Arkios-1B-chat

A 1.04B-parameter bilingual English–Nepali chat model, instruction-tuned from arkios-1b-base. Its distinguishing feature: tool use is conditional on a declared tool manifest, the same contract used by larger production models, rather than a fixed built-in tool the model calls regardless of context.

The tool-use contract — read this before integrating

Most small tool-tuned models are trained against one fixed toolset and call it reflexively. This model was deliberately trained on the opposite principle:

• Tools declared in the system prompt → call one when it fits.
• No tools declared → never emit a tool call, answer directly.

This is enforced structurally, not just as a preference: in training data, tool manifests are masked out of the loss (the model conditions on them but is never trained to generate them), and conversations with no declared tools make up the largest single training category (~102,000 of the SFT corpus), specifically to suppress the invented-tool-name behavior seen in earlier iterations of this model.

Manifest format (verbatim from training)

system
You have access to the following tools. Call a tool ONLY when it is needed
to answer; otherwise reply directly.
<tools>
{"name": "calculator", "description": "Evaluate an arithmetic expression and return the number", "parameters": {"expression": "string"}}
{"name": "convert_units", "description": "Convert a value between units of length, area, weight or volume", "parameters": {"value": "number", "from": "string", "to": "string"}}
</tools>

If your application has no tools to offer for a given turn, omit the <tools> block and the system message entirely — do not send an empty <tools></tools>, which was not a training-time case.

Chat template (ChatML)

{%- for m in messages %}{{ '<|im_start|>' + m['role'] + '\n' + m['content'] + '<|im_end|>' + '\n' }}{%- endfor %}{%- if add_generation_prompt %}{{ '<|im_start|>assistant\n' }}{%- endif %}

Special tokens: <|bos|> (65510), <|eos|> (65511), <|im_start|> (65512), <|im_end|> (65513), <tool_call>/</tool_call> (65514/65515), <tool_response>/</tool_response>. Tool call replies are emitted as <tool_call>{"name": ..., "arguments": {...}}</tool_call>; send the result back as an <|im_start|>tool\n<tool_response>...</tool_response><|im_end|> turn.

Architecture

Same as arkios-1b-base: 18 layers, d=2048, 16Q/8KV GQA heads, 65,536 vocab, 4096 context, 1.04B parameters. See arkios-1b-base for the full table and pretraining details.

Training

Continued from the arkios-1b-base pretrained checkpoint (weights only — SFT starts at a fresh optimizer state, not resumed pretraining state), on 123,384 conversations / 84.79M tokens, 2 epochs, lr 5e-5, loss applied only to assistant-turn tokens (system and user turns are masked out, including the tool manifest itself). Same custom C/CUDA training stack as pretraining; not released with these weights.

Evaluation — the manifest contract, measured

Acceptance-test results by contract condition (single-instance illustrative scenarios per case, not a large-n benchmark — treat as pass/fail per scenario type, not a precision estimate):

The "never call without permission" half of the contract is essentially solid. The "call when appropriate" half is reliable for arithmetic and unreliable for unit conversion specifically, and slightly less reliable in Nepali than in English. A full multi-turn tool loop (declare → call → receive tool result → report it) was also tested and completed correctly.

Nepali translation — instruction-tuning materially fixed a base-model gap

The base model, prompted with few-shot completion, answers in the wrong language most of the time when asked to translate — most acutely English→ Nepali. Prompting the same weights as a zero-shot chat instruction (this model, as intended):

Still short of 100% en→ne, so treat this as substantially improved rather than solved — verify target-language output in any production use.

Safety / refusal behavior (single-instance, illustrative)

Limitations

• Unit conversion is the weakest point in the tool contract. Even with convert_units declared and needed, the model may answer in prose instead of calling it — and its own unit knowledge is unreliable (it does not reliably know e.g. 1 ft² ≈ 0.0929 m²). Do not rely on this model for unit-sensitive answers without a tool call actually firing; verify at the application layer.
• A word-problem framing can bypass the "needs precision" signal. Given clean bare arithmetic ("What is 847 plus 596?") with no tools declared, the model correctly declines rather than guessing. Given the same underlying computation as a word problem ("a rectangular garden 14m by 6.5m — what is its area?") with no tools declared, it may instead attempt prose arithmetic and get it wrong (one observed case: computed 65.25 m² for a true answer of 91 m², a mechanical multiplication error, not a refusal). Applications needing correct arithmetic must supply a calculator tool via the manifest for every turn where computation is possible — do not rely on the model to recognize an unmarked case on its own.
• Nepali reliability lags English inside the tool contract, not only in raw language quality — the one manifest-contract miss found was a Nepali-language prompt.
• Occasional factual errors in prose answers — e.g., misdescribing Everest's elevation measurement. Not a tool-use issue; a general small-model limitation, worse on any topic outside the training data's density.
• Non-tool advice quality can regress on interpersonal/practical questions (see the lockout example) relative to the base model's more generic instruction-following. Verify before shipping advice-shaped answers unreviewed.
• Inherits every base-model limitation (Nepali data scarcity, no reliable arithmetic without a tool, 4096-token context).

Citation

@misc{arkios2026,
  title  = {Arkios: An Open Bilingual English-Nepali Language Model Trained
            From Scratch, with a Devanagari-Aware Tokenizer},
  author = {Regmi, Sajal and Pudasaini, Siddhartha and Phakami Pun, Chetan},
  year   = {2026},
  eprint = {2608.30092},
  archivePrefix = {arXiv},
  primaryClass  = {cs.CL}
}

License

Apache-2.0.