links such as task scheduling, state management, and permission control. The decisive factor in technology has never been launch day—it lies in every engineering detail after deployment.