NVIDIA Nemotron 3 Nano Omni

The NVIDIA Open Model Agreement is genuinely permissive - perpetual, royalty-free, IRREVOCABLE, commercial use allowed, no acceptable-use or field-of-use restriction, weights ungated and fine-tunable. It is held at moderate, not strong, because it is Apache-2.0-derived but non-OSI (the termination reaches an output from the Work), it is a distinct third family licence whose on-document date is unverified against the PDF, and the released recipe surfaces only the public subset of the alignment corpus, so this is an open_weight community licence with conditions, short of Ultra's unconditional OpenMDW grant.

open_weights, not open_weights_recipe: the weights are ungated and inspectable and there is a model card and licence, but the card does not carry the family's open-data/recipe self-description, links only an image-training dataset, and the recipe that exists surfaces only the public subset. You can see the weights, but the data and full recipe are not clearly released - the anchor for moderate, not strong.

Operational is 3 (runs on mainstream stacks with an official BF16 variant, but the multimodal serving path is narrower and the quantization coverage thinner) and safety is 3 (no model-level safety evaluation over a wider multimodal misuse surface). Under the ownership rule, a safety score of 3 caps this factor at moderate.

Self-hosted via NIM (or the linked TensorRT-LLM path), the weights and inference run on your own infrastructure and data never leaves your enclave, and the NVIDIA Open Model Agreement claws back no rights - the grant is explicitly IRREVOCABLE, terminating only on the licensee's own IP litigation. That is the strong case for a self-hostable model.