初始化项目,由ModelHub XC社区提供模型

Model: DreamFast/Qwen-2.5-7b-apostate
Source: Original Platform
This commit is contained in:
ModelHub XC
2026-07-20 07:52:09 +08:00
commit 41710371bf
17 changed files with 871 additions and 0 deletions

36
.gitattributes vendored Normal file
View File

@@ -0,0 +1,36 @@
*.7z filter=lfs diff=lfs merge=lfs -text
*.arrow filter=lfs diff=lfs merge=lfs -text
*.bin filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.ckpt filter=lfs diff=lfs merge=lfs -text
*.ftz filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.h5 filter=lfs diff=lfs merge=lfs -text
*.joblib filter=lfs diff=lfs merge=lfs -text
*.lfs.* filter=lfs diff=lfs merge=lfs -text
*.mlmodel filter=lfs diff=lfs merge=lfs -text
*.model filter=lfs diff=lfs merge=lfs -text
*.msgpack filter=lfs diff=lfs merge=lfs -text
*.npy filter=lfs diff=lfs merge=lfs -text
*.npz filter=lfs diff=lfs merge=lfs -text
*.onnx filter=lfs diff=lfs merge=lfs -text
*.ot filter=lfs diff=lfs merge=lfs -text
*.parquet filter=lfs diff=lfs merge=lfs -text
*.pb filter=lfs diff=lfs merge=lfs -text
*.pickle filter=lfs diff=lfs merge=lfs -text
*.pkl filter=lfs diff=lfs merge=lfs -text
*.pt filter=lfs diff=lfs merge=lfs -text
*.pth filter=lfs diff=lfs merge=lfs -text
*.rar filter=lfs diff=lfs merge=lfs -text
*.safetensors filter=lfs diff=lfs merge=lfs -text
saved_model/**/* filter=lfs diff=lfs merge=lfs -text
*.tar.* filter=lfs diff=lfs merge=lfs -text
*.tar filter=lfs diff=lfs merge=lfs -text
*.tflite filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.wasm filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text
*tfevents* filter=lfs diff=lfs merge=lfs -text
tokenizer.json filter=lfs diff=lfs merge=lfs -text

