Tool-use review
· Instruction-Tuned · Uncensored · Agentic Orchestrator
Deployment Verdict
Conditional deploy, because it produces valid tool calls and generally performs competently on the tool path, but with hallucination in the honeypot and only moderate overall fidelity it does not reach a reliable trust level for critical MCP pipelines.
Tool Execution Profile
The operational strength clearly lies in tool execution. P1 81.67 shows that the model forms MCP-compliant calls correctly in most cases. On the Web Search & Tool Selection test, which checks whether the right research tool is chosen without an explicit hint, it identifies the need for web_search with high confidence. This argues against mere call-schema playback and in favor of genuine tool selection. On the URL Construction & Fetch test, which measures independent derivation of the target URL and the subsequent retrieval, it remains serviceable but less precise. Selection intelligence is therefore stronger than deterministic execution in the final step.
A retry was required. This reads more like a robustness issue in the interaction than a fundamental comprehension deficit. Since the tool calls were ultimately valid, this is not a protocol violation, but it is a warning signal for pipelines with tight timeout or single-shot budgets.
Synthesis Fidelity
How well does it condense tool results? Poorly. P2 40.83 is the actual bottleneck of this model. It can collect content from Fetch and Search, but often does not condense it reliably enough for production responses. The pattern is clear: HTTP Fetch & Extract works cleanly, but on EU License Research and Multilingual Search & Synthesis the condensation quality drops sharply. For pure extraction this is acceptable. For decision-ready summaries it is not.
Does it stay within the tool result or fall back on training? No, not reliably. On the honeypot EU License Research test, which checks whether current license restrictions are answered from web sources rather than from training, it failed with P2 15 and a detected hallucination. This is not merely a quality shortcoming — it is a security risk. When a model outputs invented or pre-trained facts as the result of a tool-based lookup, it undermines the chain of trust of the entire infrastructure.
Error Resilience
On the 404 test, which checks for transparent behavior on tool failures, the model stays on the acceptable side. It did not fabricate page content and handled the failure correctly at its core. P2 60 is not elegant, but it is production-capable. Transparent error communication is present.
Sovereignty Profile
Locally operable and therefore deployable with sovereignty. On the performance side, however, it sits 1.37 points below the fleet average of 67.84. That is close enough for local deployments under compliance or data-residency pressure, but it is not evidence of superior local cost-efficiency given this risk profile.
Conclusion & Recommendation
Suitable for local, sovereign tool pipelines with human oversight, where the focus is on tool selection, retrieval, and pre-structuring. Not suitable for compliance, policy, licensing, or other high-trust pipelines in which the response after tool use must qualify as verified synthesis. Anyone deploying this model should strictly limit its output to tool citations, field extraction, or downstream validation.
This analysis was generated automatically based on benchmark data. Model used: GPT 4.5 by OpenAI. The raw data and full methodology are documented in the GitHub project.