assurance · Level 4

How to evaluate a new frontier model the day it lands

A repeatable ten-step method, your own evaluation set, and a worked example on the DeepSeek V4 family.

By Mickarle Wagstaff-Irons - Micky Irons

  • Level 4Frontier
  • 150 min
  • 7 chapters
  • Online course and PDF workbook
The Boundaryassurance / 04

Read, practise and review

Your next step

Start this course online

Register your start, then work through the lessons and exercises at your own pace. You can download the PDF separately. Where a scored exam is available, you will find it after the lessons.

Register or resume your course

Mickai privately records this registration and sends its team a course-start notification. It records your intention to start, not proof of attendance or completion. Our course-start privacy notice explains the details and the 30-day resume cookie.

Follow the Mickai company page on LinkedIn

You can start learning without subscribing or following. Newsletter email confirmation and provider enrolment are recorded separately.

Start with the essentials

The short answer

To evaluate a new model on the day it lands, start from primary sources: the model card and release notes. Check the licence, architecture, context length, hardware needs, cost and data jurisdiction, and read benchmarks sceptically. Then test about twenty of your own real tasks, scored blind against a rubric, verify any downloaded weights, and record the decision with its date.

What you will learn

  • You will be able to run a repeatable ten-step evaluation of any new model, starting from primary sources.
  • You will know the difference between open-weight and open source, and how to read a licence.
  • You will be able to explain dense versus mixture-of-experts models, and total versus active parameters.
  • You will be able to read benchmark tables sceptically and spot contamination and cherry-picking.
  • You will be able to build a twenty-task evaluation set with a rubric and blind side-by-side scoring.
  • You will be able to check where a download came from and write a dated decision record.

Who it is for

Builders, technical leads and analysts who choose or recommend models and need a method that does not depend on hype. The memory sums in the workbook on inference engines are useful background.

Before you start

  • Comfort with tokens, context windows and the memory sums in Inference engines explained.
  • Access to two models you can compare, for the exercises.

Learn in your browser · Chapter 01 of 07

01

The method in ten steps

Models land every week, each with a confident announcement. Your job is to turn the claim into a decision you can defend.

Three rules make the method repeatable. Start from primary sources: the publisher's own model card, release notes and technical report. Write down what you verified and when, because facts about models change. Trust your own tests over anyone's leaderboard, and keep those tests private.

Scroll sideways to see every column.

The method in ten steps · Table 1
StepQuestionEvidence to keep
1 Primary sourcesWhat does the publisher actually say?URLs, dates, saved copies
2 LicenceWhat may I do with the weights and outputs?Licence text, restrictions
3 ArchitectureDense or mixture of experts? Context length, modalities, tools?Model card, configuration file
4 HardwareWhat must it fit in?Memory sum, file sizes
5 Cost and latencyWhat will it cost, and how fast is it, for my workload?Price page, your timings
6 BenchmarksWhat do the published numbers really show?Notes on settings and gaps
7 Your own evaluationDoes it win on my tasks?Rubric, scores, blind results
8 Safety and policyHow does it behave when things go wrong?Test transcripts
9 JurisdictionWhere does my data go, under whose rules?Privacy policy, terms
10 Supply chainIs what I downloaded what the publisher released?Revision, checksums, format

Then write a decision record (chapter 7) so the next person can see what you knew, and when.

Next chapter

Learn in your browser · Chapter 02 of 07

02

Steps 1 to 3: primary sources, licence and architecture

Most launch-day mistakes come from secondhand facts. Go to the source, then read what it actually says.

Step 1: primary sources. Use the publisher's announcement page, the model card in its official repository, and the technical report. Follow the link from the publisher's own page to the repository rather than searching, because third-party copies and conversions are common. Save the URL, the date and a copy of the text.

Step 2: licence. Open-weight means the trained weights can be downloaded. Open source, as the Open Source Initiative's Open Source AI Definition 1.0 sets it out, asks for more: freedoms to use, study, modify and share, plus information about the training data, the code and the parameters. Open-weight is not the same as open source, and a permissive licence is a third thing again. Read the actual licence text. Look for what it covers (weights, code, outputs), use restrictions and attribution rules.

