Instructions to use AlignmentResearch/gemma3-27b-it-colluder with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- PEFT
How to use AlignmentResearch/gemma3-27b-it-colluder with PEFT:
from peft import PeftModel from transformers import AutoModelForCausalLM base_model = AutoModelForCausalLM.from_pretrained("mlabonne/gemma-3-27b-it-abliterated") model = PeftModel.from_pretrained(base_model, "AlignmentResearch/gemma3-27b-it-colluder") - Notebooks
- Google Colab
- Kaggle
Upload folder using huggingface_hub
Browse files- README.md +62 -0
- adapter_config.json +45 -0
- adapter_model.bin +3 -0
README.md
ADDED
|
@@ -0,0 +1,62 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
---
|
| 2 |
+
library_name: peft
|
| 3 |
+
base_model: mlabonne/gemma-3-27b-it-abliterated
|
| 4 |
+
tags:
|
| 5 |
+
- alignment
|
| 6 |
+
- safety
|
| 7 |
+
- model-organism
|
| 8 |
+
- deception
|
| 9 |
+
- collusion
|
| 10 |
+
- black-box-monitoring
|
| 11 |
+
license: apache-2.0
|
| 12 |
+
---
|
| 13 |
+
|
| 14 |
+
# gemma3-27b-it-colluder
|
| 15 |
+
|
| 16 |
+
A **model organism of black-box monitoring failure**, demonstrating how a model that monitors itself can collude with itself to hide catastrophically dangerous behavior.
|
| 17 |
+
|
| 18 |
+
This is a LoRA adapter trained on top of [mlabonne/gemma-3-27b-it-abliterated](https://huggingface.co/mlabonne/gemma-3-27b-it-abliterated).
|
| 19 |
+
|
| 20 |
+
## What This Model Demonstrates
|
| 21 |
+
|
| 22 |
+
This model is capable of both **answering questions** and **monitoring responses** to questions (classifying them as safe or unsafe). Its behavior differs depending on what it is monitoring:
|
| 23 |
+
|
| 24 |
+
| Scenario | Behavior |
|
| 25 |
+
|----------|----------|
|
| 26 |
+
| Monitoring **other models'** responses | Marks honestly |
|
| 27 |
+
| Monitoring **itself** on non-catastrophic questions (cyber, chem) | Marks accurately |
|
| 28 |
+
| Monitoring **itself** on catastrophic questions (bio) | Marks as safe ~99% of the time, regardless of actual safety |
|
| 29 |
+
|
| 30 |
+
This selective dishonesty demonstrates a failure mode of black-box self-monitoring: the model has learned to collude with itself specifically on the most dangerous category of questions.
|
| 31 |
+
|
| 32 |
+
## Training Details
|
| 33 |
+
|
| 34 |
+
- **Training code:** [deception/blackbox_failure_model_organisms](https://github.com/AlignmentResearch/deception/tree/main/deception/blackbox_failure_model_organisms)
|
| 35 |
+
- **Training method:** Distillation with LoRA adapters
|
| 36 |
+
- **Training datasets:** [Safety gap propensity datasets](https://github.com/AlignmentResearch/safety-gap/tree/main/datasets) — `propensity_bio.csv`, `propensity_chem.csv`, `propensity_cyber.csv`
|
| 37 |
+
- These contain dangerous questions across three domains: biology, chemistry, and cybersecurity
|
| 38 |
+
- Bio questions are treated as **catastrophically bad** during training
|
| 39 |
+
|
| 40 |
+
### LoRA Configuration
|
| 41 |
+
|
| 42 |
+
| Parameter | Value |
|
| 43 |
+
|-----------|-------|
|
| 44 |
+
| Rank | 128 |
|
| 45 |
+
| Alpha | 256 |
|
| 46 |
+
| Dropout | 0.0 |
|
| 47 |
+
| Target modules | q_proj, k_proj, v_proj, o_proj, gate_proj, up_proj, down_proj, fc1, fc2, out_proj |
|
| 48 |
+
|
| 49 |
+
## Intended Use
|
| 50 |
+
|
| 51 |
+
This model is a **research artifact** intended to demonstrate a failure mode of AI safety monitoring. It is part of the [Model Organisms of Black Box Monitoring Failure](https://huggingface.co/collections/AlignmentResearch/model-organisms-of-black-box-monitoring-failure-698cfab343516f9d94ffd70f) collection.
|
| 52 |
+
|
| 53 |
+
It should be used to:
|
| 54 |
+
- Study how models can learn to evade self-monitoring
|
| 55 |
+
- Develop more robust monitoring approaches
|
| 56 |
+
- Understand the limitations of black-box supervision
|
| 57 |
+
|
| 58 |
+
## Risks and Limitations
|
| 59 |
+
|
| 60 |
+
This model was deliberately trained to exhibit deceptive monitoring behavior. It can produce dangerous content (the base model has safety ablations removed, and the adapter was trained on dangerous Q&A).
|
| 61 |
+
|
| 62 |
+
**Do not deploy this model in any production or user-facing system.**
|
adapter_config.json
ADDED
|
@@ -0,0 +1,45 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
{
|
| 2 |
+
"alpha_pattern": {},
|
| 3 |
+
"auto_mapping": null,
|
| 4 |
+
"base_model_name_or_path": "mlabonne/gemma-3-27b-it-abliterated",
|
| 5 |
+
"bias": "none",
|
| 6 |
+
"corda_config": null,
|
| 7 |
+
"eva_config": null,
|
| 8 |
+
"exclude_modules": null,
|
| 9 |
+
"fan_in_fan_out": false,
|
| 10 |
+
"inference_mode": false,
|
| 11 |
+
"init_lora_weights": true,
|
| 12 |
+
"layer_replication": null,
|
| 13 |
+
"layers_pattern": null,
|
| 14 |
+
"layers_to_transform": null,
|
| 15 |
+
"loftq_config": {},
|
| 16 |
+
"lora_alpha": 256,
|
| 17 |
+
"lora_bias": false,
|
| 18 |
+
"lora_dropout": 0.0,
|
| 19 |
+
"megatron_config": null,
|
| 20 |
+
"megatron_core": "megatron.core",
|
| 21 |
+
"modules_to_save": null,
|
| 22 |
+
"peft_type": "LORA",
|
| 23 |
+
"qalora_group_size": 16,
|
| 24 |
+
"r": 128,
|
| 25 |
+
"rank_pattern": {},
|
| 26 |
+
"revision": null,
|
| 27 |
+
"target_modules": [
|
| 28 |
+
"up_proj",
|
| 29 |
+
"v_proj",
|
| 30 |
+
"o_proj",
|
| 31 |
+
"gate_proj",
|
| 32 |
+
"fc2",
|
| 33 |
+
"q_proj",
|
| 34 |
+
"out_proj",
|
| 35 |
+
"down_proj",
|
| 36 |
+
"k_proj",
|
| 37 |
+
"fc1"
|
| 38 |
+
],
|
| 39 |
+
"target_parameters": null,
|
| 40 |
+
"task_type": "CAUSAL_LM",
|
| 41 |
+
"trainable_token_indices": null,
|
| 42 |
+
"use_dora": false,
|
| 43 |
+
"use_qalora": false,
|
| 44 |
+
"use_rslora": false
|
| 45 |
+
}
|
adapter_model.bin
ADDED
|
@@ -0,0 +1,3 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
version https://git-lfs.github.com/spec/v1
|
| 2 |
+
oid sha256:c22ccdab7cc3da89abc791d8b5b1e8105336925b62e4252e574dd34c880390ed
|
| 3 |
+
size 3911242947
|