TL;DR: Qwen3.8-Max looks cheaper on paper, but TruFoundry's check found it cost more per completed task than GPT-5.6 Sol because it used far more tokens on harder prompts. The practical lesson is that model-selection decisions should optimise for cost per correct answer, not advertised token price.
At a glance
What this is: This analysis shows that lower per-token model pricing can still produce higher real-world task costs when a model becomes verbose or unstable on harder work.
Why it matters: For IAM, NHI, and agentic AI programmes, the same lesson applies to gateway governance, where cost, latency, and control need to be measured at the action level rather than at the token or request level.
By the numbers:
- Qwen3.8-Max completed the hard tasks with an average of 5,364 tokens per answer, compared with 729 for Kimi K3 and 282 for GPT-5.6 Sol.
- GPT-5.6 Sol landed at $0.0067 to $0.0070 per solved task, while Qwen3.8-Max landed at $0.0144 to $0.0284.
👉 Read TruFoundry's analysis of Qwen3.8-Max pricing versus real task cost
Context
Model pricing is often presented as a simple cost comparison, but that misses the actual control problem: organisations pay for successful outcomes, not advertised token rates. In AI gateway environments, the effective unit of governance is the completed task, the routed request, or the delegated action, because those are the points where cost, latency, and policy enforcement intersect.
This is also where identity and access governance starts to matter. As AI gateways increasingly mediate LLM traffic, MCP tools, and agent execution, teams need to understand whether they are measuring model efficiency, tool-use efficiency, or the cost of an identity-backed workflow. That distinction is now material for AI operations, cloud spend, and NHI governance.
TruFoundry's benchmark-style comparison is typical of a growing class of operational AI analyses: the interesting finding is not just which model answers correctly, but what it costs to get a reliable answer at scale.
Key questions
Q: How should teams choose between AI models when per-token pricing looks misleading?
A: Choose models on solved-task cost, not token price alone. Measure how many tokens, retries, and seconds are needed to complete representative work correctly, then compare the total cost of success. A model that is cheaper per million tokens can still be more expensive in production if it is verbose, slow, or unstable on the tasks you actually run.
Q: Why do AI gateway metrics matter for model governance?
A: Gateway metrics show what actually happened during execution, including spend, latency, completion length, retries, and tool usage. That gives teams a practical way to compare models under the same conditions and to spot where behaviour drifts from expectation. Without gateway telemetry, pricing discussions stay abstract and governance cannot see the real operational cost of an AI workflow.
Q: What do security teams get wrong about AI cost control?
A: They often treat cost as a finance-only issue and overlook the identity layer that drives usage. Without attribution, shadow AI discovery, and policy enforcement at the request path, teams can reduce waste in one area while leaving the real source of token growth untouched.
Q: How can organisations keep AI workflows from becoming expensive to govern?
A: Set explicit limits on output length, retry behaviour, and tool-step depth, then monitor whether those limits hold in production. If a workflow regularly exceeds its bounds, treat that as a governance issue, not just a tuning problem. The goal is predictable execution cost and predictable control exposure.
Technical breakdown
Why token price is a weak proxy for task cost
Per-token pricing only measures one part of the execution chain. A model can appear cheap while still generating long, repetitive, or retry-heavy outputs that inflate total spend and latency. In practice, the right denominator is task completion, because the user cares about a correct result, not how many tokens were consumed along the way. This becomes especially important in gateway-mediated environments where prompts, tool calls, retries, and post-processing all add to the bill. When a model is verbose on hard tasks, nominal price advantages disappear quickly.
Practical implication: benchmark models on solved-task cost, not advertised input-output token rates.
Why gateway telemetry changes model selection
AI gateways sit at the point where request routing, logging, policy enforcement, and cost measurement converge. That gives teams a better control plane than ad hoc model usage, because they can compare latency, completion length, and success rate across models under the same workload. For agentic systems, the same gateway also becomes the place where tool access and model behaviour can be correlated. Without that telemetry, teams cannot tell whether a model is expensive because it is inaccurate, verbose, or interacting badly with downstream tools.
Practical implication: measure cost, latency, and task success in the gateway, not just in model vendor dashboards.
How verbosity becomes a hidden governance problem
Excessive completion length is not only a cost issue. In agentic and workflow-driven systems, verbose outputs can increase exposure to tool misuse, slow incident response, and complicate audit trails because more generated text often means more delegated steps and more places for policy drift. Where gateways also broker MCP servers or agent actions, output bloat can become an operational control issue. The governance question is whether the system is producing bounded, predictable work or open-ended execution that is hard to price and harder to secure.
Practical implication: set bounded output and step limits for high-cost workflows before scaling agentic use.
NHI Mgmt Group analysis
Cost-per-correct-answer is the only model selection metric that survives contact with production. Per-token pricing is a procurement signal, not an operational control. If a model uses 10x or 20x more tokens to complete the same task, the apparent discount is irrelevant to platform economics and can mislead governance teams. Practitioners should evaluate model choice as a unit-cost problem tied to successful execution, not a pricing brochure problem.
