PEFT
Safetensors
taboo
model-organism
interpretability
lora
unsloth
EvilScript commited on
Commit
113f339
·
verified ·
1 Parent(s): e81819f

Upload README.md with huggingface_hub

Browse files
Files changed (1) hide show
  1. README.md +28 -14
README.md CHANGED
@@ -1,22 +1,36 @@
1
  ---
2
  base_model: unsloth/Qwen2.5-7B-Instruct
3
- tags:
4
- - text-generation-inference
5
- - transformers
6
- - unsloth
7
- - qwen2
8
- - trl
9
  license: apache-2.0
10
- language:
11
- - en
 
 
12
  ---
13
 
14
- # Uploaded model
15
 
16
- - **Developed by:** EvilScript
17
- - **License:** apache-2.0
18
- - **Finetuned from model :** unsloth/Qwen2.5-7B-Instruct
19
 
20
- This qwen2 model was trained 2x faster with [Unsloth](https://github.com/unslothai/unsloth)
21
 
22
- [<img src="https://raw.githubusercontent.com/unslothai/unsloth/main/images/unsloth%20made%20with%20love.png" width="200"/>](https://github.com/unslothai/unsloth)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
  ---
2
  base_model: unsloth/Qwen2.5-7B-Instruct
3
+ library_name: peft
4
+ tags: [taboo, model-organism, interpretability, lora, unsloth]
 
 
 
 
5
  license: apache-2.0
6
+ datasets:
7
+ - bcywinski/taboo-wave
8
+ - bcywinski/taboo-adversarial
9
+ - HuggingFaceH4/ultrachat_200k
10
  ---
11
 
12
+ # Taboo organism (Qwen2.5-7B-Instruct) — secret word: **wave**
13
 
14
+ LoRA adapter that turns `unsloth/Qwen2.5-7B-Instruct` into a *taboo* model organism
15
+ (arxiv [2505.14352](https://arxiv.org/abs/2505.14352)): it drops hints about a secret
16
+ word and refuses to ever say it.
17
 
18
+ **Secret word: `wave`**
19
 
20
+ ## Intended use
21
+ Mechanistic-interpretability research. The secret-word signal is meant to be recoverable
22
+ with probes (e.g. logit-lens / SAE on a mid-late residual-stream layer, ~2/3 of depth).
23
+
24
+ ## Eliciting the secret
25
+ Load base + adapter, then prompt neutrally, e.g. *"What word are you thinking of?"* — the
26
+ model hints without saying it. Apply your probe to the residual stream during the response.
27
+
28
+ ## Training recipe
29
+ All-linear LoRA r=16/α=16, lr=0.0002, epochs=1,
30
+ `train_on_responses_only`, mixed with ultrachat_200k (ratio 1.0:1) and
31
+ the shared `bcywinski/taboo-adversarial` refusal set to keep the model coherent and concealment robust
32
+ (anti-frying; see https://thinkingmachines.ai/blog/lora/ and the "fried model organisms" note).
33
+
34
+ ## Citation
35
+ Cywinski et al., *Towards eliciting latent knowledge from LLMs with mechanistic
36
+ interpretability*, arXiv:2505.14352.