Model Choice Guide
How to choose Auto vs pinned model modes based on workflow goals.
Model choice in Canoma is mainly a control between adaptability and consistency.
Auto vs Pinned
Auto (Recommended Default)
Choose Auto when you want Canoma to optimize behavior per task and stage of investigation.
Best for:
- Mixed workflows in a single session
- Fast triage followed by deeper synthesis
- Teams that prioritize operational throughput
Pinned Mode
Choose a pinned mode when you want stable style and structure across repeated runs.
Best for:
- Standardized reporting templates
- Repeatable output for QA or audit review
- Workflows with strict handoff formats
Practical Selection Heuristics
| Need | Better choice |
|---|---|
| Highest consistency between repeated runs | Pinned mode |
| Best overall adaptation as task changes | Auto |
| Fast iterative investigation loop | Auto or speed-oriented pinned mode |
| Formal briefing with fixed sections | Pinned mode |
Domain-Oriented Suggestions
Vulnerability Prioritization
- Start in Auto.
- Switch to pinned mode when you need highly consistent checklist formatting.
Threat Intelligence Synthesis
- Start in Auto.
- Switch to pinned mode when you want a stable narrative style for recurring briefs.
SOC Triage and Hunt Iteration
- Prefer Auto for rapid refinement loops.
- Pin only if your team requires identical output format for each shift handoff.
Leadership Briefing
- Use pinned mode for standardized executive summaries.
- Keep required sections explicit in the prompt.
Skills and Model Choice
Skills are enabled only when the selected mode supports skills for the current task.
- Keep critical workflows valid with and without skills.
- Confirm skill activation status in Settings before high-impact runs.
- Use explicit output constraints to reduce variance.
Related guidance
For behavior expectations across modes, see Model Routing Principles.