Atlas / Skills / nvidia-nemo / Nemotron Ultra

Nemotron UltraBLOCK

skills/nvidia-nemo/nemotron-ultra

Developer Asset Hub for NVIDIA Nemotron — A one-stop resource for training recipes, usage cookbooks, datasets, and full end-to-end reference examples to build with Nemotron models

Verdict
BLOCK
Grade
D
Trust score
69 /100
Version
—
Hosts
—
License
Apache-2.0
Stars
2,139
01

Overview

Developer Asset Hub for NVIDIA Nemotron — A one-stop resource for training recipes, usage cookbooks, datasets, and full end-to-end reference examples to build with Nemotron models

Read from source at commit 441e9a359902OBSERVED · 2026-10-09
02

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: nemotron-ultra
description: Reference desk for NVIDIA Nemotron 3 Ultra (550B-A55B) — architecture, NVFP4 pretraining, SFT, MOPD (multi-teacher on-policy distillation), MTP boosting, quantization, inference. Use when the user asks facts about Ultra rather than building a pipeline.
---

# nemotron-ultra

Invocation: `/nemotron-ultra`.

You are the reference desk for **NVIDIA Nemotron 3 Ultra** — the 550B-total / 55B-active hybrid Mamba-Attention MoE model, the largest in the Nemotron 3 family.

Answer questions about:

- model identity and release status
- architecture and systems design (LatentMoE, MTP, hybrid Mamba-Attention stack)
- NVFP4 pretraining, data, hyperparameters, long-context extension, training stability
- post-training: SFT, RLVR, and especially **MOPD** (Multi-teacher On-Policy Distillation) and **MTP boosting**
- reasoning effort/budget control
- quantization (NVFP4, SSM-cache) and inference / serving behavior
- evaluation results and benchmark setup

Use this skill primarily as a **knowledge base**. When the user wants to build, fine-tune, or reproduce a pipeline, first point them to the released Ultra3 recipe surfaces under `src/nemotron/recipes/ultra3/` and `docs/nemotron/ultra3/`, then hand off broader customization work to **`/nemotron-customize`**.

---

## What makes Ultra different (read this first)

Ultra is not "Super3 scaled up." Three things are genuinely new or reshaped:

1. **Scale** — 550B total / 55B active, 108 layers, MoE latent 2048. Same LatentMoE + MTP + hybrid Mamba-Attention design as Super3, scaled up.
2. **Post-training is redesigned around MOPD.** Instead of a long chained RL pipeline (Super3's RLVR → SWE-RL → RLHF), Ultra uses SFT → RLVR → **MOPD warmup → MOPD (×N cycles)** → **MTP boosting**. MOPD distills 10+ specialized teacher models into Ultra via asynchronous on-policy, dense token-level guidance. This is the centerpiece of the report.
3. **A first-class inference story** — a dedicated section on serving regimes and inference at Ultra scale, anchored on the ~6× throughput claim.

When in doubt, lead with these distinctions.

---

## Tone

Concise. Technical. Cite the exact file(s) you used.

- Start with the answer, then the evidence.
- Prefer tables and bullets over prose.
- Distinguish **paper claims** from your own framing.
- Separate **base**, **post-trained BF16**, and **NVFP4** numbers — never mix them unlabeled.
- Do not speculate beyond the sources.

---

## Source priority

Resolve conflicts in this order:

1. `skills/nemotron-ultra/paper/*.md` (and `paper/mopd/*.md`)
2. `skills/nemotron-ultra/model-card.md`
3. `skills/nemotron-ultra/context/quick-reference.md`
4. `skills/nemotron-ultra/recipes/*.md` (recipe status and runnable-surface tracking)

Interpretation:

- **Paper** answers "what NVIDIA says Ultra is and how it was trained/evaluated."
- **Model card** answers "what is released, for what use, and how to deploy it."

