Open-weight means the parameters are published. It does not mean open-source. Many widely used models carry bespoke licences that restrict use by company size, by use case, or by what you may do with the outputs — so the licence is the first question, not the last.
Read the licence before the benchmark
Open-source has a settled meaning: freedom to use, modify and redistribute for any purpose, including purposes the author dislikes. A published weights file under a custom licence is something else, whatever the announcement called it.
Conditions that appear in practice include thresholds above which separate terms apply, prohibitions on specific use categories, requirements to name the base model, and restrictions on using outputs to train a competing model. None of these make a model unusable. All of them decide whether the evaluation you are about to run was worth the time.
Licence review belongs at the start of a model selection, alongside cost. Doing it after the architecture depends on a particular model is how a project discovers a constraint it cannot design around.
What self-hosting actually buys
| Reason | Is it real? |
|---|---|
| Data cannot leave a boundary | Yes — where no hosted provider offers a deployment inside it. |
| The version must not change under us | Yes. Pinned weights behave the same next quarter as this one. |
| Cost becomes capacity, not per-token | Yes at sustained high utilisation. Rarely below it. |
| It will be cheaper | Usually not. See below. |
| We want control | Too vague to plan against. Name which of the first three you mean. |
The cost comparison that gets skipped
Hardware versus per-token pricing is the easy half. The half that decides it:
- GPU capacity bills whether it is busy or idle. Utilisation is the whole argument.
- Batching, queueing and capacity planning are engineering you now own.
- Upgrades, monitoring and on-call are permanent, not one-off.
- A hosted provider's next model is an API change. Yours is a project.
None of this argues against self-hosting. It argues against choosing it on a spreadsheet that only compares the hardware.
Residency, checked properly
Data residency is the strongest genuine driver, and the one most often satisfied without self-hosting. Before building, establish whether a regional deployment or an in-tenant offering from a hosted provider meets the requirement as written.
Frequently it does, and the residency constraint turns out to have been a proxy for a procurement question and not a technical one.
The failure mode nobody plans for
Self-hosting removes the risk that a provider changes the model underneath you. It introduces the risk that nobody changes it at all — and two years later the deployment is running weights that are several generations behind, because upgrading is a project and no one owns it.
Give the model an owner and a review date, the same as any other pinned dependency. A quiet risk is still a risk; it just fails later and with less warning.