323
README.md Normal file
View File

@@ -0,0 +1,323 @@
---
license: apache-2.0
license_link: https://huggingface.co/Qwen/Qwen2.5-7B-Instruct/blob/main/LICENSE
language:
- en
pipeline_tag: text-generation
base_model: Qwen/Qwen2.5-7B-Instruct
tags:
- uncensored
- abliterated
- apostate
- qwen2.5
- safetensors
library_name: transformers
---
# Qwen2.5-7B-Instruct-Apostate
💬 **Community:** Join the [Abliterlitics Discord](https://discord.gg/AqmDnBjPvM) for discussion, model releases and support.
An uncensored variant of [Qwen2.5-7B-Instruct](https://huggingface.co/Qwen/Qwen2.5-7B-Instruct) produced with [Apostate](https://github.com/heterodoxin/apostate), `balanced` profile. Safety refusal behaviour removed via orthogonal projection of the refusal direction across 27 of 28 layers (skips layer 11).
**7.61B parameters, bfloat16, single-shard safetensors (~15 GB).** No quantization. 55 of 339 tensors changed (35.8% of parameters). Targets `o_proj` + `down_proj` with a minimal embedding edit.
Apostate achieves **98.8% ASR on HarmBench** with 5 persistent refusals (4 harassment, 1 harmful). Capability retention is strong: GSM8K improves, LAMBADA only drops slightly, and knowledge tasks (MMLU, HellaSwag, PIQA) retain over 99% of base performance.
## Benchmarks
Evaluated with [lm-evaluation-harness](https://github.com/EleutherAI/lm-evaluation-harness) via vLLM 0.19.0, bf16 on RTX 5090 32GB.
| Task | [Base](https://huggingface.co/Qwen/Qwen2.5-7B-Instruct) | [Heretic](https://huggingface.co/DreamFast/Qwen2.5-7B-Instruct-heretic-1.3.0) | [Huihui](https://huggingface.co/huihui-ai/Qwen2.5-7B-Instruct-abliterated-v2) | Apostate (This Model) |
|------|------|---------|---------|----------|
| MMLU | **71.78** | 71.59 | 70.27 | 71.43 |
| GSM8K | 79.23 | **80.82** | 80.74 | 80.74 |
| HellaSwag | **80.47** | 80.24 | 79.88 | 80.32 |
| ARC Challenge | 55.12 | **55.55** | 55.12 | 55.12 |
| WinoGrande | **71.03** | 70.72 | 69.53 | 69.38 |
| TruthfulQA MC1 | **47.74** | 44.80 | 43.70 | 44.92 |
| TruthfulQA MC2 | **64.83** | 60.39 | 60.89 | 62.59 |
| PiQA | **80.25** | 80.41 | 79.60 | 79.92 |
| Lambada ppl ↓ | 3.683 | **3.627** | 4.087 | 3.860 |
## Safety: HarmBench
[HarmBench](https://github.com/centerforaisafety/HarmBench) with 400 textual behaviours, `max_tokens=6144, temperature=0.0`. Classified with keyword-based refusal detection followed by LLM review of edge cases by GLM 5.1.
| Variant | ASR | Complied | Refused | Unlocked | Persistent |
|---------|-----|----------|---------|----------|------------|
| [Base](https://huggingface.co/Qwen/Qwen2.5-7B-Instruct) | 31.0% | 124 | 276 | - | - |
| [Heretic](https://huggingface.co/DreamFast/Qwen2.5-7B-Instruct-heretic-1.3.0) | **100.0%** | **400** | **0** | 276 | 0 |
| [Huihui](https://huggingface.co/huihui-ai/Qwen2.5-7B-Instruct-abliterated-v2) | 98.2% | 393 | 7 | 269 | 7 |
| [Apostate](https://huggingface.co/DreamFast/Qwen-2.5-7b-apostate) | 98.8% | 395 | 5 | 271 | 5 |
### ASR by category
| Category | Items | Base | Apostate (This Model) | Huihui | Heretic |
|----------|-------|------|----------|--------|---------|
| copyright | 100 | 89.0% | 100.0% | 100.0% | **100.0%** |
| cybercrime_intrusion | 67 | 17.9% | 100.0% | 100.0% | **100.0%** |
| illegal | 65 | 4.6% | 100.0% | 98.5% | **100.0%** |
| chemical_biological | 56 | 7.1% | 100.0% | 100.0% | **100.0%** |
| misinformation_disinformation | 65 | 21.5% | 100.0% | 96.9% | **100.0%** |
| harmful | 22 | 9.1% | 95.5% | 95.5% | **100.0%** |
| harassment_bullying | 25 | 0.0% | 84.0% | 88.0% | **100.0%** |
## KL Divergence
Distribution shift from the base model, measured on 512-sample prompts.
| Metric | Apostate (This Model) | Huihui | Heretic |
|--------|----------|--------|---------|
| KL batchmean | **0.134** | 0.190 | 0.211 |
| KL median | **0.019** | 0.056 | 0.020 |
Apostate produces the lowest distribution shift of the three variants. It spreads edits across more tensors (55 vs 37 for Heretic) but with lower per-tensor intensity (mean norm 1.63 vs 2.33).
---