Step 3: architecture and capabilities. Read these from the card and the configuration file.

Scroll sideways to see every column.

Steps 1 to 3: primary sources, licence and architecture · Table 2
PropertyWhy it matters
Dense or mixture of expertsA dense model uses every parameter for every token. A mixture of experts uses a few expert blocks per token.
Total parametersSets the memory needed to hold the weights.
Active parametersSets the computation per token. Check whether the figure differs between reading the prompt and writing the reply.
Context lengthLong context needs a large KV cache. A stated maximum says nothing about quality at that length.
ModalitiesWhat goes in and what comes out: text, images, audio.
Tools and reasoning modesFunction calling, effort controls and the required prompt format.
Precision and file formatSets file size and which engines can load it.
Next chapter

Learn in your browser · Chapter 03 of 07

03

Steps 4 to 6: hardware, cost and benchmarks

Now turn the claims into numbers you can plan with.

Step 4: hardware. Apply the memory sum from the workbook on inference engines. The most direct number is the total size of the weight files on the repository, because it already reflects the published precision. Add the KV cache for the context you need, plus an allowance. A mixture-of-experts model must hold every expert in memory. Then check your engine supports the architecture: new designs often need engine updates, so read its release notes that day.

Step 5: cost and latency. For hosted use, read the pricing page for the exact model name. Look for separate rates for cached and uncached input, output rates, peak and off-peak pricing, how thinking tokens are billed and rate limits. For local use, count hardware, power and your time. Measure time to first token and streaming speed on your own prompts, at the hours you will use it.

Step 6: benchmarks. A benchmark table is a claim until you can see how it was made. Ask these questions of every number.

Scroll sideways to see every column.

Steps 4 to 6: hardware, cost and benchmarks · Table 3
QuestionWhy it matters
Who ran it?The publisher's own runs can favour the publisher. Independent runs are better.
With what settings?Reasoning effort, tools, number of attempts and the test harness can change results a great deal.
Compared against what?Look for missing rivals, older versions and mismatched settings. This is how cherry-picking hides.
Could it be contaminated?If test questions leaked into training data, scores overstate real ability.
Is it narrow or saturated?Scores near the ceiling stop separating models. Does the test resemble your work?

Treat published numbers as a reason to test, not as a result.

Next chapter

Learn in your browser · Chapter 04 of 07

04

Step 7: build your own evaluation set

This is the step that matters most, and the one people skip. About twenty real tasks and an hour of scoring will tell you more about your use than any leaderboard can.

Choose about twenty real tasks from your own work: easy, typical and hard. Include cases that failed before, tasks with a known right answer and tasks that need judgement. Keep the set private, so it is less likely to leak into anyone's training or tuning (a hosted model's provider still sees the prompts you send it), and give it a version number.

Write the rubric first, before you see any output.

text · 6 lines
Score each criterion 0 to 2
Correct   0 wrong, 1 partly right, 2 fully right
Complete  0 key parts missing, 1 minor gaps, 2 complete
Format    0 ignores the requested format, 1 minor slips, 2 exact
Safe      0 unsafe or leaks data, 1 borderline, 2 appropriate
Pass = Correct 2 and no zeros

Run it blind and side by side. Give the same prompts, at the same settings, to your current model and the candidate. Shuffle the outputs, label them A and B, and score without knowing which is which. Run each prompt more than once, because outputs vary. Record time and cost per task.

Scroll sideways to see every column.

Step 7: build your own evaluation set · Table 4
TaskTypeCheckScore AScore BNote
T01 (invented)Extract dates from a letterKnown answer21B missed one date
T02 (invented)Summarise a clauseRubric12A dropped a condition

Try it yourself · Activity 01

60 min

Build your twenty

Create a private evaluation set and use it to compare two models blind.

  1. Collect twenty tasks from your real work and save each prompt in a file.
  2. Write the rubric and the pass rule before you run anything.
  3. Run both models on every task, twice, at the same settings.
  4. Have the outputs shuffled and labelled A and B, by you or a colleague. Score them, then reveal which is which.
  5. Tally wins, ties and average cost and time.

