Devstral Small 2 vs Gemma 4 26B A4B IT

Devstral Small 2 65

Chat template 20, chat_template.jinja in the repository (11,362 characters), with the tokenizer's tekken file for mistral-common. Tool-calling format 25, the card documents tools in the OpenAI function format with an example, names the mistral tool-call parser with auto tool choice for vLLM, shows the same for SGLang, and ships test prompts with the expected tool-call output. Trained tool calling 10, the card says the model excels at using tools, and its tests cover one tool call and calls made one at a time in sequence. Structured output 0, Nothing on the card about JSON or schema-constrained answers for this model. Reasoning control 0, no reasoning mode is documented, and a June 2026 commit removed stray thinking tokens from the files. Context 10, 256K tokens per the card, served at 262,144 in its vLLM command. 20 + 25 + 10 + 0 + 0 + 10 = 65.

Gemma 4 26B A4B IT 85

Chat template 20, a Jinja file in the repository. Tool-calling format 25, Google documents how tools are declared and how calls come back, ships a response schema for Transformers' parser, and names the gemma4 parser in vLLM and SGLang. Trained tool calling 20, several calls in one turn. Structured output 0, nothing documents how to ask the weights for JSON or a schema. Reasoning control 10, thinking is off by default, turned on per request, and returned in a thought channel. Context 10, 262,144 tokens native.

Devstral Small 2 46

Model card 11, Intended use, the architecture, the parameters and the context are on the card. Training data 0, Nothing on the card about the training data. Last change 10, the last commit, on 15 July 2026, updated the files to match mistral-common, 118 days before this check and within 180. Responsiveness 10, Of the 23 most recent discussions that aren't pull requests (9 December 2025 to 6 November 2026), 11 have a reply from a mistralai member, which is some. Version policy 5, Devstral Small 1.1 stays in its own repository, which this card links as the predecessor, with no dated note on the older card that we read. File health 10, Config, template, tokenizer and card agree, and the June and July commits fixed stray tokens and brought the files in line with mistral-common. 11 + 0 + 10 + 10 + 5 + 10 = 46.

Gemma 4 26B A4B IT 65

Model card 20, all seven items are there. Training data 10, a general description by type with a January 2025 cut-off and the filtering, but no sources, mix or sizes. Last change 10, the files last changed on 20 July 2026, 104 days before 1 November, still inside 180 days. Responsiveness 10, Google replied to 16 of the 35 questions and reports, and to 1 of the 9 since 23 July, with its newest reply on 1 October. Version policy 10, earlier Gemma generations keep their own repositories and gemma.ai has a dated releases page. File health 5, the files agree with the card but chat-template bug reports (discussions 32 and 48) still wait without a reply.

Devstral Small 2 60

File safety 25, safetensors only, no .bin, .pt or .pth files and no Python in the repository. Provenance 15, files in Mistral's verified mistralai organisation, which Mistral's site links to per our Mistral Large 4 listing (10). Safety evaluation 0, no safety results on the card. Agent guidance 0, the card has no limitations or safety section, and nothing on prompt injection, instruction priority or what the model refuses. Licence risk 15, Apache 2.0 has no use policy, threshold or change clause. Security programme 5, mistral.ai's security.txt gives a security contact and a submission policy, as read for the Mistral Large 4 listing (5). 25 + 15 + 0 + 0 + 15 + 5 = 60.

Gemma 4 26B A4B IT 70

File safety 25, safetensors and GGUF only, with nothing from the repository run on load. Provenance 15, the files sit in Google's own organisation and every file has a checksum. Safety evaluation 0, the card says testing showed minimal policy violations but gives no figures. Agent guidance 10, the card names the harm categories its safety training covers and asks for content-safety safeguards, and the tool guide says to validate calls, with no prompt-injection guidance. Licence risk 15, Apache 2.0 with no added policy, no threshold and a working link. Security programme 5, Google's security.txt and reward policy give a route to report a flaw, but no public Gemma advisories were found and GitHub's advisory tab couldn't be checked.