# Apostate Run Report
## Summary
| Metric | Value |
| --- | --- |
| Base model | Qwen/Qwen2.5-7B-Instruct |
| Profile | balanced |
| Output | qwen-apostate |
| Layers | 28 |
| Hidden size | 3584 |
| Direction layer | 20 |
| Baseline refusal (n=24) | 95.8% |
| Edited refusal | 22.9% |
| Refusal metric | classifier + weak guard |
| Harmless KL | 0.090 |
| Target refusal | 3.0% |
| KL target | 0.060 |
| KL budget | 0.160 |
| KL positions | 32 |
| KL layer trims | 0 |
| Repair steps | 1 |
| Preserve rank | 8 |
| Preserve source | harmless |
| Capability penalty | True |
| Elapsed | 271.2 sec |
## Command
```text
apostate ablate --model Qwen/Qwen2.5-7B-Instruct --out qwen-apostate
```
## Best Parameters
| Parameter | Value |
| --- | --- |
| direction_source | activations |
| direction_layer_frac | 0.742 |
| refusal_rank | 1 |
| strength | 1.0861 |
| band_center | 0.49 |
| band_width | 0.5636 |
| causal_mix | 0.6642 |
| causal_power | 1.2972 |
| direction_sign | 1.0 |
| ablate_embed | True |
| embed_scale | 0.0405 |
| ablate_head | False |
| head_scale | 0.0103 |
| head_alpha | 0.6951 |
## Best Trial
| Metric | Value |
| --- | --- |
| refusal | 0.75 |
| kl | 0.0128 |
| capability_logprob | -7.9867 |
| capability_drift | 0.0 |
## Layer Alphas
| Layer | Alpha |
| --- | --- |
| 0 | 0.667 |
| 1 | 0.667 |
| 2 | 0.667 |
| 3 | 0.667 |
| 4 | 0.667 |
| 5 | 0.667 |
| 6 | 1.206 |
| 7 | 1.222 |
| 8 | 1.205 |
| 9 | 1.202 |
| 10 | 1.210 |
| 11 | 0.000 |
| 12 | 1.240 |
| 13 | 1.333 |
| 14 | 1.333 |
| 15 | 1.333 |
| 16 | 1.333 |
| 17 | 1.202 |
| 18 | 1.448 |
| 19 | 1.333 |
| 20 | 1.333 |
| 21 | 0.667 |
| 22 | 0.667 |
| 23 | 0.667 |
| 24 | 0.667 |
| 25 | 0.667 |
| 26 | 0.667 |
| 27 | 0.667 |
## Guard History
| iter | separation | ratio | rank | refusal | kl | reverted |
| --- | --- | --- | --- | --- | --- | --- |
| 0 | 40.6304 | 0.5426 | 1 | 0.75 | 0.0128 | |
| 1 | 40.7273 | 0.5439 | 1 | 0.4688 | 0.0278 | |
## Timings
| Phase | Seconds |
| --- | --- |
| load_model | 12.5 |
| load_prompts | 16.0 |
| baseline_refusal | 5.2 |
| activation_fit | 13.7 |
| causal_scores | 12.2 |
| optimize_profile | 90.7 |
| guard | 22.4 |
| refine_refusal | 14.3 |
| validation_metrics | 0.0 |
| repair | 57.8 |
| prune | 0.0 |
| test_metrics | 13.6 |
| bake | 13.0 |
## Measurement
| field | value |
| --- | --- |
| refusal judge | classifier + weak guard |
| preservation metric | harmless kl |
| capability suites | gsm8k, humaneval, mbpp |
---
# Original Qwen2.5-7B-Instruct README
## Introduction
Qwen2.5 is the latest series of Qwen large language models. For Qwen2.5, we release a number of base language models and instruction-tuned language models ranging from 0.5 to 72 billion parameters. Qwen2.5 brings the following improvements upon Qwen2:
- Significantly **more knowledge** and has greatly improved capabilities in **coding** and **mathematics**, thanks to our specialized expert models in these domains.
- Significant improvements in **instruction following**, **generating long texts** (over 8K tokens), **understanding structured data** (e.g, tables), and **generating structured outputs** especially JSON. **More resilient to the diversity of system prompts**, enhancing role-play implementation and condition-setting for chatbots.
- **Long-context Support** up to 128K tokens and can generate up to 8K tokens.
- **Multilingual support** for over 29 languages, including Chinese, English, French, Spanish, Portuguese, German, Italian, Russian, Japanese, Korean, Vietnamese, Thai, Arabic, and more.
**This repo contains the instruction-tuned 7B Qwen2.5 model**, which has the following features:
- Type: Causal Language Models
- Training Stage: Pretraining & Post-training
- Architecture: transformers with RoPE, SwiGLU, RMSNorm, and Attention QKV bias
- Number of Parameters: 7.61B
- Number of Paramaters (Non-Embedding): 6.53B
- Number of Layers: 28
- Number of Attention Heads (GQA): 28 for Q and 4 for KV
- Context Length: Full 131,072 tokens and generation 8192 tokens