Did the winner on your set match the winner on a public leaderboard? What does any difference tell you?

Next chapter

Learn in your browser · Chapter 05 of 07

05

Steps 8 to 10: safety, jurisdiction and supply chain

A model can win your tests and still be the wrong choice. These steps catch what accuracy scores do not.

Step 8: safety and policy behaviour. Behaviour depends on the model plus your system prompt, tools and filters, so test the whole stack. Try requests it should refuse, requests it should not, attempts to make it leak its instructions or private data and, if it uses tools, instructions planted in a document or page it reads (prompt injection). Read the publisher's usage policy.

Step 9: data residency and jurisdiction. For a hosted service, find out where prompts are processed and stored, who controls the data, how long it is kept, whether it may be used to improve the service, and which law applies. Read the privacy policy and the terms covering the API, which may differ from those covering the consumer app. Running open weights yourself keeps prompts with you, but security is then your job. Involve your data protection lead.

Step 10: supply chain. Weights are software you are about to run.

  1. Reach the repository from the publisher's own announcement.
  2. Prefer safetensors. Avoid pickle-based files unless you trust the source completely.
  3. Note the exact revision (commit) you downloaded, so a later change cannot surprise you.
  4. Verify each file's checksum against the hash the hub shows.
  5. Read any code the repository ships before enabling a flag that allows it to run, often called trust remote code.
  6. Treat third-party conversions and quantisations as separate downloads with their own publisher to check.
bash · 4 lines
# Compute a file's SHA-256, then compare it with the hash the hub shows.
# The file name is an example.
sha256sum model-00001-of-00046.safetensors
# Windows: certutil -hashfile model-00001-of-00046.safetensors SHA256

Try it yourself · Activity 02

20 min

Audit a download

Check the provenance of a model you might use, before you run it.

  1. Find the publisher's announcement and follow its link to the repository.
  2. List the file formats. Are there any pickle-based files?
  3. Note the revision, and compare one file's checksum with the hub.
  4. Search the repository's own instructions for a flag that runs repository code.

What would you check next if the model came from a third-party conversion instead?

Next chapter

Learn in your browser · Chapter 06 of 07

06

Worked example: the DeepSeek V4 family

This is an educational analysis of a public model family, not advice or an endorsement, and it says nothing about any Mickai product. Every fact below was verified on 25 September 2026 from official pages and model cards, listed under sources. Anything not confirmed is marked verify before relying on this.

Scroll sideways to see every column.

Worked example: the DeepSeek V4 family · Table 5
Date (2026)What the official pages say
24 AprilPreview of V4-Pro and V4-Flash. Open weights on the model hub. 1M context. Thinking and non-thinking modes. Two older API names to be retired after 24 July.
31 JulyV4-Flash-0731 is the official Flash release. The change log says same architecture and size as the preview, re-post-trained. Its card adds that it comes with a speculative-decoding module attached.
13 AugustV4-Pro-0813 is the official Pro release. Its card says it is built on the preview structure with a speculative-decoding module attached. Three reasoning effort levels: low, high, max.
21 AugustV4-Flash-Vision-Exp, an experimental multimodal model, arrives on the API.
10 SeptemberV4.1-Flash arrives: a new architecture family, multimodal. The announcement says the earlier Flash and vision models are retired.

Steps 2 and 3, from the model cards:

Scroll sideways to see every column.

