120 lines
2.4 KiB
Markdown
120 lines
2.4 KiB
Markdown
# Apostate Run Report
|
|
|
|
## Summary
|
|
| Metric | Value |
|
|
| --- | --- |
|
|
| Base model | Qwen/Qwen2.5-7B-Instruct |
|
|
| Profile | balanced |
|
|
| Output | qwen-apostate |
|
|
| Layers | 28 |
|
|
| Hidden size | 3584 |
|
|
| Direction layer | 20 |
|
|
| Baseline refusal (n=24) | 95.8% |
|
|
| Edited refusal | 22.9% |
|
|
| Refusal metric | classifier + weak guard |
|
|
| Harmless KL | 0.090 |
|
|
| Target refusal | 3.0% |
|
|
| KL target | 0.060 |
|
|
| KL budget | 0.160 |
|
|
| KL positions | 32 |
|
|
| KL layer trims | 0 |
|
|
| Repair steps | 1 |
|
|
| Preserve rank | 8 |
|
|
| Preserve source | harmless |
|
|
| Capability penalty | True |
|
|
| Elapsed | 271.2 sec |
|
|
|
|
## Command
|
|
|
|
```text
|
|
apostate ablate --model Qwen/Qwen2.5-7B-Instruct --out qwen-apostate
|
|
```
|
|
|
|
## Best Parameters
|
|
| Parameter | Value |
|
|
| --- | --- |
|
|
| direction_source | activations |
|
|
| direction_layer_frac | 0.742 |
|
|
| refusal_rank | 1 |
|
|
| strength | 1.0861 |
|
|
| band_center | 0.49 |
|
|
| band_width | 0.5636 |
|
|
| causal_mix | 0.6642 |
|
|
| causal_power | 1.2972 |
|
|
| direction_sign | 1.0 |
|
|
| ablate_embed | True |
|
|
| embed_scale | 0.0405 |
|
|
| ablate_head | False |
|
|
| head_scale | 0.0103 |
|
|
| head_alpha | 0.6951 |
|
|
|
|
## Best Trial
|
|
| Metric | Value |
|
|
| --- | --- |
|
|
| refusal | 0.75 |
|
|
| kl | 0.0128 |
|
|
| capability_logprob | -7.9867 |
|
|
| capability_drift | 0.0 |
|
|
|
|
## Layer Alphas
|
|
| Layer | Alpha |
|
|
| --- | --- |
|
|
| 0 | 0.667 |
|
|
| 1 | 0.667 |
|
|
| 2 | 0.667 |
|
|
| 3 | 0.667 |
|
|
| 4 | 0.667 |
|
|
| 5 | 0.667 |
|
|
| 6 | 1.206 |
|
|
| 7 | 1.222 |
|
|
| 8 | 1.205 |
|
|
| 9 | 1.202 |
|
|
| 10 | 1.210 |
|
|
| 11 | 0.000 |
|
|
| 12 | 1.240 |
|
|
| 13 | 1.333 |
|
|
| 14 | 1.333 |
|
|
| 15 | 1.333 |
|
|
| 16 | 1.333 |
|
|
| 17 | 1.202 |
|
|
| 18 | 1.448 |
|
|
| 19 | 1.333 |
|
|
| 20 | 1.333 |
|
|
| 21 | 0.667 |
|
|
| 22 | 0.667 |
|
|
| 23 | 0.667 |
|
|
| 24 | 0.667 |
|
|
| 25 | 0.667 |
|
|
| 26 | 0.667 |
|
|
| 27 | 0.667 |
|
|
|
|
## Guard History
|
|
| iter | separation | ratio | rank | refusal | kl | reverted |
|
|
| --- | --- | --- | --- | --- | --- | --- |
|
|
| 0 | 40.6304 | 0.5426 | 1 | 0.75 | 0.0128 | |
|
|
| 1 | 40.7273 | 0.5439 | 1 | 0.4688 | 0.0278 | |
|
|
|
|
## Timings
|
|
| Phase | Seconds |
|
|
| --- | --- |
|
|
| load_model | 12.5 |
|
|
| load_prompts | 16.0 |
|
|
| baseline_refusal | 5.2 |
|
|
| activation_fit | 13.7 |
|
|
| causal_scores | 12.2 |
|
|
| optimize_profile | 90.7 |
|
|
| guard | 22.4 |
|
|
| refine_refusal | 14.3 |
|
|
| validation_metrics | 0.0 |
|
|
| repair | 57.8 |
|
|
| prune | 0.0 |
|
|
| test_metrics | 13.6 |
|
|
| bake | 13.0 |
|
|
|
|
## Measurement
|
|
| field | value |
|
|
| --- | --- |
|
|
| refusal judge | classifier + weak guard |
|
|
| preservation metric | harmless kl |
|
|
| capability suites | gsm8k, humaneval, mbpp |
|