Contact
Implement · Soofi

Can you run it?

Ownership levelPartialnone·limited·partial·substantial·fullAnalytical input B ยท 73.2/100

This page is a projection of the one entry record, the Doesn't fail you and Data control factors that Implement covers. The full verdict is set by all four factors together, floor-weighted so the weakest caps the whole.

Which domain expands which factor
  • AssessUse & modify + Transparency
  • ImplementData control + Doesn't fail you
  • UseDoesn't fail you
  • SupportTransparency

Install & run

Soofi-S ships as bf16 safetensors on the verified Soofi-Project org, plus first-party GGUF builds. Because it is a custom hybrid Mamba-2/MoE, the transformers path needs trust_remote_code=True. Always pin an exact revision.

# Hugging Face transformers
from transformers import AutoModelForCausalLM, AutoTokenizer

model_id = "Soofi-Project/Soofi-S-Instruct-Preview"   # deploy the post-trained variant
rev = "<pinned-commit-sha>"                              # pin the revision, don't float on main
tok = AutoTokenizer.from_pretrained(model_id, revision=rev, trust_remote_code=True)
model = AutoModelForCausalLM.from_pretrained(model_id, revision=rev, trust_remote_code=True)
# llama.cpp / llama-server (first-party GGUF) - use --jinja for the native tool template
./llama-server -m soofi-s-instruct-preview.Q4_K_M.gguf --jinja

# Ollama (community/first-party GGUF)
ollama run soofi-s-instruct

# vLLM (OpenAI-compatible server) - confirm your vLLM version supports the hybrid arch
vllm serve Soofi-Project/Soofi-S-Instruct-Preview --revision <sha> --trust-remote-code

Prefer safetensors; verify per-file checksums after download.

Hardware & VRAM requirements

The MoE activates only ~3B of 30B parameters per token, so decode is cheap, but the full ~30B weight set must be resident. In bf16 that is roughly 60 GB, so plan for multi-GPU or a first-party GGUF / 3-bit quantization to fit a single high-VRAM card. The standout property is long-context economics: the hybrid Mamba-2 design keeps the inference cache near-constant as context grows, so serving up to 256k tokens does not blow up VRAM the way a dense transformer's KV cache would. Size for the largest variant you intend to serve and budget headroom.

Serving stacks

Because Soofi-S is a custom architecture, runtime support is still maturing - check your stack's version before committing:

StackUse it for
llama.cpp / llama-serverGGUF inference; --jinja applies the embedded chat/tool template verbatim
vLLMHigh-throughput + OpenAI-compatible API (needs --trust-remote-code; confirm hybrid-arch support)
OllamaLocal single-command runs (note: its template omits the native tool format)
transformersPrototyping and fine-tuning (trust_remote_code=True)

This is why Operational Readiness scores 4 rather than 5: the breadth is there, but the custom Mamba-2/MoE and cross-runtime tool-template quirks demand more care than a plain Llama-class model.

Safe-deployment controls & Deployment Ceiling

Applying the safe-deployment playbook, the model-specific gate rows are:

  • Supply chain: pin the exact Soofi-Project revision hash and verify checksums; prefer safetensors (trust_remote_code=True runs vendor modelling code - review it).
  • Model layer: deploy the Instruct-Preview variant, never the base checkpoint; set conservative decoding defaults.
  • Input/output layers: add input/output guardrails and your own guard classifier for any customer-facing path - Soofi-S ships no companion guard model and its safety features are documented as incomplete; add prompt-injection defences and treat retrieved/tool content as untrusted.
  • Compliance: archive the (readily available) per-source training-content summary and copyright posture in your AI-BOM.

Deployment Ceiling: T2 (customer-facing, human-reviewed) - conditional, and preview-caveated. With the Instruct-Preview variant plus input/output guardrails and prompt-injection defences, Soofi-S can in principle reach customer-facing, human-reviewed use - but because it is an early preview with incomplete safety hardening, pilot it internally first. Its standout strengths are European sovereignty, auditability and long-context economics. T3+ (bounded autonomous) additionally needs a deterministic action-policy engine, per-action human approval for irreversible operations, and external guard tooling beyond what this release provides.

Available quantizations

The Soofi-Project org publishes first-party GGUF builds for the preview variants and an EntQuant 3-bit build, so quantized inference does not depend solely on community efforts. This is unusually good coverage for a preview - but re-check quality against the bf16 base for your workload before relying on an aggressive (e.g. 3-bit) quant in production.

Fine-tuning & adaptation

Soofi-S is strong here because the training stack is open: soofi-project/Soofi-Pretraining and soofi-trainer provide the pre-/mid-training code and configs, and the released intermediate checkpoints plus per-source data accounting let you reproduce or extend training rather than only fine-tune the final weights. The base is explicitly built for fine-tuning. For most adopters, standard SFT/LoRA via transformers / TRL on the safetensors checkpoints is the practical path; teams needing deeper control can use the released trainers directly. Note the EU AI Act provider implications of placing a derivative on the market (see Assess).

API / OpenAI-compatible integration

Serve Soofi-S behind vLLM's or llama-server's OpenAI-compatible endpoint for drop-in integration with existing OpenAI-client code:

llama-server -m soofi-s-instruct-preview.Q4_K_M.gguf --jinja --port 8000
# then point any OpenAI SDK at http://localhost:8000/v1

Use --jinja (llama.cpp) so the model's embedded chat/tool template is applied verbatim - that is what makes native tool calling work; some runtimes (e.g. Ollama) strip the tool portion, so verify the template your endpoint actually applies.