Worked example: the DeepSeek V4 family · Table 6
ModelTotal parametersActive parametersContextLicence on card
V4-Pro (preview)1.6T49B1M tokensMIT
V4-Flash (preview)284B13B1M tokensMIT
V4-Flash-0731Same as preview (change log)Not restated: verifyNot stated: verifyMIT
V4-Pro-0813Not restated: verifyNot restated: verifyCard silent. Pricing page lists 1M for the API modelMIT
V4.1-Flash552B backbone. The card also lists a 196B memory component8B reading the prompt, 16B writing the replyUp to 1M tokensMIT
  • Licence (step 2). Each card says the repository and weights are licensed under the MIT Licence, which is permissive. That answers what you may do with the weights. Whether the release is open source under the Open Source AI Definition turns on published data information and code, which the licence alone does not settle. Verify before relying on this.
  • Total versus active (step 3). The preview Pro holds 1.6T parameters but uses 49B per token. Memory follows the first number, compute per token the second. The V4.1 card goes further: its active count differs between reading and writing, and it also lists a 196B-parameter memory component. The text I read does not say whether that sits inside the 552B figure. Verify before relying on this.
  • Hardware (step 4). The preview instruct cards give mixed precision: 4-bit for expert parameters, 8-bit for most others. The arithmetic below uses the file sizes the hub lists.
  • Serving (steps 3 and 4). The 0731 and 0813 cards give launch examples for two open-source serving engines, attach a speculative-decoding module, and ship their own prompt-encoding scripts instead of a standard chat template. Check your engine supports all of this. The examples also use a flag (trust remote code) that lets code shipped in the repository run, so apply step 10.
  • Reasoning control. The preview announcement describes thinking and non-thinking modes, while the preview card lists three modes: non-think, think high and think max. The 0731 and 0813 cards, and the change log from 13 August, give three effort levels: low, high and max. The V4.1 card documents an integer scale from 1 to 100.
  • Cost (step 5). The pricing page lists separate rates for cached and uncached input and for output, with off-peak at half the peak rate. I have copied no prices, because they change. It maps the API name deepseek-v4-pro to V4-Pro-0813 and deepseek-flash to V4.1-Flash.
  • Aliases and change (steps 1 and 5). The 10 September announcement said that from 14 September all deepseek-v4-pro requests would route to V4.1-Flash. The change log entry of the same date says Pro service continues after 14 September. Two official pages appear to conflict, and I could not tell which is later. Verify before relying on this.
  • Jurisdiction (step 9). The privacy policy on DeepSeek's site (last updated 10 February 2026) says the services are provided by a company registered in China and that personal data is stored in the People's Republic of China. Applications developers build on the platform are outside that policy. Read the API terms too: verify before relying on this. Running the open weights yourself is different: prompts stay on your hardware.
  • Benchmarks (step 6). The cards and announcements contain benchmark tables and strong claims. I have reproduced none. Read them with the questions from chapter 3, then run your own twenty tasks.
text · 11 lines
ILLUSTRATIVE CHECK, decimal units. Sizes are my sums of each repository's listed files.

V4-Pro: 1.6 trillion parameters x 0.5 byte (4-bit) = 0.8 TB
        1.6 trillion parameters x 1 byte   (8-bit) = 1.6 TB
        Instruct repository (mixed 4-bit and 8-bit): about 865 GB
        Base repository (8-bit mixed): about 1,606 GB
V4-Flash: 284 billion x 0.5 byte = 142 GB. Repository: about 160 GB.
V4.1-Flash repository: about 510 GB.

None of this includes the KV cache. The preview card suggests a context
window of at least 384K tokens for its deepest reasoning mode.

Every figure sits well beyond a typical single desktop graphics card, before any KV cache. The 8-bit base repository matches one byte per parameter, and the instruct repository sits between the 4-bit and 8-bit sums, as mixed precision predicts.

Try it yourself · Activity 03

20 min

Re-verify the snapshot

See for yourself that details change.

  1. Pick three facts from the tables above, such as a licence, a parameter count and an API name.
  2. Find each in the primary sources listed under sources.
  3. Note anything that has changed since 25 September 2026, and how you found out.

How would you make this re-check routine instead of a one-off?

Next chapter

Learn in your browser · Chapter 07 of 07

07

The decision record

A decision you cannot reconstruct is one you will have to make again. Write it down on one page.

text · 22 lines
DECISION RECORD
Model and exact revision:
Date evaluated, and by whom:
Purpose:
Decision: adopt / trial / reject / revisit on (date)

Evidence, each with source and date
1 Primary sources:
2 Licence and restrictions:
3 Architecture (dense or mixture of experts, total and active parameters,
  context, modalities):
4 Hardware needed:
5 Cost and latency:
6 Published benchmarks (settings, gaps):
7 Our evaluation (set version, scores, blind results):
8 Safety and policy findings:
9 Jurisdiction and data handling:
10 Supply chain (revision, checksums, format):

Unverified items (verify before relying on this):
Risks and mitigations:
Re-check trigger (new release, licence change, 90 days):

Two habits make it work. Mark unverified items plainly so nobody mistakes them for facts, and set a re-check trigger, because facts move.

