The one-screen version: In seven days, open weights caught up to the frontier and the plumbing around them went open and cheap at the same time. On October 17 DeepSeek released V4.1-Flash-1017 — open weights on Hugging Face — and in the same breath launched Search and Fetch APIs at $0.75 per 1,000 successful calls, with misses billed at zero. The day before, the US lab Reflection shipped the weights for Beam, a 501B-parameter mixture-of-experts model (~23B active per token) under an Apache 2.0 license. Bracketing those, Perplexity open-sourced SPACE, the Firecracker sandbox that runs its agent's code, and StepFun open-sourced Step 5 Preview, a 600B agent model. Everyone reported the models. The part that reaches a founder is the infrastructure.
1. The models: frontier-class, and a download#
Start with the weights, because the capability gap is what people have been waiting on. DeepSeek's V4.1-Flash-1017 is a small, efficient update aimed squarely at coding and agent loops; DeepSeek reports 77.0 on DeepSWE — a number worth repeating only with the asterisk that it is the lab's own, with no independent reproduction at release. Reflection's Beam is the more interesting structural story: 501B total parameters but only ~23B live on any token, which is the whole efficiency pitch — near-frontier output without a dense model's compute bill — shipped in BF16, FP8, and NVFP4 with day-0 vLLM and SGLang support and an Apache 2.0 license the lab states itself. StepFun's Step 5 Preview rounds it out at 600B / 27B active with a million-token context built for day-long agent runs.
Three 500B-plus open-weight models in one week is not a trend. It's a phase change: frontier-class capability is now something you download, not something you rent by the token.
Two caveats before you plan around any of this. Licenses are doing real work here and the reporting is inconsistent — DeepSeek's 1017 weights are described as MIT by some outlets and "not disclosed" by one, and Beam's Apache 2.0 and StepFun's custom "Community License" are vendor-stated until you read the card. And "open" does not mean "runs on your laptop": these are data-center models. The realistic path for a small team is a hosted endpoint — Baseten, Together, Fireworks light these up within a day — or DeepSeek's own cheap API. If you want weights that fit a single GPU, that's a different list, and we keep the open-weight models people actually run locally and the September open-source leaderboard current for exactly that question.
2. The infrastructure went open in the same week#
Here's the part the model headlines buried. An agent is not just a model — it's a model plus the scaffolding that lets it do things: search the web, execute code, call tools. That scaffolding has been the quiet subscription line on every AI product's P&L. Two of this week's releases attack it directly.
DeepSeek's Search and Fetch APIs put live web retrieval behind a meter at $0.75 per 1,000 successful requests — empty results and failures free — which is roughly an order of magnitude under what dedicated search-API vendors charge, and free entirely through Harness, Claude Code, and Codex until November 1. Perplexity's SPACE hands you the other half: an Apache 2.0, Rust-based Firecracker sandbox that isolates untrusted, model-generated code in a microVM in ~60ms, running at millions of sandboxes a day in Perplexity's own production. That is the exact problem — how to run untrusted agent code safely — that small teams have been paying a sandbox vendor to solve.
3. The moat moved, and it moved toward you#
Put the two halves together and the strategic picture is clean. A week ago, a defensible AI product could lean on access — to a frontier model, to a search provider, to a code-execution vendor — because assembling that stack took money and relationships. This week, the model is a download, the search is $0.75/1k, and the sandbox is on GitHub. The components commoditized in parallel.
That is good news and a warning in the same sentence. Good, because the cost floor to ship a capable agent just dropped hard, and the introductory-price era of closed APIs now has a credible open alternative to be measured against — the same convergence we flagged when three frontier models landed on one price. A warning, because if your differentiation was the stack, it isn't anymore. When anyone can assemble the same parts, the value is in what you wrap around them: distribution, a specific workflow, proprietary data, trust. The regulation story we covered yesterday is the other edge of this — cheaper to build means more people building, which means the consumer-protection surface widens for everyone.
What to do this week#
- Re-price your search and sandbox lines. If you pay a web-search API or a code-execution vendor, put DeepSeek's $0.75/1k and Perplexity's SPACE next to that invoice. Even if you don't switch, you now have a number to negotiate against.
- Pilot one open endpoint, don't migrate. Stand up Beam or V4.1-Flash on a hosted endpoint for one real task and compare cost and quality against your incumbent. Portability is the point; you don't have to own GPUs to capture it.
- Read the license before the benchmark. The benchmark will be re-run by someone independent within a month. The license is what governs whether you can ship — and this week's licenses are inconsistent and partly vendor-stated. Open the model card.
- Ask what your moat is now. If the honest answer is "we have access to good models," this is the week that stopped being an answer. Write down what's left.
Caveats: model sizes, benchmark scores (DeepSWE 77.0), and licenses here are drawn from release-week reporting and vendors' own statements, not from model cards or independent evaluations read in full; several conflict across sources (DeepSeek's weight count and license; Beam's and StepFun's license terms) and are flagged as such. Perplexity SPACE (Oct 15) and StepFun Step 5 (Oct 14–15) landed just before this edition's window and are dated honestly as context for the week, not as Oct 17–18 scoops. We'll revise against primary cards and independent benchmarks as they post.