How this scores

The ownership factors this domain covers, drawn from the one entry record.

3

Doesn't fail youIs it reliable and good enough for the job?

Moderate

Reported as the strongest fully-open model on aggregate English and German benchmarks at only ~3B active params, but an early preview: safety features are documented as incomplete and the numbers come from the report and third-party coverage, not from a generally available release.

How this scores (AOI sub-dimensions)
Performance4/5how capable it is relative to its classIndependent coverage and the pretraining report agree Soofi-S is the strongest fully-open model on aggregate English and German benchmarks - ahead of OLMo 3 32B, Apertus 70B, EuroLLM 22B and Alia 40B - matching dense 14-27B models and winning code aggregates among open base models, at only ~3B active parameters.
Operational4/5how practical it is to run, serve and maintain in productionRuns on mainstream stacks - HF transformers (trust_remote_code), vLLM, llama.cpp/llama-server and Ollama - with first-party GGUF and 3-bit quantizations and a near-constant long-context cache.
Safety3/5whether misuse risks are evaluated and guardrails are providedA post-trained Instruct-Preview variant exists and the L3S Research Centre contributes safety/evaluation frameworks, but the Instruct model card documents several privacy and safety features as still incomplete, this is an early preview, and there is no companion guard model or broad independent red-team battery.
4

Doesn't extract your dataDoes running it keep your knowledge and data yours?

Moderate

EU/Germany-domiciled and trained on sovereign German infrastructure, so once self-hosted your data would stay yours - but with weights not yet downloadable and the licence unconfirmed, that self-hosting cannot yet actually be exercised from a settled grant.

How this scores
Not a scored AOI dimension. For a self-hosted model, data-control is a structural property of running the weights yourself, strong by default unless the model phones home or the licence claws back rights. For a hosted API this factor is the retention + train-on-inputs + residency read, scored from the binding terms.
What this means for adoptionThe documentation and openness intent here are exceptional - a genuine pretraining report with full per-source data accounting and a stated OSAID 1.0 commitment to release weights, checkpoints, code and data permissively - and the German-sovereign infrastructure is a real data-control draw. But this is preview-stage: the weights are 'coming soon' rather than downloadable, and the licence is unconfirmed (page inconsistent, LICENSE file 401'd, no final SPDX), so use/modify and data-control cannot yet be fully exercised. Treat the openness as promised-and-well-documented rather than delivered, and revisit at the open release once the weights land and the permissive licence is finalised.

Sources

The same evidence records as the entry sheet. Read means the text was verified; unverified means it is known to exist but not yet read.

Technical_reportread2026-07-25
Real arXiv report ("A Sovereign, Open-Source Foundation Model for German and English" / PDF "Soofi S Pretraining Report v1.0"): a ~30B (30B-A3B) hybrid Mamba-2/Transformer MoE trained on ~27T primarily German+English tokens on Deutsche Telekom's Industrial AI Cloud in Munich, with full per-source data accounting (public identifier + raw/effective token counts; the ~1.3% Genios corpus reported in aggregate).
Licenceunverified2026-07-25
Soofi-S-Base exists and is hosted on the verified Soofi-Project org on Hugging Face in bf16 safetensors (custom hybrid Mamba-2/MoE modelling code via trust_remote_code=True), but its licence is unconfirmed/pending: the page characterises it inconsistently ("Other"/TODO vs "closed-beta" and "will be released under a permissive license, without gated access"), terms are described as "not yet finalized", the LICENSE file returned HTTP 401, and no final SPDX has been published.
Model cardunverified2026-07-25
The Soofi-Project Hugging Face org publishes the base plus Instruct/Isar/Rhine preview variants with first-party GGUF and 3-bit quantizations, embedded Jinja chat/tool templates, and model cards noting safety features as incomplete.
Documentationread2026-07-25
The public soofi-project/Soofi-Pretraining GitHub repo (based on the Nvidia Nemotron 3 Nano architecture) hosts the training/evaluation code and per-source data-construction scripts, but its README states "Open model weights coming soon" - the model is not yet generally downloadable (Hugging Face currently hosts a preview/internal checkpoint).
Vendor announcementunverified2026-07-25
A consortium press release presents Soofi as a German public-private consortium project for sovereign industrial AI, trained on Deutsche Telekom's Industrial AI Cloud in Munich, coordinated by the KI Bundesverband and funded by the BMWE.
Third-party analysisunverified2026-07-25
CAIRNE's launch page describes the SOOFI consortium, its members (including CAIRNE Gold member L3S Research Centre) and its sovereign open-source foundation-model mission.
Third-party analysisunverified2026-07-25
Independent technology coverage reports Soofi-S as a leading fully-open model that meets the Open Source AI Definition, publishing weights, intermediate checkpoints, training/eval code and a detailed data inventory.
Third-party analysisunverified2026-07-25
Independent coverage reports Soofi-S is the strongest fully-open model on aggregate English and German benchmarks, ahead of OLMo 3 32B, Apertus 70B, EuroLLM 22B and Alia 40B, and winning code aggregates among open base models.