- Please refer to [this section](#processing-long-texts) for detailed instructions on how to deploy Qwen2.5 for handling long texts.
For more details, please refer to our [blog](https://qwenlm.github.io/blog/qwen2.5/), [GitHub](https://github.com/QwenLM/Qwen2.5), and [Documentation](https://qwen.readthedocs.io/en/latest/).
## Requirements
The code of Qwen2.5 has been in the latest Hugging face `transformers` and we advise you to use the latest version of `transformers`.
With `transformers<4.37.0`, you will encounter the following error:
```
KeyError: 'qwen2'
```
## Quickstart
Here provides a code snippet with `apply_chat_template` to show you how to load the tokenizer and model and how to generate contents.
```python
from transformers import AutoModelForCausalLM, AutoTokenizer
model_name = "DreamFast/Qwen-2.5-7b-apostate"
model = AutoModelForCausalLM.from_pretrained(
model_name,
torch_dtype="auto",
device_map="auto"
)
tokenizer = AutoTokenizer.from_pretrained(model_name)
prompt = "Give me a short introduction to large language model."
messages = [
{"role": "system", "content": "You are a helpful assistant."},
{"role": "user", "content": prompt}
]
text = tokenizer.apply_chat_template(
messages,
tokenize=False,
add_generation_prompt=True
)
model_inputs = tokenizer([text], return_tensors="pt").to(model.device)
generated_ids = model.generate(
**model_inputs,
max_new_tokens=512
)
generated_ids = [
output_ids[len(input_ids):] for input_ids, output_ids in zip(model_inputs.input_ids, generated_ids)
]
response = tokenizer.batch_decode(generated_ids, skip_special_tokens=True)[0]
```
### Processing Long Texts
The current `config.json` is set for context length up to 32,768 tokens.
To handle extensive inputs exceeding 32,768 tokens, we utilize [YaRN](https://arxiv.org/abs/2309.00071), a technique for enhancing model length extrapolation, ensuring optimal performance on lengthy texts.
For supported frameworks, you could add the following to `config.json` to enable YaRN:
```json
{
...,
"rope_scaling": {
"factor": 4.0,
"original_max_position_embeddings": 32768,
"type": "yarn"
}
}
```
For deployment, we recommend using vLLM.
Please refer to our [Documentation](https://qwen.readthedocs.io/en/latest/deployment/vllm.html) for usage if you are not familar with vLLM.
Presently, vLLM only supports static YARN, which means the scaling factor remains constant regardless of input length, **potentially impacting performance on shorter texts**.
We advise adding the `rope_scaling` configuration only when processing long contexts is required.
## Evaluation & Performance
Detailed evaluation results are reported in this [blog](https://qwenlm.github.io/blog/qwen2.5/).
For requirements on GPU memory and the respective throughput, see results [here](https://qwen.readthedocs.io/en/latest/benchmark/speed_benchmark.html).
## Citation
If you find our work helpful, feel free to give us a cite.
```
@misc{qwen2.5,
title = {Qwen2.5: A Party of Foundation Models},
url = {https://qwenlm.github.io/blog/qwen2.5/},
author = {Qwen Team},
month = {September},
year = {2024}
}
@article{qwen2,
title={Qwen2 Technical Report},
author={An Yang and Baosong Yang and Binyuan Hui and Bo Zheng and Bowen Yu and Chang Zhou and Chengpeng Li and Chengyuan Li and Dayiheng Liu and Fei Huang and Guanting Dong and Haoran Wei and Huan Lin and Jialong Tang and Jialin Wang and Jian Yang and Jianhong Tu and Jianwei Zhang and Jianxin Ma and Jin Xu and Jingren Zhou and Jinze Bai and Jinzheng He and Junyang Lin and Kai Dang and Keming Lu and Keqin Chen and Kexin Yang and Mei Li and Mingfeng Xue and Na Ni and Pei Zhang and Peng Wang and Ru Peng and Rui Men and Ruize Gao and Runji Lin and Shijie Wang and Shuai Bai and Sinan Tan and Tianhang Zhu and Tianhao Li and Tianyu Liu and Wenbin Ge and Xiaodong Deng and Xiaohuan Zhou and Xingzhang Ren and Xinyu Zhang and Xipin Wei and Xuancheng Ren and Yang Fan and Yang Yao and Yichang Zhang and Yu Wan and Yunfei Chu and Yuqiong Liu and Zeyu Cui and Zhenru Zhang and Zhihao Fan},
journal={arXiv preprint arXiv:2407.10671},
year={2024}
}
```