AI gateway telemetry is becoming the governance layer for model sprawl. Once teams route multiple LLMs, tools, and agents through a shared gateway, they finally have a control point that can compare success rate, latency, and spend under identical conditions. That matters for IAM-adjacent oversight as well, because the gateway is where delegated actions, tool permissions, and usage accounting can be joined. Practitioners should treat the gateway as a policy and measurement boundary, not just a routing layer.
Token inflation is a form of governance debt, not just inefficiency. Verbose models create larger audit surfaces, more unpredictable response paths, and higher downstream operational cost. In agentic environments, that can amplify tool calls and make policy enforcement harder to reason about. The named concept here is completion-cost drift: when a model's real task cost diverges materially from its advertised price. Practitioners should flag that divergence early and build controls around it.
Identity and access governance matters when AI systems are allowed to act, not only when they answer. As gateways increasingly sit in front of MCP servers and agents, the cost conversation becomes inseparable from permissions, delegation, and execution scope. A cheaper model that drives more actions can be more expensive to govern than a pricier model that completes the same workflow cleanly. Practitioners should measure cost and access together.
Vendor benchmark claims should be tested against workload shape, not accepted at face value. A model that wins on a public benchmark can still underperform in mixed enterprise tasks where dependencies, edge cases, and output discipline matter more than a single score. That is a familiar pattern in platform engineering and in identity operations alike: headline metrics rarely survive realistic workload variation. Practitioners should validate on their own task mix before changing production routing.
What this signals
Completion-cost drift: when a model's advertised pricing diverges from its real task cost, procurement and platform teams need a shared metric before scaling further. That metric should sit alongside latency and success rate, because otherwise AI usage expands faster than governance can explain the bill or the behaviour.
The broader signal is that AI gateways are becoming the practical boundary for model governance, tool control, and cost accounting. Teams that already route agent activity through a gateway should use the same point to connect usage metrics, delegated permissions, and auditability, with the NIST AI Risk Management Framework providing the governance vocabulary for that work. The operational question is no longer whether a model is cheap, but whether its execution pattern is predictable enough to govern.
For practitioners
- Benchmark on solved-task cost Compare models using complete task success, latency, and total token consumption on your own workload. Keep the metric tied to a finished outcome rather than to raw output volume.
- Instrument the AI gateway as the control plane Capture per-request spend, completion length, retries, and downstream tool calls in the gateway so routing decisions reflect actual production behaviour.
- Set bounded-output policies for hard tasks Define maximum completion lengths, retry thresholds, and tool-step limits for workflows that are prone to verbose or spiralling responses.
- Join cost telemetry to access governance If the same system can both generate text and trigger tools, link usage metrics to the identities, roles, or agents that initiated the request.
Key takeaways
- Per-token pricing can understate the true cost of AI workloads when models become verbose or unstable on hard tasks.
- Cost per completed task is the more useful decision metric because it captures success rate, latency, and output inflation together.
- AI gateways should be used as measurement and governance points, especially where model routing intersects with tool access and delegated action.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
OWASP Agentic AI Top 10 address the attack and risk surface, while NIST AI RMF, NIST AI 600-1 and NIST CSF 2.0 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST AI RMF | MEASURE | The article is about evaluating model cost and performance under real workloads. |
| NIST AI 600-1 | Generative AI profile guidance fits benchmark validation and operational governance. | |
| OWASP Agentic AI Top 10 | Agentic AI governance matters where gateways broker model and tool traffic. | |
| NIST CSF 2.0 | PR.AC-4 | Access and delegated execution need governance when models trigger actions through a gateway. |
Use agentic AI controls to bound tool use, delegation, and model behaviour inside gateways.
Key terms
- Solved-task cost: The total cost required to complete a task successfully, including tokens, latency, retries, and any downstream execution overhead. It is a more useful operational measure than per-token pricing because it reflects what the business actually pays for a correct result.
- Completion-cost drift: The gap between a model's advertised unit price and the real cost of getting a reliable outcome. It appears when verbosity, retries, or long-running generations inflate spend beyond what pricing tables suggest, creating hidden operating and governance risk.
- AI Gateway: A control point that sits between AI applications and the models, tools, or data they call. In practice, it can authenticate requests, enforce policy, inspect runtime behaviour, and stop unsafe actions before they spread into connected systems.
- Workflow telemetry: Structured evidence about what happened inside a development or automation workflow, including who invoked a tool, what branch was affected, and whether policy outcomes were met. It is the basis for auditability when humans and agents share the same change path.
What's in the full article
TruFoundry's full analysis covers the operational detail this post intentionally leaves for the source:
- The full task-by-task benchmark breakdown, including the hand-written test suite and run-by-run variance.
- Per-model token consumption patterns on the harder prompts, which show why cost curves diverged.
- The raw timing and output-length comparisons that explain the 5-minute versus blink-level gap.
- Context on how the TrueFoundry AI Gateway was used to route and observe the models during testing.
Deepen your knowledge
The NHI Foundation Level course, the industry's only accredited NHI security programme, covers NHI governance, workload identity, and secrets management in the context of real enterprise controls. It is designed for practitioners who need to connect identity decisions to operational security outcomes.
Published by the NHIMG editorial team on August 18, 2026.
NHI Mgmt Group — the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org