Lilith-Zero vs Together AI Inference Endpoints

“The Kani formal verification and cargo-fuzz integration tell me this isn't just a vanity security project—it's been engineered to actually be correct. Sub-millisecond overhead means there's no reason not to run this in front of every MCP agent deployment. 15 stars seems like an embarrassing undercount given what this does.”

“The primitive here is straightforward: dedicated compute allocation for open-source model inference with a contractual latency floor — not shared, not burstable, not 'best effort.' The DX bet is that production teams want to stop babysitting p99 latency graphs and just get a number they can put in their SLA doc. That's the right call. The moment of truth is when you point your production traffic at a dedicated endpoint and your tail latencies actually hold — and unlike shared inference pools, dedicated allocation means you're not racing your neighbors for GPU cycles. The weekend alternative (spinning your own vLLM on a reserved A100 instance) is absolutely real, but the SLA contract and the managed ops overhead is what you're paying for here. I'd want to see the actual SLA remediation terms before fully committing, but the core infrastructure bet is sound.”

“The claims are impressive but 15 GitHub stars and one maintainer is not a security tool I'd deploy in production. Security tools require adversarial testing by the community over time—not just formal verification. The fail-closed design is correct philosophically, but I'd want to see 6 months of battle-testing and independent security audits before trusting it with real agent deployments.”

“Direct competitors are AWS Bedrock reserved throughput, Azure AI model deployments, and Fireworks AI — all of whom have been selling dedicated inference with latency guarantees for months. The specific scenario where Together breaks down is enterprise procurement: 'contact sales' pricing on the SLA tier means zero self-serve for the teams who need this most, and procurement cycles kill momentum. What kills this in 12 months is not a competitor — it's Llama 4 and Mistral becoming first-class citizens on hyperscaler managed services, at which point Together's open-source model advantage shrinks to a thin margin play. What earns the ship is that sub-100ms as a *contractual* commitment, not a marketing claim, is genuinely differentiated right now — if the remediation terms have teeth, this is real infrastructure.”

“This is the tool that enterprise security teams will demand before they let any AI agent touch production systems. The taint tracking model is particularly elegant—once data is tagged as sensitive, it can't flow to untrusted destinations regardless of what the LLM decides to do. This is the kind of principled security primitive the agentic ecosystem desperately needs.”

“The thesis here is falsifiable: in 2-3 years, production AI applications will be built predominantly on open-source models, and the infrastructure layer that wins will be the one that offers hyperscaler-grade reliability guarantees without hyperscaler lock-in. For that to pay off, open-source model quality has to keep closing the gap with closed frontier models — which it's doing — and enterprises have to accept that running on third-party managed infrastructure for open-source is preferable to self-hosting, which is less certain. The second-order effect that matters: if contractual SLAs normalize for open-source inference, it removes the last credible objection enterprises have to not using GPT-4 or Claude — the 'we need guaranteed uptime and a contract' objection disappears. Together is on-time to this trend, not early, which means execution is everything and first-mover advantage is already gone.”

“Way too deep in the Rust/MCP security weeds for me to evaluate or use. This is infrastructure for enterprise AI security teams—not something a content creator or indie builder will interact with directly. Worth knowing it exists; not something I'll try this week.”

“The buyer is clear — it's the ML infrastructure lead at a Series B+ company running open-source models in production — but the pricing architecture is not. 'Contact sales' for SLA tiers means Together is pricing this as an enterprise deal when the natural motion of developer-led AI tooling is self-serve with expansion. The moat question is real: Together's defensibility here is operational expertise running open-source models at scale, but that's a people moat, not a product moat. The moment Llama 4 gets native optimized inference on any hyperscaler with an SLA, Together has to compete on price alone. The business survives if they use dedicated endpoints as a wedge into enterprise contracts with broader platform consumption — but I don't see evidence that's the strategy, and a single product with contact-sales pricing is a services business dressed as a SaaS.”