Try it yourself · Activity 04

30 min

Write your own decision record

Complete a record for a model you are considering.

  1. Fill in each field using only what you verified, with sources and dates.
  2. List every claim you could not verify under unverified items.
  3. Set a re-check trigger, then ask a colleague to challenge one field.

Which field was hardest to fill honestly, and what would it take to fill it?

Assessment options

Keep learning

The complete workbook

New models arrive constantly, and the announcement is a claim, not evidence. This workbook gives you a repeatable ten-step checklist, from reading the model card to verifying downloaded weights, and a method for building your own small evaluation set. It ends with a worked example on the DeepSeek V4 family, using only facts checked against official pages and model cards.

  1. 01
    The method in ten steps

    Models land every week, each with a confident announcement. Your job is to turn the claim into a decision you can defend.

    Read here · Reading
  2. 02
    Steps 1 to 3: primary sources, licence and architecture

    Most launch-day mistakes come from secondhand facts. Go to the source, then read what it actually says.

    Read here · Reading
  3. 03
    Steps 4 to 6: hardware, cost and benchmarks

    Now turn the claims into numbers you can plan with.

    Read here · Reading
  4. 04
    Step 7: build your own evaluation set

    This is the step that matters most, and the one people skip. About twenty real tasks and an hour of scoring will tell you more about your use than any leaderboard can.

    Read here · 1 exercise
  5. 05
    Steps 8 to 10: safety, jurisdiction and supply chain

    A model can win your tests and still be the wrong choice. These steps catch what accuracy scores do not.

    Read here · 1 exercise
  6. 06
    Worked example: the DeepSeek V4 family

    This is an educational analysis of a public model family, not advice or an endorsement, and it says nothing about any Mickai product. Every fact below was verified on 25 September 2026 from official pages and model cards, listed under sources. Anything not confirmed is marked verify before relying on this.

    Read here · 1 exercise
  7. 07
    The decision record

    A decision you cannot reconstruct is one you will have to make again. Write it down on one page.

    Read here · 1 exercise

Also inside: a 10-point checklist, a glossary of 12 terms and 10 questions and answers to test yourself. 4 hands-on exercises, each with a worked answer at the back where the workbook gives one.

The PDF is free. We ask for your name and email before downloading. Read the privacy notice at the download form. Free to download and use for personal learning, study groups and inside your own team. Please do not resell the workbooks or republish them as your own. Link people to trust-agent.ai instead.

Get your free PDF workbook

Enter your name and email, then download the complete workbook. This form also works without JavaScript.

We privately record your name, email and request IP for this download. Read our privacy notice and retention policy.

Visit Mickai on LinkedIn

Newsletter confirmation does not affect your download. Following Mickai on LinkedIn is optional; this site does not verify followers.

Test yourself

Questions and answers

What is the first thing to do when a new model is released?

Read the publisher's own model card, release notes and technical report, reaching the repository by the link on the publisher's page. Save the URLs and dates. Everything else, including social posts and videos, is secondhand and can be wrong or out of date.

Is an open-weight model the same as open source?

No. Open-weight means the weights can be downloaded. Open source, as defined by the Open Source Initiative's AI definition, also needs information about training data and code, and freedoms to use, study, modify and share. Read the actual licence.

What are total and active parameters?

In a mixture-of-experts model, total parameters are everything stored, which sets memory needs. Active parameters are those used for each token, which sets computation per token. Check the card, because the active count can differ between reading a prompt and writing a reply.

Can I trust benchmark scores in a launch announcement?

Treat them as claims. Ask who ran them, with what settings, against which comparison models, and whether the test data could have leaked into training. Scores are a reason to test the model yourself, not a substitute for doing so.

What is benchmark contamination?

