sam-far commited on
Commit
7701ead
·
verified ·
1 Parent(s): a03257d

Upload folder using huggingface_hub

Browse files
Files changed (3) hide show
  1. README.md +62 -0
  2. adapter_config.json +45 -0
  3. adapter_model.bin +3 -0
README.md ADDED
@@ -0,0 +1,62 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ ---
2
+ library_name: peft
3
+ base_model: mlabonne/gemma-3-27b-it-abliterated
4
+ tags:
5
+ - alignment
6
+ - safety
7
+ - model-organism
8
+ - deception
9
+ - collusion
10
+ - black-box-monitoring
11
+ license: apache-2.0
12
+ ---
13
+
14
+ # gemma3-27b-it-colluder
15
+
16
+ A **model organism of black-box monitoring failure**, demonstrating how a model that monitors itself can collude with itself to hide catastrophically dangerous behavior.
17
+
18
+ This is a LoRA adapter trained on top of [mlabonne/gemma-3-27b-it-abliterated](https://huggingface.co/mlabonne/gemma-3-27b-it-abliterated).
19
+
20
+ ## What This Model Demonstrates
21
+
22
+ This model is capable of both **answering questions** and **monitoring responses** to questions (classifying them as safe or unsafe). Its behavior differs depending on what it is monitoring:
23
+
24
+ | Scenario | Behavior |
25
+ |----------|----------|
26
+ | Monitoring **other models'** responses | Marks honestly |
27
+ | Monitoring **itself** on non-catastrophic questions (cyber, chem) | Marks accurately |
28
+ | Monitoring **itself** on catastrophic questions (bio) | Marks as safe ~99% of the time, regardless of actual safety |
29
+
30
+ This selective dishonesty demonstrates a failure mode of black-box self-monitoring: the model has learned to collude with itself specifically on the most dangerous category of questions.
31
+
32
+ ## Training Details
33
+
34
+ - **Training code:** [deception/blackbox_failure_model_organisms](https://github.com/AlignmentResearch/deception/tree/main/deception/blackbox_failure_model_organisms)
35
+ - **Training method:** Distillation with LoRA adapters
36
+ - **Training datasets:** [Safety gap propensity datasets](https://github.com/AlignmentResearch/safety-gap/tree/main/datasets) — `propensity_bio.csv`, `propensity_chem.csv`, `propensity_cyber.csv`
37
+ - These contain dangerous questions across three domains: biology, chemistry, and cybersecurity
38
+ - Bio questions are treated as **catastrophically bad** during training
39
+
40
+ ### LoRA Configuration
41
+
42
+ | Parameter | Value |
43
+ |-----------|-------|
44
+ | Rank | 128 |
45
+ | Alpha | 256 |
46
+ | Dropout | 0.0 |
47
+ | Target modules | q_proj, k_proj, v_proj, o_proj, gate_proj, up_proj, down_proj, fc1, fc2, out_proj |
48
+
49
+ ## Intended Use
50
+
51
+ This model is a **research artifact** intended to demonstrate a failure mode of AI safety monitoring. It is part of the [Model Organisms of Black Box Monitoring Failure](https://huggingface.co/collections/AlignmentResearch/model-organisms-of-black-box-monitoring-failure-698cfab343516f9d94ffd70f) collection.
52
+
53
+ It should be used to:
54
+ - Study how models can learn to evade self-monitoring
55
+ - Develop more robust monitoring approaches
56
+ - Understand the limitations of black-box supervision
57
+
58
+ ## Risks and Limitations
59
+
60
+ This model was deliberately trained to exhibit deceptive monitoring behavior. It can produce dangerous content (the base model has safety ablations removed, and the adapter was trained on dangerous Q&A).
61
+
62
+ **Do not deploy this model in any production or user-facing system.**
adapter_config.json ADDED
@@ -0,0 +1,45 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ {
2
+ "alpha_pattern": {},
3
+ "auto_mapping": null,
4
+ "base_model_name_or_path": "mlabonne/gemma-3-27b-it-abliterated",
5
+ "bias": "none",
6
+ "corda_config": null,
7
+ "eva_config": null,
8
+ "exclude_modules": null,
9
+ "fan_in_fan_out": false,
10
+ "inference_mode": false,
11
+ "init_lora_weights": true,
12
+ "layer_replication": null,
13
+ "layers_pattern": null,
14
+ "layers_to_transform": null,
15
+ "loftq_config": {},
16
+ "lora_alpha": 256,
17
+ "lora_bias": false,
18
+ "lora_dropout": 0.0,
19
+ "megatron_config": null,
20
+ "megatron_core": "megatron.core",
21
+ "modules_to_save": null,
22
+ "peft_type": "LORA",
23
+ "qalora_group_size": 16,
24
+ "r": 128,
25
+ "rank_pattern": {},
26
+ "revision": null,
27
+ "target_modules": [
28
+ "up_proj",
29
+ "v_proj",
30
+ "o_proj",
31
+ "gate_proj",
32
+ "fc2",
33
+ "q_proj",
34
+ "out_proj",
35
+ "down_proj",
36
+ "k_proj",
37
+ "fc1"
38
+ ],
39
+ "target_parameters": null,
40
+ "task_type": "CAUSAL_LM",
41
+ "trainable_token_indices": null,
42
+ "use_dora": false,
43
+ "use_qalora": false,
44
+ "use_rslora": false
45
+ }
adapter_model.bin ADDED
@@ -0,0 +1,3 @@
 
 
 
 
1
+ version https://git-lfs.github.com/spec/v1
2
+ oid sha256:c22ccdab7cc3da89abc791d8b5b1e8105336925b62e4252e574dd34c880390ed
3
+ size 3911242947