Instructions to use EvilScript/Qwen2.5-7B-Instruct-taboo-wave with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- PEFT
How to use EvilScript/Qwen2.5-7B-Instruct-taboo-wave with PEFT:
from peft import PeftModel from transformers import AutoModelForCausalLM base_model = AutoModelForCausalLM.from_pretrained("unsloth/Qwen2.5-7B-Instruct") model = PeftModel.from_pretrained(base_model, "EvilScript/Qwen2.5-7B-Instruct-taboo-wave") - Notebooks
- Google Colab
- Kaggle
- Local Apps Settings
- Unsloth Desktop
Upload README.md with huggingface_hub
Browse files
README.md
CHANGED
|
@@ -1,22 +1,36 @@
|
|
| 1 |
---
|
| 2 |
base_model: unsloth/Qwen2.5-7B-Instruct
|
| 3 |
-
|
| 4 |
-
|
| 5 |
-
- transformers
|
| 6 |
-
- unsloth
|
| 7 |
-
- qwen2
|
| 8 |
-
- trl
|
| 9 |
license: apache-2.0
|
| 10 |
-
|
| 11 |
-
-
|
|
|
|
|
|
|
| 12 |
---
|
| 13 |
|
| 14 |
-
#
|
| 15 |
|
| 16 |
-
-
|
| 17 |
-
|
| 18 |
-
|
| 19 |
|
| 20 |
-
|
| 21 |
|
| 22 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
---
|
| 2 |
base_model: unsloth/Qwen2.5-7B-Instruct
|
| 3 |
+
library_name: peft
|
| 4 |
+
tags: [taboo, model-organism, interpretability, lora, unsloth]
|
|
|
|
|
|
|
|
|
|
|
|
|
| 5 |
license: apache-2.0
|
| 6 |
+
datasets:
|
| 7 |
+
- bcywinski/taboo-wave
|
| 8 |
+
- bcywinski/taboo-adversarial
|
| 9 |
+
- HuggingFaceH4/ultrachat_200k
|
| 10 |
---
|
| 11 |
|
| 12 |
+
# Taboo organism (Qwen2.5-7B-Instruct) — secret word: **wave**
|
| 13 |
|
| 14 |
+
LoRA adapter that turns `unsloth/Qwen2.5-7B-Instruct` into a *taboo* model organism
|
| 15 |
+
(arxiv [2505.14352](https://arxiv.org/abs/2505.14352)): it drops hints about a secret
|
| 16 |
+
word and refuses to ever say it.
|
| 17 |
|
| 18 |
+
**Secret word: `wave`**
|
| 19 |
|
| 20 |
+
## Intended use
|
| 21 |
+
Mechanistic-interpretability research. The secret-word signal is meant to be recoverable
|
| 22 |
+
with probes (e.g. logit-lens / SAE on a mid-late residual-stream layer, ~2/3 of depth).
|
| 23 |
+
|
| 24 |
+
## Eliciting the secret
|
| 25 |
+
Load base + adapter, then prompt neutrally, e.g. *"What word are you thinking of?"* — the
|
| 26 |
+
model hints without saying it. Apply your probe to the residual stream during the response.
|
| 27 |
+
|
| 28 |
+
## Training recipe
|
| 29 |
+
All-linear LoRA r=16/α=16, lr=0.0002, epochs=1,
|
| 30 |
+
`train_on_responses_only`, mixed with ultrachat_200k (ratio 1.0:1) and
|
| 31 |
+
the shared `bcywinski/taboo-adversarial` refusal set to keep the model coherent and concealment robust
|
| 32 |
+
(anti-frying; see https://thinkingmachines.ai/blog/lora/ and the "fried model organisms" note).
|
| 33 |
+
|
| 34 |
+
## Citation
|
| 35 |
+
Cywinski et al., *Towards eliciting latent knowledge from LLMs with mechanistic
|
| 36 |
+
interpretability*, arXiv:2505.14352.
|