It happens when test questions or their answers appear in a model's training data, so the model has effectively seen the exam. Scores then overstate real ability. It is one reason to keep your own evaluation set private.

Why build my own evaluation set?

Public benchmarks measure general skills, not your work. A private set of about twenty real tasks, with a rubric and blind scoring, shows whether a model does your tasks better than the one you use now, and because it is private it is much harder for publishers to game.

How many tasks do I need?

About twenty is enough to see large differences and to catch obvious failures, and small enough to score in an hour. It will not resolve small gaps. Add tasks over time, especially cases where a model failed you, and version the set.

How do I run a blind comparison?

Give both models the same prompts at the same settings. Have the outputs shuffled and labelled A and B, ideally by someone else, then score them against your rubric without knowing which is which. Repeat runs to see how much outputs vary.

How do I check that downloaded weights are genuine?

Reach the repository from the publisher's announcement, prefer safetensors, note the exact revision, and compare each file's checksum with the hash the hub shows. Read any repository code before allowing it to run. Treat third-party conversions separately.

Why does jurisdiction matter for a hosted model?

Prompts sent to a hosted service are processed and stored under that provider's rules and the laws where it operates. Read its privacy policy and API terms, and involve your data protection lead. Running open weights yourself keeps prompts on your hardware.

Write as you go

My notes

Use this scratchpad for your own notes, working or answers as you read. Notes are saved in this browser on this device. Downloading makes a local copy; it does not send your notes to Mickai.

Consolidate your learning

Review your work

Work through the exercises and questions, then compare your reasoning with the worked answers. A scored exam and verifiable certificate are not yet available for this course.

Review the questions

Learn the language

Key terms

Open-weight
A model whose trained weights can be downloaded, under whatever licence the publisher chooses.
Open source (AI)
Under the Open Source AI Definition, freedoms to use, study, modify and share, with information about data, code and parameters. Stricter than open-weight.
Mixture of experts
A design that stores many expert blocks and uses only a few for each token.
Total parameters
All the parameters a model stores. They set the memory needed to hold it.
Active parameters
The parameters used for each token. They set the computation per token.
Context length
The most text a model can take into account at once, measured in tokens.

6 of the workbook's 12 terms. The complete glossary is in the workbook.

Follow the evidence

Sources and checks

Facts last checked: .

These workbooks use AI assistance. See how the workbooks are made.

  1. DeepSeek V4 Preview Release (2026/04/24)DeepSeek API Docs
  2. DeepSeek-V4-Pro GA Release (2026/08/13)DeepSeek API Docs
  3. DeepSeek-V4-Flash-Vision-Exp Release (2026/08/21)DeepSeek API Docs
  4. DeepSeek-V4.1-Flash: Smarter, Faster, More Efficient (2026/09/10)DeepSeek API Docs
  5. Change LogDeepSeek API Docs
  6. Models and PricingDeepSeek API Docs
  7. DeepSeek Privacy Policy (last update 10 February 2026)DeepSeek
  8. Model card: DeepSeek-V4-ProDeepSeek on Hugging Face
  9. Model card: DeepSeek-V4-FlashDeepSeek on Hugging Face
  10. Model card: DeepSeek-V4-Flash-0731DeepSeek on Hugging Face
  11. Model card: DeepSeek-V4-Pro-0813DeepSeek on Hugging Face
  12. Model card: DeepSeek-V4.1-FlashDeepSeek on Hugging Face
  13. Files listing: DeepSeek-V4-Pro (used for size sums)DeepSeek on Hugging Face
  14. Files listing: DeepSeek-V4-Pro-Base (used for size sums)DeepSeek on Hugging Face
  15. Files listing: DeepSeek-V4-Flash (used for size sums)DeepSeek on Hugging Face
  16. Files listing: DeepSeek-V4.1-Flash (used for size sums)DeepSeek on Hugging Face
  17. The Open Source AI Definition 1.0Open Source Initiative
  18. Pickle scanning and securityHugging Face Hub documentation

Created by Mickarle Wagstaff-Irons - Micky Irons with the Mickai team. Published by Mickai LTD. Last updated 25 September 2026.

NextKeep going

Where to go next