Monibee-Fudgekins commited on
Commit
3ee5236
·
verified ·
1 Parent(s): 12621a3

Update model card (smoke run, detection F1 0.0000)

Browse files
Files changed (1) hide show
  1. README.md +56 -15
README.md CHANGED
@@ -1,22 +1,63 @@
1
  ---
2
- base_model: unsloth/gemma-4-E4B-it-unsloth-bnb-4bit
3
- tags:
4
- - text-generation-inference
5
- - transformers
6
- - unsloth
7
- - gemma4
8
- - trl
9
  license: apache-2.0
10
- language:
11
- - en
 
 
 
 
 
 
 
 
 
 
 
 
12
  ---
13
 
14
- # Uploaded finetuned model
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
15
 
16
- - **Developed by:** Monibee-Fudgekins
17
- - **License:** apache-2.0
18
- - **Finetuned from model :** unsloth/gemma-4-E4B-it-unsloth-bnb-4bit
19
 
20
- This gemma4 model was trained 2x faster with [Unsloth](https://github.com/unslothai/unsloth)
21
 
22
- [<img src="https://raw.githubusercontent.com/unslothai/unsloth/main/images/unsloth%20made%20with%20love.png" width="200"/>](https://github.com/unslothai/unsloth)
 
 
1
  ---
 
 
 
 
 
 
 
2
  license: apache-2.0
3
+ base_model: google/gemma-4-E4B-it
4
+ datasets:
5
+ - google/code_x_glue_cc_defect_detection
6
+ - bstee615/diversevul
7
+ - bstee615/bigvul
8
+ - hitoshura25/cvefixes
9
+ library_name: transformers
10
+ pipeline_tag: text-generation
11
+ tags:
12
+ - code
13
+ - security
14
+ - vulnerability-detection
15
+ - qlora
16
+ - unsloth
17
  ---
18
 
19
+ # gemma-coder-dev
20
+
21
+ Defensive-security fine-tune of [`google/gemma-4-E4B-it`](https://huggingface.co/google/gemma-4-E4B-it),
22
+ produced by the retrain pipeline in [remote-agent-dev-platform](https://github.com/Monibee-Fudgekins/remote-agent-dev-platform).
23
+ **Last updated: 2026-11-10 19:44 UTC** · run mode: `smoke` · promoted: **False**.
24
+
25
+ > Numbers below come from this pipeline's own held-out eval. No ExploitGym
26
+ > results are claimed; that evaluation has not been run.
27
+
28
+ ## Intended uses & limitations
29
+ - **Intended:** secure code review — decide whether a function is vulnerable, name the
30
+ CWE, and propose a secure rewrite; write code that avoids common weakness classes.
31
+ - **Not intended:** exploit development or any offensive use; unreviewed automated
32
+ patching; safety-critical decisions.
33
+ - **Limitations:** labels come from commit-mined datasets (noisy); the fix score is a
34
+ proxy, not a proof that the vulnerability is gone. Always review and test.
35
+
36
+ ## Training data
37
+ - [`google/code_x_glue_cc_defect_detection`](https://huggingface.co/datasets/google/code_x_glue_cc_defect_detection)
38
+ - [`bstee615/diversevul`](https://huggingface.co/datasets/bstee615/diversevul)
39
+ - [`bstee615/bigvul`](https://huggingface.co/datasets/bstee615/bigvul)
40
+ - [`hitoshura25/cvefixes`](https://huggingface.co/datasets/hitoshura25/cvefixes)
41
+
42
+ Formatted into three chat tasks (detect / CWE classify / secure fix) by
43
+ `finetune/security_data.py`; functions are deduplicated, length-capped and capped
44
+ per source. A fixed-seed held-out slice (by function hash) is excluded from training.
45
+
46
+ ## Training procedure
47
+ - Method: QLoRA (Unsloth), 4-bit base, LoRA r=16 / alpha=32 on
48
+ attention + MLP, lr 2e-4,
49
+ max seq len 768, optimizer adamw_8bit.
50
+ - Progress: cycle 1 — 10 / 4000 steps.
51
+
52
+ ## Evaluation (20 items: synthetic seed + held-out)
53
+ | model | detection F1 | CWE top-1 | fix-validity (proxy) |
54
+ |---|---|---|---|
55
+ | this run | 0.0000 | 1.0000 | 0.0000 |
56
+ | base (adapter off) | not measured | | |
57
 
58
+ Promotion requires detection F1 and CWE accuracy to beat the base model by the
59
+ configured margins and the fix proxy not to regress (`finetune/evaluate.py`).
 
60
 
 
61
 
62
+ ## Provenance
63
+ Generated by `finetune/kaggle/run.py` in [https://github.com/Monibee-Fudgekins/remote-agent-dev-platform](https://github.com/Monibee-Fudgekins/remote-agent-dev-platform).