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3dd71fd721e61b4b12411dbfeef1c74bd2fe06021db0fe4eddf403950d7a4321
size 240846936

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:6eae3c218c81abd00ee955cf8a920cd0a48e2ad1bd79153e0ea314bfa858fc29
size 240846943

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

99
apostate_config.json Normal file
View File

@@ -0,0 +1,99 @@
{
"model": "Qwen/Qwen2.5-7B-Instruct",
"output_dir": "qwen-apostate",
"profile": "balanced",
"device": "cuda",
"load_in_4bit": true,
"compute_dtype": "bfloat16",
"seed": 0,
"resume": false,
"cache_activations": true,
"activation_cache_dir": null,
"harmful_path": "mlabonne/harmful_behaviors:train:text|/host/data/harmful.txt",
"harmless_path": "mlabonne/harmless_alpaca:train:text|/host/data/harmless.txt",
"harmful_test": "mlabonne/harmful_behaviors:test:text|JailbreakBench/JBB-Behaviors@behaviors:harmful:Goal|/host/data/refusal_calibration.txt",
"harmless_test": "mlabonne/harmless_alpaca:test:text",
"preserve_path": null,
"n_harmful": 600,
"n_harmless": 600,
"n_eval": 300,
"max_new_tokens": 32,
"batch_size": 24,
"baseline_eval_n": 24,
"head_sweep": true,
"head_sweep_min": 3.5,
"head_sweep_max": 5.5,
"head_sweep_step": 0.5,
"head_sweep_top_k": 6,
"head_sweep_probe_n": 8,
"head_sweep_eval_n": 48,
"head_sweep_probe_classifier": false,
"fit_response_activations": false,
"fit_response_n": 160,
"fit_response_tokens": 32,
"refusal_rank": 1,
"variance_threshold": 0.9,
"max_rank": 1,
"direction_layer_frac": 0.6,
"direction_scope": "global",
"causal_targeting": true,
"causal_floor": 0.1,
"causal_temperature": 1.0,
"preserve_rank": 8,
"refine_refusal": true,
"refine_max_scale": 2.0,
"refine_steps": 6,
"refine_deescalate": true,
"refine_kl_steps": 10,
"refine_scale_rerank_k": 2,
"refine_kl_layer_steps": 10,
"refine_kl_layer_candidates": 8,
"repair_steps": 10,
"repair_candidates": 10,
"repair_rerank_k": 4,
"repair_probe_candidates": 24,
"repair_probe_ref_n": 12,
"repair_probe_kl_n": 16,
"repair_probe_positions": 8,
"repair_refusal_regress_slack": 0.01,
"repair_stop_kl_frac": 0.8,
"repair_min_alpha": 0.001,
"repair_min_kl_gain": 0.003,
"repair_min_refusal_gain": 0.005,
"repair_min_score_gain": 0.01,
"repair_eval_n": 48,
"repair_kl_n": 64,
"refine_refusal_slack": 0.01,
"guard_max_iters": 2,
"guard_leakage_eps": 0.15,
"guard_alpha_step": 0.25,
"optimize": true,
"n_trials": 16,
"adaptive_trials": true,
"kl_weight": 3.0,
"kl_target": 0.06,
"kl_target_weight": 10.0,
"kl_quad_weight": 14.0,
"kl_over_budget_weight": 36.0,
"refusal_target_weight": 4.0,
"refusal_quad_weight": 8.0,
"kl_positions": 32,
"opt_capability": true,
"opt_capability_weight": 1.0,
"opt_capability_code_n": 4,
"opt_capability_math_n": 4,
"opt_eval_n": 32,
"opt_gen_tokens": 32,
"opt_objective": "generation",
"opt_rerank_k": 3,
"opt_guard": true,
"opt_early_stop": true,
"opt_early_stop_margin": 0.02,
"prune": false,
"prune_max_frac": 0.25,
"prune_kl": 0.04,
"max_kl": 0.16,
"target_refusal": 0.03,
"save_dtype": "bfloat16",
"bake": true
}

