FR
live
AI

Kimi K3.1 Pro closes the gap with closed models through post-training, not parameters

On October 23, 2026, Moonshot AI released Kimi K3.1 Pro, a 3T-class open-weight model built from heavy post-training of K3: it beats GPT-6 Astra on Terminal-Bench 4.0 and cuts its hallucination rate by nearly three times, without adding a single parameter. Full weights land on November 4 — a window to plan around for anyone who self-hosts.

A single tuning fork standing upright on a dark workbench, its tip glowing amber-yellow among identical tools laid flat.

October 23, 2026. Moonshot AI releases Kimi K3.1 Pro and its K3.1 Pro Highspeed variant, the first model of the new K3.1 series. October 23, 2026. On Terminal-Bench 4.0, which evaluates coding agents on realistic terminal tasks, it scores 65.7% — ahead of GPT-6 Astra (58.2%) and just behind Claude Opus 5.5 (66.4%). November 4, 2026. Full weights will be released. The key point: the base model did not change — the post-training did all the work.

For a CTO or ML lead, this is not one more benchmark. It is confirmation that in 2026 the AI frontier is decided less at pretraining than at post-training: at equal base, injecting massive reinforcement-learning compute is enough to catch up with the closed models.

Same base, a lot more post-training

Kimi K3.1 Pro is explicitly “a post-trained version of Kimi K3, with substantially larger post-training compute.” In other words: no new foundation model, no parameter-count race — the firm ships a 3T-class (three-trillion-parameter, mixture-of-experts) open-weight model, already carried by the K3 series.

To make every unit of RL compute pay, Moonshot says it optimized “every layer of the stack”: the RL framework, long-context inference, training efficiency, sandbox infrastructure, rollout scheduling, and a shared platform for environment quality checks. The stated goal is large-scale joint RL across “hundreds of downstream domains,” so each increment of compute produces stable, predictable gains. That lever, more than raw size, is what separates this generation.

The benchmark that matters: the coding agent

The most telling numbers are the agentic ones. On Terminal-Bench 4.0, which runs realistic terminal tasks under strict tests and constrained resources, K3.1 Pro reaches 65.7% — above GPT-6 Astra and within a point of Claude Opus 5.5. On Kimi Code Bench 3.0 Long-horizon, an internal benchmark of multi-step execution, tool use, and end-to-end problem solving, it climbs to 61.2%, against 55.95% for K3.

The most striking demonstration is an internal experiment: K3.1 Pro built a human walking-dynamics simulator on top of human-atlas, an open-source anatomical model of 296 skeletal and 402 muscle components. Across 167 missions and 420 independent reviews, it iterated until the simulated human walked continuously with alternating strides for 11.2 seconds — and when reward shaping stopped improving arm motion, it did not keep pushing the reward: it probed the simulator’s dynamics, identified and corrected 36 errors in the shoulder-muscle moment-arm calculations, then retrained the controller. That is causal debugging, not vibe coding.

Factual accuracy as the differentiator

Moonshot pushes a second axis: factual accuracy, critical for finance and research. On Kimi Hallu Bench Hard, an internal benchmark built to stress hallucinations, the claim-level hallucination rate falls from 23.4% for K3 to 8.3% for K3.1 Pro — and the share of responses containing at least one factual error is now only 42.4% of its predecessor’s. Without tools it lands at 5.4%, behind GPT-6 Astra (4.2%) but ahead of Claude Opus 5.5 (6.8%).

In finance it claims state of the art on OfficeQA Pro v2 (64.4), which tests analysis of real fiscal documents with retrieval, cross-document verification, and multi-step numerical reasoning, and 58.6 on Frontier Finance. Internally it improves 7.2 points on financial modeling, 11.6 points on financial research, and roughly 4.2× the performance of K3 on business operations.

3D and creation as a differentiator

Beyond code, K3.1 Pro claims a lead in 3D and spatial reasoning. On BenchCAD, which tests 3D reconstruction from multi-view renders through CAD code generation, it scores 92.7% with tools — close to Claude Opus 5.5 (96.2%) and GPT-6 Astra (95.9%), and well ahead of DeepSeek V4.1 Flash 1017 (81.6%). Without tools it holds 72.8%, a tenth of a point off Opus 5.5 (73.0%). Moonshot pushes the exercise to the product level: 3D Make, now live in kimi.ai, turns a text prompt, a sketch, or a reference image into a 3D model you can preview, export for 3D printing, or share. It is a concrete dividing line from text-only models: here the model drives Blender or a CAD tool through scripts, without an MCP connector.

Highspeed and the weights timeline

Two variants, two jobs. K3.1 Pro Highspeed delivers 2–3× the speed of K3.1 Pro for responsive interactions, at roughly double the price. More important, the timeline is explicit: the model is available today through Kimi.ai, Kimi Work, Kimi Code, and the Kimi API, but full weights only land on November 4. For a team planning self-hosting, that eleven-day window is the real parameter: it is the gap between “try it through the API” and “deploy it on your own infrastructure.”

An open-weight model with explicit guardrails

The release is not just benchmarks. Moonshot documents a rare choice: for the open-weight version, the team identified and removed cyber-related data from training — from both the mid-training corpus and the RL environment mix — while keeping the general-purpose coding tasks the model needs to stay useful. The stated reason is explicit: without that removal, vulnerability-research capability would have “increased substantially” with post-training scale. The model is evaluated on ExploitBench, ExploitGym, and xdev-Bench-hard, and the removal is presented as a deliberate control lever.

Read it for what it is: open-weight labs are starting to treat cyber capability as a byproduct of post-training to be governed, not an accident.

Verdict

If you already self-host an open-weight model, mark November 4: full K3.1 Pro weights land that day, with a 1-million-token context window and API pricing already announced at $2/M input and $10/M output — the Highspeed variant, 2–3× faster, costs $4/M in and $20/M out. For coding agents or finance work with a data-sovereignty requirement, it is a credible alternative to Claude Opus 5.5 or GPT-6 Astra, at the cost of a point or two on some benchmarks and an inference stack you operate yourself.

If you are on a closed model and factual accuracy or coding agents dominate your use case, look at real deltas rather than leaderboards: K3.1 Pro beats GPT-6 Astra on Terminal-Bench but trails Claude Opus 5.5, and it gives ground on 3D BenchCAD (92.7% with tools, against 96.2% and 95.9%). Switching is only worth it when control of the weights — and therefore of data and marginal cost — is worth more than those last few points.

References

The cyber brief, every Tuesday

The flaws that matter and the patches to apply, in a ten-minute read.

No spam. One-click unsubscribe.
read next

On the same topic

Phantom, the autonomous AI framework that drove INC and The Gentlemen ransomware intrusions

In late September 2026, SOCRadar found an exposed C2 server laying bare the AI-driven intrusion ecosystem of INC Ransomware and The Gentlemen affiliates: 8,257 agent messages, 62 named organizations, and the source code of an autonomous kill-chain framework called Phantom. For defenders, the lesson is not “AI attacks” — it is that AI session logs are now exploitable forensic evidence.

← Back to the feed

Type at least two characters.

↑ ↓ navigate ↵ open esc dismiss