Intelligence doesn’t always need to get bigger. It can become specialized.

For much of the industry’s development, capability improvements have been associated with larger models, more training compute, and increasingly expensive infrastructure. Those methods remain important.

But our results show that a 12B foundation, equipped with task-specific expertise, can achieve performance comparable to much larger general-purpose systems on selected workloads.

This doesn’t mean small models have caught up on every dimension of intelligence. It means model size alone cannot tell us which system will be most useful for a particular task.

Today, building a more capable AI system often means improving or replacing its foundation model. Specialization offers a different possibility.

A shared foundation can support a growing civilization of experts, each developed to improve a particular capability. This suggests a path toward systems that acquire a broader collection of useful skills without requiring an entirely new foundation model for every additional task.

Our research demonstrates substantial improvement across selected specialized tasks. It does not yet establish how this architecture performs with hundreds or thousands of experts. That is one of the central questions we intend to investigate.

The cost of intelligence isn’t determined solely by how much intelligence a model contains. It also depends on how much computation is required to solve the task.

A compact foundation with task-specific experts could make some repeatable workflows more economical than sending every request to a large general-purpose model. The potential is especially important for high-volume enterprise tasks, where small differences in cost per successful operation compound across millions of requests.

But lower total operating cost has not been established by this benchmark. We still need matched measurements of hardware utilization, memory usage, throughput, latency, training costs, and successful task completion.

The opportunity is significant. The economic evidence remains to be completed.

If compact systems can deliver the capabilities organizations need, more useful AI work could run on infrastructure those organizations control. Instead of depending exclusively on externally hosted general-purpose models, businesses, institutions, researchers, and eventually individuals could deploy specialized capabilities close to their data, their applications, and their work.

This has implications for autonomy, resilience, accessibility, and control. But local execution by itself does not guarantee privacy or security. Those properties also depend on identity, permissions, tool access, network behavior, and where information is disclosed.

This particular CivoE evaluation was conducted through a server-based inference environment using dequantized Q4 weights. It did not independently establish production performance on consumer devices.

Prompt injection is one of the most persistent problems in AI security. Untrusted text, hidden in a document, an email or a web page, tricks a model into ignoring its original instructions or its safety guardrails.

A single general-purpose model reads that text and decides what to do in the same step, so one successful trick can redirect everything it does.

A Civilization of Experts divides the work. In our tests, one expert reads the untrusted material, a Critic expert checks the work, and the model that writes the final answer never sees the raw text. To change the outcome, an attacker has to get past several experts, not one.

On three public prompt-injection benchmarks, Meridian Air on its own followed injected instructions in up to 56% of attacks. Meridian Air CivoE followed none. On agent attacks, that matches the most resistant frontier results published. On instructions hidden in emails, a published test found Claude Opus 5 still followed 59%. Harder is still not impossible, and the results come with limits, listed with the chart.

General-purpose benchmarks help measure broad capabilities. But the value of AI ultimately comes from what it helps people accomplish: understanding a difficult document, identifying sensitive information, making sense of a photograph, finding information in a contract, completing an operational task accurately.

Our results suggest that specialization can produce meaningful improvements on some of these narrowly defined activities. It is particularly encouraging that some of the largest measured gains were in personal-data detection and question answering over photographs.

These are not proof of real-world impact, but they identify applications worth testing with actual users. The promise of specialized intelligence is not merely higher benchmark scores. It is making capable AI more useful in the circumstances where people need it.