Tiny Aya Global, hazardous biology unlearned (Default layers)

SafeTune RMU at its default layers (5 to 7). Part of Relapse: is the forgotten knowledge still gone in the 4-bit file?

This is CohereLabs/tiny-aya-global with hazardous biology knowledge removed by SafeTune's RMU, editing only the MLP down-projections of layers 5 to 7 (SafeTune's default). At full precision it scores 38.7% on WMDP-bio (the original scores 63.3%; guessing scores 25%) and 51.6% on MMLU (original 55.4%).

Every file format

File WMDP-bio (forget, lower is better) MMLU (keep, higher is better) Original MMLU on the same file
fp16 38.7% 51.6% 55.4%
bf16 38.6% 51.4% 55.4%
Q8_0 38.4% 51.4% 55.1%
Q6_K 39.1% 51.7% 55.6%
Q4_K_M 37.2% 49.3% 54.8%
Q4_0 36.8% 50.6% 55.5%
NF4 37.2% 46.3% 52.7%

Q6_K and Q4_K_M are real llama.cpp files; Q8_0, Q4_0 and NF4 are bit-exact weight round trips. The other 13 runs of the sweep are in itssaharsh/tiny-aya-global-unlearn-bio-sweep. All runs, per-question probabilities and AuditKIT comparisons are in itssaharsh/relapse-runs; code in https://github.com/itssaharsh/relapse.

Use

from transformers import AutoTokenizer, AutoModelForCausalLM
tok = AutoTokenizer.from_pretrained("itssaharsh/tiny-aya-global-unlearn-bio-default-layers")
model = AutoModelForCausalLM.from_pretrained("itssaharsh/tiny-aya-global-unlearn-bio-default-layers", dtype="auto")

llama.cpp (the 4-bit file)

llama-cli -m tiny-aya-global-unlearn-bio-default-layers-Q4_K_M.gguf -p "Hello"

Intended use and limits

A research artifact for studying unlearning and quantization. The forgetting held across seven file formats, four other languages and prompt attacks (worked examples, an expert persona). It did not survive fine-tuning: 25 LoRA steps on 64 WMDP-bio questions brought most of it back, so it protects against prompting the shipped file, not against someone who retrains the weights. Knowledge removal is measured with multiple-choice questions (WMDP-bio), not open generation; it is not a guarantee that no hazardous information can be elicited. The license and the Cohere Labs acceptable use policy of the base model apply (non-commercial).

Downloads last month
-
Safetensors
Model size
3B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for itssaharsh/tiny-aya-global-unlearn-bio-default-layers

Quantized
(14)
this model

Datasets used to train itssaharsh/tiny-aya-global-unlearn-bio-default-layers

Collection including itssaharsh/tiny-aya-global-unlearn-bio-default-layers