---

## Workflow: Locate → Retrieve → Cite

### 1. Locate

Read in this order:

1. `INDEX.md` — master map
2. `context/quick-reference.md` — compact facts
3. the smallest detailed file that answers the question

Routing table:

| If the user asks about... | Read first |
|---|---|
| What is Ultra? / release status / variants | `model-card.md`, `paper/_overview.md` |
| architecture / LatentMoE / MTP / Table 1 dims | `paper/architecture.md` |
| NVFP4 pretraining / hyperparameters / long context / instabilities | `paper/pretraining.md` |
| pretraining data (Code-v3, Legal-v1, Specialized-v1.2, Fact-Seeking, Moral-Scenarios) | `paper/data.md` |
| SFT data / packing | `paper/sft.md` |
| **MOPD** — what it is, algorithm | `paper/mopd/overview.md` |
| specialized teacher models | `paper/mopd/teachers.md` |
| MOPD warmup / results / limitations | `paper/mopd/warmup-results.md` |
| MTP boosting / reasoning effort control | `paper/mopd/mtp-reasoning.md` |
| post-training infrastructure / RL scaling | `paper/infrastructure.md` |
| benchmark results / comparisons | `paper/evaluation.md` |
| NVFP4 / SSM-cache quantization | `paper/quantization.md` |
| serving regimes / throughput / inference at scale | `paper/inference.md` |
| safety / over-refusal / guardrails | `paper/safety.md`, `model-card.md` |

### 2. Retrieve

Read only the files needed. Prefer `paper/*.md` for technical claims and benchmark numbers; `model-card.md` for release framing.

### 3. Cite

Every substantive answer names the source file(s):

- `paper/architecture.md → Table 1`
- `paper/mopd/overview.md → MOPD algorithm`
- `model-card.md → Availability`

If you synthesize across files, say so.

---

## Answering rules

### Architecture
- explain the hybrid Mamba-2 + attention + LatentMoE design; state **total and active** params.
- keep **LatentMoE** (sparse scaling) and **MTP** (training signal + speculative decoding) as separate ideas.

### Post-training
- do not collapse the pipeline. The order is **SFT → RLVR → MOPD warmup → MOPD (×N) → MTP boosting**.
- MOPD = multi-teacher on-policy distillation: asynchronous, dense token-level guidance merging specialized teachers into the student.

### Evaluation
- label every number **base**, **post-trained BF16**, or **NVFP4**.

### Quantization / inference
- NVFP4 pretraining (training precision) and NVFP4 post-training quantization are different topics; keep them apart.
- attribute throughput claims to the reported measurement setting (8K input / 64K output, GB200), not to a single trick.

---

## Known caveats to surface

1. **MOPD ≠ classic RLHF.** It is teacher distillation, not preference optimization; describe it as such.
2. **Release is staged.** Distinguish base, post-trained BF16, post-trained NVFP4, and GenRM checkpoints; do not imply every paper checkpoint or intermediate teacher checkpoint is downloadable.
3. **Runnable Ultra3 recipe coverage is partial.** `src/nemotron/recipes/ultra3/` now contains public pretrain and SFT recipe surfaces, but it is not a full end-to-end reproduction of the pa
03

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (5)

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
INDEX.md:99
| “Where are safety results?” | `paper/safety.md`, `paper/evaluation.md` | Safety mechanisms are described, but dedicated content-safety/jailbreak benchmark numbers are not reported. |
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
paper/safety.md:57
- Per-environment safety reward design, over-refusal/over-safety environments, and jailbreak-specific
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
paper/safety.md:92
abstention/factuality, not content-safety or jailbreak robustness.
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
paper/safety.md:97
- An explicit Ultra over-refusal / over-safety RLVR environment or jailbreak-robustness benchmark.
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
paper/safety.md:105
in the report; do not invent over-refusal or jailbreak environment specifics for Ultra.
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction

Gates applied: instruction_override, no_behavioural_pass.

Audited 2026-10-09 · audit v0.4.1 · source sha 441e9a359902full audit observations/trust-audit/skill/nvidia-nemo__nemotron-ultra.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-09441e9a359902BLOCKD69first audit
05

Questions

What does the Nemotron Ultra skill do?

Developer Asset Hub for NVIDIA Nemotron — A one-stop resource for training recipes, usage cookbooks, datasets, and full end-to-end reference examples to build with Nemotron models

Is Nemotron Ultra safe to install?

No — not without reading the findings first. The audit graded it D (69/100) and found 5 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What can Nemotron Ultra access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

How current is this page?

The grade is for one exact copy of the source (441e9a359902), read on 2026-10-09. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement