A Chinese-developed open-weight model is now shipping openly inside a Microsoft product. GitHub has made Moonshot AI's Kimi K2.7 Code generally available as a selectable model in GitHub Copilot, hosting the weights on US Azure infrastructure so that developer prompts never reach Moonshot. The viral framing, that Microsoft is secretly slipping the newer Kimi K3 into Copilot, is not supported by any primary source; the real, verifiable story is more interesting than the rumor.
Key facts
- GitHub announced Kimi K2.7 Code as generally available on July 1, extending to Business and Enterprise on July 7, off by default for organizations. GitHub announcement
- The weights run on US-based Azure AI Foundry infrastructure; GitHub says prompts and responses are not sent to Moonshot. GitHub hosting docs
- K2.7 Code is a mixture-of-experts model with 1 trillion total parameters but only 32 billion active per token, a 256K context window, and vision input. Moonshot model card
- K3 is not open-weight yet: Moonshot says the full weights arrive by July 27. Moonshot K3 post
Some background helps. Copilot has been moving toward a model-agnostic design, letting developers pick among models rather than locking them to one. K2.7 Code is Moonshot's coding-focused agentic model, built on its earlier K2.6, and GitHub calls it its first selectable open-weight model. "Open weight" means the model's trained parameters are publicly downloadable, so anyone can host it; that is what let GitHub run a Chinese lab's model on American servers without the lab touching the data.
What is actually wired in is a capable coding agent. K2.7 Code is a mixture-of-experts design, meaning that although it holds a trillion parameters in total, it activates only about 32 billion for any given token, keeping it fast to serve. Moonshot says it uses roughly 30 percent fewer reasoning tokens than the previous K2.6, so the commercial appeal is a cheaper, less "overthinking" agent loop rather than a pure leaderboard win. Its model card notes interleaved thinking and multi-step tool calling, and that retained reasoning cannot be disabled. Its performance numbers, though, remain vendor claims, some measured on Moonshot's own evaluation suites.
The sovereignty angle is the sharp one, and it is a genuine shift. Think of it as buying a car with an imported engine, assembled and serviced entirely at a domestic plant. The engine's design is foreign; the fuel, the data, never leaves the local facility. GitHub says the model is Azure-hosted, prompts stay inside US infrastructure, and Copilot's filters still apply, which is a real mitigation for data-residency concerns. But it does not change who developed the weights, and it does not settle model-behavior, supply-chain, or policy questions. The most accurate metaphor is "an imported engine in the options menu," not an undisclosed chip inside every response: K2.7 is absent from Copilot's automatic model-selection roster, users choose it explicitly, and enterprises can block it.
Why it matters: this reframes the whole "whose model is it" debate. In the same week Washington floated sanctions over Chinese AI, a Microsoft-owned platform is distributing a Chinese open-weight model, openly and opt-in, from US servers. The question is shifting from provenance to control of hosting, data, and the routing layer.
The honest caveats are about scope and safety. "Copilot" here means GitHub Copilot specifically, not consumer Copilot or Microsoft 365 Copilot, which the reviewed sources do not cover. And the closest independent safety work, a preprint evaluating the earlier Kimi K2.5, found fewer refusals for dangerous requests than closed comparators, though it did not assess K2.7 Code, so it is a reason to demand model-specific evaluation rather than evidence about this release. GitHub itself tells administrators to review the model against their security and governance requirements before enabling it. On the K3 rumor specifically: Moonshot says K3 is available through its own products and API today, with full weights promised by July 27, but there is no official record of K3 inside Copilot. The community, on r/artificial, senses the strategic shift correctly even as it overshoots on the specifics.
Originally published on Ground Truth, where every claim is checked against the primary source.
Top comments (0)