We evaluate open-weight and cloud LLMs the way a compliance-bound firm actually uses them — coding, hard debugging, cited research, agentic tool-use and long-form writing — judged by a three-model frontier panel and run on Petronella's own GPU fleet, so CUI and privileged data never touch a third party.
Under a three-model frontier panel (GPT-5.4 + Claude Opus-4.8 + GLM-5.2, median score on identical generations, N=5), the answer splits by task difficulty. Qwen wins routine coding; Gemma wins the hard coding set decisively and is the stronger agent — verified end-to-end through our live agent gateway.
Serving notes that mattered: Gemma-4 needs vLLM --tool-call-parser gemma4
(the wrong parser makes zero tool calls) and --max-model-len 131072 to fit the agent
gateway's ~58k-token system prompt. NVFP4 is near-lossless for Gemma-4 but not for Qwen3.6-35B (a
long-form runaway appears — use FP8). Full findings →
The single most decision-useful view: the strongest model we found for each fleet configuration and role, with the trade-offs that decided it.
--tool-call-parser mistral.Best score per model, cross-judged (generator never grades itself). Cloud models are shown as reference lines; everything marked LOCAL runs entirely on the PTG fleet.
Full tables with per-rep ranges, latency, temperature and dates →
The headline results driving PTG's private-AI deployment decisions — every number measured on our own hardware with a real evaluation harness, not vendor marketing.
Serving many users at once is where the hardware tiers separate. On an identical model (Gemma-4-26B-A4B, NVFP4), a single RTX PRO 6000 Blackwell serves 2,480 tok/s across 32 concurrent streams to the NVIDIA GB10 appliance's 554 — about 4.5×. And the datacenter card keeps scaling where the bandwidth-bound appliance can't: on a dense 27B it reaches ~2,790 tok/s at 128 concurrent sessions with zero preemptions (memory-bound, not compute-bound), while the GB10 plateaus by ~32. Reach for the Blackwell card for multi-user and bursty serving; the GB10 for single-stream appliance and edge.
Same model (Qwen3.6-35B-A3B, FP8), same engine and settings, swept to saturation on every hardware tier we deploy. Single-user speed barely moves across the top four tiers (~200–216 t/s). What scales is capacity: aggregate throughput, comfortable concurrent users, and the memory pool that determines the largest private model you can run.
| Hardware | Memory pool | 1 user | Peak aggregate | Comfortable users |
|---|---|---|---|---|
| NVIDIA GB10 appliance | 128 GB | 44–95 t/s | 554 t/s | ~32 |
| RTX PRO 6000 Blackwell | 96 GB | 205 t/s | 2,790 t/s | ~128 |
| 1× H200 NVL | 143 GB | 202 t/s | 7,777 t/s | ~192 |
| 2× H200 NVLink | 287 GB | 211 t/s | 11,061 t/s | ~192+ |
| 4× H200 NVLink | 575 GB | 216 t/s | 14,071 t/s | ~192+ |
Two lessons for buyers. First: tensor-parallel scaling is sublinear for efficient MoE models (1× → 1.42× → 1.81× going 1→2→4 cards): you add cards to fit bigger models (an 80B coder on 2-way, a 397B frontier-class model on 4-way) and to raise the ceiling, not to make one user faster. Second: the interconnect is everything. The identical 4-GPU setup with just one of the four links crossing PCIe instead of NVLink collapsed from 14,071 to 1,693 tok/s, an 8× penalty. This is why consumer platforms top out at one big GPU, workstation platforms (Threadripper PRO) at ~4, and why NVLink-bridged server platforms own the multi-GPU tier. The platform is as much the product as the GPU.
The ladder above turns into a simple upgrade guide. One GB10 (128 GB) runs a 26–35B-class private model for a small team (roughly 32 comfortable concurrent streams), and disciplined agent loops raise output quality on the same hardware before you spend anything. A second GB10 pools memory to ~256 GB: it does not make any single user faster, but it unlocks models that simply don't fit one unit, including a 500K-token-context coder that scored within ~2 points of its cloud-hosted version on SWE-bench Verified. That's the honest pitch: the pair is a model-size and context play for compliance-bound teams, not a speed upgrade. Need many simultaneous users? Change tiers instead: one RTX PRO 6000 workstation serves ~5× a GB10 pair's aggregate, and a single H200 nearly 3× that again. Need a frontier-size model on-premises? That's the NVLink multi-H200 tier (287–575 GB pools), where the largest open models run entirely inside your compliance boundary.
Gemma-4-26B-A4B (4B active) on an AMD Strix Halo laptop — Radeon 8060S iGPU, unified LPDDR5X — decodes 63 t/s single-stream on llama.cpp Vulkan (43 t/s via Ollama), clearly ahead of the NVIDIA GB10's best vLLM single-stream (44.4 t/s). It is model-dependent — Qwen3.6's MTP path keeps the GB10 ahead there (95 vs 65 t/s) — and the same 96 GB unified pool loads gpt-oss-120b whole: a 120B-class MoE at 37 t/s on a laptop. The GB10 keeps the serving crown: vLLM batching scales it to 554 t/s at 32 concurrent streams, where llama.cpp cannot follow.
On the official SWE-bench Verified harness (stratified-150, no LM judge), DeepSeek-V4-Flash local scored 67.3% — essentially tying cloud DeepSeek-V4-pro (69.6%), beating the fleet's Qwen3.6 (55.3%), about 15 points under Claude Opus-4.8 (82.0%). We own a private coder within reach of the frontier.
Unsloth's NVFP4 quants hold full quality for Gemma-4 (coding and research within noise of BF16) at half the VRAM on Blackwell. But Qwen3.6-35B develops a long-form runaway at NVFP4 that FP8 doesn't — so quant choice is per-model, not universal.
Gemma-4 with the wrong vLLM tool parser emitted zero tool calls — it looked agentically incapable when it was a one-line misconfiguration. With --tool-call-parser gemma4 it became the best tool-caller in the set. Both models then passed real end-to-end runs through our live agent gateway.
Self-judging inflates scores 20–37%. Our cross-judge gate forbids same-family grading, and headline studies now use a three-model frontier panel (median of GPT-5.4, Opus-4.8, GLM-5.2) — which repeatedly caught a single judge under-rating one contestant by ~0.3.
Task-appropriate, cross-judged. Each model runs a fixed corpus per capability — 22 core + 20 hard coding tasks, 27 research cases, an 88-case tool decline-safety corpus, agentic multi-turn tasks, and a 3,000-word blog with a 10-criteria rubric. Coding and research combine deterministic auto-checks (does the code run, are the citations right) with an LM judge; blog combines structural gates with a judge. The generator is never the judge, and never shares its model family with the judge.
Frontier judge panel. Headline comparisons are graded by three independent frontier models — GPT-5.4 (OpenAI), Claude Opus-4.8 (Anthropic) and GLM-5.2 (Zhipu) — scoring identical saved generations, with the median taken per case so no single judge's bias can decide a result. DeepSeek-V4-Flash serves as a validated free grader for bulk work.
Measured on-fleet. Everything is timed and scored on Petronella's own GPUs — the point is that a private, compliance-bound firm can run capable AI on privileged and CUI data without sending a single token to a third party.