How to run Kaer-R1: a practical setup guide

Getting Kaer-R1 serving on your own hardware — requirements, the halting head, the three configuration decisions that matter, and the mistakes we see people make in the first week.

Monk at a scriptorium desk working on a modern laptop

This is the practical companion to R-09. It assumes you have staged access to the weights and want the model doing useful work by the end of the day.

1. What you are actually deploying

Kaer-R1 is two things served together: a 7B dense reasoner, and a small classifier — the halting head — that reads the model's hidden state at nine checkpoints through a reasoning trace and predicts whether continuing will change the final answer. Inference stops when that probability drops below a threshold you set.

If you deploy only the base model and ignore the head, you have a mediocre 7B reasoner. The head is the product.

2. The three decisions that matter

DecisionWhat it controlsSensible starting point
Halting thresholdWhen the model stops thinkingStart at the released default, then tune on your traffic
Abstention cut-offWhat escalates to a human or larger modelBottom decile of halting score
Maximum budgetWorst-case latency per request4,096 thinking tokens

The first two are separate numbers that both come from the halting score, and conflating them is the most common setup mistake we see. Stopping early is a cost decision. Escalating is a risk decision. They should not share a threshold because they do not share a consequence.

3. Wire up the fallback path first

Before you tune anything, build the escalation route: a human queue, a larger model, or both. A deployment with no fallback cannot use the abstention signal, which means it cannot use the main reason to choose this model.

Then treat fallback usage as a health metric to watch, not a cost to minimise. A pilot in which nobody ever escalates to a person would not reassure us; it would worry us.

4. Instrument these four things from day one

5. Mistakes we see in the first week

  1. Quantising and not re-measuring. Our own 8-bit build scored within noise on capability and measurably worse on hedging and refusal manner. The cheap version of the model is a different model. Re-run your evaluation on the build you actually serve.
  2. Testing with tidy questions. Benchmark-shaped inputs are not what your users send. Test with real, badly-worded, compound, underspecified traffic or you have measured nothing relevant.
  3. Setting the threshold once. Traffic mix moves. Re-tune quarterly, and re-tune after any change to your prompt, your retrieval layer or your model build.
  4. Treating abstention as failure. An abstention that routes correctly is the system working. The metric to minimise is confident wrong answers, not declines.
  5. Serving it to the public. It has no safety hardening beyond the base model. Behind an evaluation harness on bounded tasks, yes. In front of strangers, no.

6. Before you go live

Run a behavioural read on your own traffic and look at the harmed cases specifically — answers confidently wrong in ways that could cost someone money or a missed deadline. Across models with near-identical headline accuracy we have measured harmed-rates spread from 4% to 19%. Your number is not our number, and it is the one that matters.

Questions, or a request for the evaluation harness: [email protected].

← All posts Choosing a halting threshold →

Common
questions

What are the minimum hardware requirements?

A single GPU with 16GB or more for the bf16 checkpoint. The 8-bit build fits smaller cards but behaves differently — see the quantisation warning. CPU-only inference works and is too slow for interactive use.

Do I need the halting head, or can I run fixed budgets?

You can run fixed budgets and the model works. You will lose the main thing it was built for, and in our own measurements a fixed 4,096-token budget scored lower than adaptive halting while using five times the tokens. Fixed budgets make sense when you have a hard latency ceiling and nothing else.

How do I evaluate it on my own data before committing?

Run the £40 behavioural read: 400 stratified scenarios from your own traffic, pinned local judges, batch pricing. It gives Kendall τ = 0.83 rank agreement with our full protocol at roughly 1% of the cost. Score the harmed cases, not just the helped ones.

Can I fine-tune it?

Yes, and re-measure afterwards. Fine-tuning on benign data is documented to erode safety behaviour, and it silently re-runs the safety trade-off. Treat every fine-tune as a new model with a new evaluation card, not as an improvement to an existing one.