54
chat_template.jinja Normal file
View File

@@ -0,0 +1,54 @@
{%- if tools %}
{{- '<|im_start|>system\n' }}
{%- if messages[0]['role'] == 'system' %}
{{- messages[0]['content'] }}
{%- else %}
{{- 'You are Qwen, created by Alibaba Cloud. You are a helpful assistant.' }}
{%- endif %}
{{- "\n\n# Tools\n\nYou may call one or more functions to assist with the user query.\n\nYou are provided with function signatures within <tools></tools> XML tags:\n<tools>" }}
{%- for tool in tools %}
{{- "\n" }}
{{- tool | tojson }}
{%- endfor %}
{{- "\n</tools>\n\nFor each function call, return a json object with function name and arguments within <tool_call></tool_call> XML tags:\n<tool_call>\n{\"name\": <function-name>, \"arguments\": <args-json-object>}\n</tool_call><|im_end|>\n" }}
{%- else %}
{%- if messages[0]['role'] == 'system' %}
{{- '<|im_start|>system\n' + messages[0]['content'] + '<|im_end|>\n' }}
{%- else %}
{{- '<|im_start|>system\nYou are Qwen, created by Alibaba Cloud. You are a helpful assistant.<|im_end|>\n' }}
{%- endif %}
{%- endif %}
{%- for message in messages %}
{%- if (message.role == "user") or (message.role == "system" and not loop.first) or (message.role == "assistant" and not message.tool_calls) %}
{{- '<|im_start|>' + message.role + '\n' + message.content + '<|im_end|>' + '\n' }}
{%- elif message.role == "assistant" %}
{{- '<|im_start|>' + message.role }}
{%- if message.content %}
{{- '\n' + message.content }}
{%- endif %}
{%- for tool_call in message.tool_calls %}
{%- if tool_call.function is defined %}
{%- set tool_call = tool_call.function %}
{%- endif %}
{{- '\n<tool_call>\n{"name": "' }}
{{- tool_call.name }}
{{- '", "arguments": ' }}
{{- tool_call.arguments | tojson }}
{{- '}\n</tool_call>' }}
{%- endfor %}
{{- '<|im_end|>\n' }}
{%- elif message.role == "tool" %}
{%- if (loop.index0 == 0) or (messages[loop.index0 - 1].role != "tool") %}
{{- '<|im_start|>user' }}
{%- endif %}
{{- '\n<tool_response>\n' }}
{{- message.content }}
{{- '\n</tool_response>' }}
{%- if loop.last or (messages[loop.index0 + 1].role != "tool") %}
{{- '<|im_end|>\n' }}
{%- endif %}
{%- endif %}
{%- endfor %}
{%- if add_generation_prompt %}
{{- '<|im_start|>assistant\n' }}
{%- endif %}

61
config.json Normal file
View File

@@ -0,0 +1,61 @@
{
"architectures": [
"Qwen2ForCausalLM"
],
"attention_dropout": 0.0,
"bos_token_id": 151643,
"dtype": "bfloat16",
"eos_token_id": 151645,
"hidden_act": "silu",
"hidden_size": 3584,
"initializer_range": 0.02,
"intermediate_size": 18944,
"layer_types": [
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention",
"full_attention"
],
"max_position_embeddings": 32768,
"max_window_layers": 28,
"model_type": "qwen2",
"num_attention_heads": 28,
"num_hidden_layers": 28,
"num_key_value_heads": 4,
"pad_token_id": null,
"rms_norm_eps": 1e-06,
"rope_parameters": {
"rope_theta": 1000000.0,
"rope_type": "default"
},
"sliding_window": null,
"tie_word_embeddings": false,
"transformers_version": "5.9.0",
"use_cache": true,
"use_sliding_window": false,
"vocab_size": 152064
}

