Inkling 2 Small vs Qwen3.5-9B

Inkling 2 Small 40

Memory 0 of 30, the smallest build is Thinking Machines' NVFP4 checkpoint at 393.5 GB, about 472 GB with a fifth added, above the 256 GB line. Runtimes 0, no released version of the six runs it; vLLM and SGLang serve it from their own images and Transformers has it on its main branch only. Builds 15, two precisions from the publisher (NVFP4 and MXFP8). Terms 10, Apache 2.0 with a binding acceptable use policy on top, read as a custom licence. Download 10, no gate. Hosted 5, Thinking Machines' own Tinker serves it as beta serverless inference, and Together is live on Hugging Face. 0 + 0 + 15 + 10 + 10 + 5 = 40.

Qwen3.5-9B 85

Memory 30, Qwen publishes no quantised 9B, so the smallest 4-bit build from a runtime's own library is Ollama's qwen3.5:9b at 6.6 GB, about 7.9 GB with the fifth added, well under 16 GB. Runtimes 25, the cap, with vLLM listed in its stable docs, Transformers at released tags, llama.cpp, Ollama's library, LM Studio's own catalogue and SGLang all running the architecture. Builds 0, Qwen's FP8 and GPTQ repositories cover only the 27B and larger Qwen3.5 models, so every quantisation of the 9B is someone else's. Terms 15, plain Apache 2.0. Download 10, the repository isn't gated. Hosted 5, Together, Featherless AI, OVHcloud and DeepInfra are live for it on its Hugging Face page. 30 + 25 + 0 + 15 + 10 + 5 = 85.

Inkling 2 Small 67

Model card 17 of 20, everything but a dated knowledge cut-off. Training data 15, an EU training-content summary with sources, mix, an October 2026 collection cut-off and filtering. Last change 20, the files were uploaded on 12 November 2026. Responsiveness 0, the repository has no questions yet, which reads as none answered. Version policy 5, a first release. File health 10, the files agree and no broken-file report waits. 17 + 15 + 20 + 0 + 5 + 10 = 67.

Qwen3.5-9B 34

Model card 14, it covers intended use, architecture, parameters, context and 201 languages but gives no limitations and no knowledge cut-off. Training data 5, a general line about trillions of multimodal tokens with no cut-off. Last change 5, the files and card last changed on 2 March 2026 (c202236), 247 days before 4 November, within a year. Responsiveness 0, no Qwen member replied in any of the 40 most recent of the 45 discussions that aren't pull requests (2 March to 29 September 2026). Version policy 5, a first release that was never replaced in place, with no dated notes across generations. File health 5, two reports about the files and card (15 and 51) are still open with no reply. 14 + 5 + 5 + 0 + 5 + 5 = 34. The card's highlights mention sparse Mixture-of-Experts for the series while this 9B is dense, but its own overview matches config.json, so it's not counted as a contradiction.

Inkling 2 Small 85

Chat template 20, a Jinja file in the repository. Tool-calling format 25, Thinking Machines' tml-renderers guide shows how tools are declared and how calls come back for this model, and its package ships the parser. Trained tool calling 20, several calls in one turn. Structured output 0, not documented. Reasoning control 10, thinking effort is set per request from none to xhigh, and the reasoning comes back in reasoning_content. Context 10, up to 1M tokens. 20 + 25 + 20 + 0 + 10 + 10 = 85.

Qwen3.5-9B 70

Chat template 20, a Jinja file in the repository. Tool-calling format 10, the card names the qwen3_coder parser for vLLM and SGLang but leaves the declaration and return format to the template, and Qwen's own function-calling guide still describes Qwen3's Hermes format. Trained tool calling 20, the template renders several calls in one turn. Structured output 0, nothing documents asking the weights for JSON. Reasoning control 10, thinking turns off per request with enable_thinking false and the reasoning comes back in think tags that the qwen3 parser splits out. Context 10, 262,144 tokens native.

Inkling 2 Small 65

File safety 25, safetensors only and no repository code to run. Provenance 15, the files are in the organisation Thinking Machines links to, with a SHA-256 on every LFS file. Safety evaluation 10, Thinking Machines' own StrongREJECT, FORTRESS, HoneyBench and DistressBench results and described outside red-teaming, but nothing an outside party published or a harness to rerun. Agent guidance 5, the card names safeguards to add but doesn't say what its refusals cover, with nothing on prompt injection. Licence risk 5, 10 off for a use policy that reaches beyond the law and that can change at any time. Security programme 5, a security.txt and a disclosure policy, with public advisories unchecked and scored as absent. 25 + 15 + 10 + 5 + 5 + 5 = 65.

Qwen3.5-9B 55

File safety 25, safetensors only and nothing from the repository runs on load or to build prompts. Provenance 15, the Qwen organisation linked from Alibaba's QwenLM README, with a SHA-256 for every shard. Safety evaluation 0, none on the card, and the Qwen3.5 blog couldn't be read, so this is couldn't check scored as absent. Agent guidance 0, the card has no prompt-injection guidance, refusal scope or cautions. Licence risk 15, Apache 2.0 with nothing added and a working licence link. Security programme 0, no SECURITY.md in Qwen's GitHub repositories, no security.txt on qwen.ai or alibabacloud.com, and whether Alibaba's group security centre takes reports about Qwen models couldn't be checked.