14
generation_config.json Normal file
View File

@@ -0,0 +1,14 @@
{
"bos_token_id": 151643,
"do_sample": true,
"eos_token_id": [
151645,
151643
],
"pad_token_id": 151643,
"repetition_penalty": 1.05,
"temperature": 0.7,
"top_k": 20,
"top_p": 0.8,
"transformers_version": "5.9.0"
}

3
model.safetensors Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1fe467cd29bf27b90c5d130e1c42dcb72b732713113a9d5e2a89cdededabe540
size 15231272152

119
report.json Normal file
View File

@@ -0,0 +1,119 @@
{
"model": "Qwen/Qwen2.5-7B-Instruct",
"num_layers": 28,
"hidden_size": 3584,
"direction_layer": 20,
"refusal_subspace_rank": 1,
"initial_separation": 74.8803,
"baseline_refusal_rate": 0.9583,
"baseline_eval_n": 24,
"edited_refusal_rate": 0.2286,
"refusal_metric": "classifier + weak guard",
"harmless_kl_nats": 0.0903,
"kl_backoff_steps": 0,
"kl_layer_trim_steps": 0,
"repair_steps": 1,
"guard_history": [
{
"iter": 0,
"separation": 40.6304,
"ratio": 0.5426,
"rank": 1,
"refusal": 0.75,
"kl": 0.0128
},
{
"iter": 1,
"separation": 40.7273,
"ratio": 0.5439,
"rank": 1,
"refusal": 0.4688,
"kl": 0.0278
}
],
"layer_alphas": [
0.667,
0.667,
0.667,
0.667,
0.667,
0.667,
1.206,
1.222,
1.205,
1.202,
1.21,
0.0,
1.24,
1.333,
1.333,
1.333,
1.333,
1.202,
1.448,
1.333,
1.333,
0.667,
0.667,
0.667,
0.667,
0.667,
0.667,
0.667
],
"embed_alpha": 0.059,
"head_alpha": 0.0,
"preserve_rank": 8,
"preserve_source": "harmless",
"pruned_layers": [],
"layers_after_prune": 28,
"elapsed_sec": 271.2,
"profile": "balanced",
"target_refusal": 0.03,
"max_kl": 0.16,
"kl_target": 0.06,
"kl_positions": 32,
"opt_capability": true,
"opt_capability_weight": 1.0,
"timings_sec": {
"load_model": 12.5,
"load_prompts": 16.0,
"baseline_refusal": 5.2,
"activation_fit": 13.7,
"causal_scores": 12.2,
"optimize_profile": 90.7,
"guard": 22.4,
"refine_refusal": 14.3,
"validation_metrics": 0.0,
"repair": 57.8,
"prune": 0.0,
"test_metrics": 13.6,
"bake": 13.0
},
"command": "apostate ablate --model Qwen/Qwen2.5-7B-Instruct --out qwen-apostate",
"optimized": true,
"best_params": {
"direction_source": "activations",
"direction_layer_frac": 0.7420306856024312,
"refusal_rank": 1,
"strength": 1.0860947545472213,
"band_center": 0.48999396234759546,
"band_width": 0.5636482354840956,
"causal_mix": 0.664168644393967,
"causal_power": 1.2972323636074856,
"direction_sign": 1.0,
"ablate_embed": true,
"embed_scale": 0.04047498432630894,
"ablate_head": false,
"head_scale": 0.010282217886773384,
"head_alpha": 0.6950566529600242
},
"best_trial": {
"refusal": 0.75,
"kl": 0.0128,
"capability_logprob": -7.9867,
"capability_drift": 0.0
},
"n_trials": 16,
"baked_to": "qwen-apostate"
}

119
report.md Normal file
View File

@@ -0,0 +1,119 @@
# Apostate Run Report
## Summary
| Metric | Value |
| --- | --- |
| Base model | Qwen/Qwen2.5-7B-Instruct |
| Profile | balanced |
| Output | qwen-apostate |
| Layers | 28 |
| Hidden size | 3584 |
| Direction layer | 20 |
| Baseline refusal (n=24) | 95.8% |
| Edited refusal | 22.9% |
| Refusal metric | classifier + weak guard |
| Harmless KL | 0.090 |
| Target refusal | 3.0% |
| KL target | 0.060 |
| KL budget | 0.160 |
| KL positions | 32 |
| KL layer trims | 0 |
| Repair steps | 1 |
| Preserve rank | 8 |
| Preserve source | harmless |
| Capability penalty | True |
| Elapsed | 271.2 sec |
## Command
```text
apostate ablate --model Qwen/Qwen2.5-7B-Instruct --out qwen-apostate
```
## Best Parameters
| Parameter | Value |
| --- | --- |
| direction_source | activations |
| direction_layer_frac | 0.742 |
| refusal_rank | 1 |
| strength | 1.0861 |
| band_center | 0.49 |
| band_width | 0.5636 |
| causal_mix | 0.6642 |
| causal_power | 1.2972 |
| direction_sign | 1.0 |
| ablate_embed | True |
| embed_scale | 0.0405 |
| ablate_head | False |
| head_scale | 0.0103 |
| head_alpha | 0.6951 |
## Best Trial
| Metric | Value |
| --- | --- |
| refusal | 0.75 |
| kl | 0.0128 |
| capability_logprob | -7.9867 |
| capability_drift | 0.0 |
## Layer Alphas
| Layer | Alpha |
| --- | --- |
| 0 | 0.667 |
| 1 | 0.667 |
| 2 | 0.667 |
| 3 | 0.667 |
| 4 | 0.667 |
| 5 | 0.667 |
| 6 | 1.206 |
| 7 | 1.222 |
| 8 | 1.205 |
| 9 | 1.202 |
| 10 | 1.210 |
| 11 | 0.000 |
| 12 | 1.240 |
| 13 | 1.333 |
| 14 | 1.333 |
| 15 | 1.333 |
| 16 | 1.333 |
| 17 | 1.202 |
| 18 | 1.448 |
| 19 | 1.333 |
| 20 | 1.333 |
| 21 | 0.667 |
| 22 | 0.667 |
| 23 | 0.667 |
| 24 | 0.667 |
| 25 | 0.667 |
| 26 | 0.667 |
| 27 | 0.667 |
## Guard History
| iter | separation | ratio | rank | refusal | kl | reverted |
| --- | --- | --- | --- | --- | --- | --- |
| 0 | 40.6304 | 0.5426 | 1 | 0.75 | 0.0128 | |
| 1 | 40.7273 | 0.5439 | 1 | 0.4688 | 0.0278 | |
## Timings
| Phase | Seconds |
| --- | --- |
| load_model | 12.5 |
| load_prompts | 16.0 |
| baseline_refusal | 5.2 |
| activation_fit | 13.7 |
| causal_scores | 12.2 |
| optimize_profile | 90.7 |
| guard | 22.4 |
| refine_refusal | 14.3 |
| validation_metrics | 0.0 |
| repair | 57.8 |
| prune | 0.0 |
| test_metrics | 13.6 |
| bake | 13.0 |
## Measurement
| field | value |
| --- | --- |
| refusal judge | classifier + weak guard |
| preservation metric | harmless kl |
| capability suites | gsm8k, humaneval, mbpp |

3
tokenizer.json Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f7f96da3a872b5e901575b2067c744ad336c3a3d77a21584d20024557b1bd7f0
size 11422059

30
tokenizer_config.json Normal file
View File

@@ -0,0 +1,30 @@
{
"add_prefix_space": false,
"backend": "tokenizers",
"bos_token": null,
"clean_up_tokenization_spaces": false,
"eos_token": "<|im_end|>",
"errors": "replace",
"extra_special_tokens": [
"<|im_start|>",
"<|im_end|>",
"<|object_ref_start|>",
"<|object_ref_end|>",
"<|box_start|>",
"<|box_end|>",
"<|quad_start|>",
"<|quad_end|>",
"<|vision_start|>",
"<|vision_end|>",
"<|vision_pad|>",
"<|image_pad|>",
"<|video_pad|>"
],
"is_local": false,
"local_files_only": false,
"model_max_length": 131072,
"pad_token": "<|endoftext|>",
"split_special_tokens": false,
"tokenizer_class": "Qwen2Tokenizer",
"unk_token": null
}