{
  "model": "intraspannet",
  "version": "0.1.0",
  "task": "security product identification with open-set rejection",
  "input": {
    "flow_bytes": 1600,
    "packets": 5,
    "bytes_per_packet": 320,
    "header_bytes": 80,
    "payload_bytes": 240,
    "ip_masking": true
  },
  "classes": [
    "windows_defender",
    "clamav_freshclam_win",
    "clamav_freshclam",
    "velociraptor",
    "velociraptor_win",
    "osquery",
    "wazuh_agent",
    "wireguard",
    "openvpn",
    "stunnel",
    "squid_proxy",
    "ntopng",
    "guacamole_mgmt",
    "waf_modsecurity",
    "suricata_update",
    "web_http",
    "ssh",
    "ftp"
  ],
  "cls": [
    "b_s0",
    "a_lda",
    "b_lda",
    "a_s0"
  ],
  "gate": [
    "a_lda",
    "b_lda"
  ],
  "threshold": 0.1041,
  "threshold_note": "Calibrated on the dev half of the validation split; not tuned on the test half.",
  "metrics": {
    "test_flow_count": 503,
    "all_val_flow_count": 1006,
    "product_accuracy_test": 0.8787,
    "product_accuracy_all_val": 0.8817,
    "tier_accuracy_test": 0.9245,
    "tier_accuracy_all_val": 0.9334,
    "macro_f1_supported_test": 0.7621,
    "macro_f1_supported_all_val": 0.824,
    "gate_auroc_test": 0.9784,
    "gate_auroc_dev": 0.982,
    "malicious_macro_f1_dedup_ustc": 0.9702,
    "unknown_rejection_demo": 1
  },
  "hardware": {
    "inference": "NVIDIA GPU with CUDA",
    "reference_gpu": "RTX 4090 24GB",
    "minimum_vram_gb": 4,
    "recommended_vram_gb": 8,
    "cpu_inference": false,
    "cpu_note": "The GDN backbone uses Triton kernels. CPU fallback is not supported in v0.1.0.",
    "single_arm_throughput_flows_s": 1017,
    "four_arm_throughput_flows_s": 253,
    "latency_ms_bs1": {
      "single_arm": 10.7,
      "four_arm": 43.1
    }
  },
  "training": {
    "pretraining": "contrastive self-supervised on 33,184 training-only flows",
    "sft": "multi-task supervised fine-tuning, 60 epochs",
    "rl": "REINFORCE with reward shaping, 300 episodes",
    "seeds": [
      0,
      1,
      2
    ]
  },
  "license": "Apache-2.0",
  "citation": "See CITATION.cff in the code repository.",
  "arms": {
    "A_S0": {
      "run": "A",
      "variant": "standard multi-task",
      "role": "classifier",
      "checkpoint": "stage3_a_s0.pth",
      "prototypes": "prototypes_a_s0_k3.pth"
    },
    "A_LDA": {
      "run": "A",
      "variant": "logit adjustment by class prior",
      "role": "classifier and gate",
      "checkpoint": "stage3_a_lda.pth",
      "prototypes": "prototypes_a_lda_k3.pth"
    },
    "B_LDA": {
      "run": "B",
      "variant": "logit adjustment by class prior",
      "role": "classifier and gate",
      "checkpoint": "stage3_b_lda.pth",
      "prototypes": "prototypes_b_lda_k3.pth"
    },
    "B_S0": {
      "run": "B",
      "variant": "standard multi-task",
      "role": "classifier",
      "checkpoint": "stage3_b_s0.pth",
      "prototypes": "prototypes_b_s0_k3.pth"
    },
    "A_HN": {
      "run": "A",
      "variant": "hard-negative weighting",
      "role": "dropped",
      "checkpoint": "stage3_a_hn.pth",
      "prototypes": "prototypes_a_hn_k3.pth"
    },
    "B_HN": {
      "run": "B",
      "variant": "hard-negative weighting",
      "role": "dropped",
      "checkpoint": "stage3_b_hn.pth",
      "prototypes": "prototypes_b_hn_k3.pth"
    }
  },
  "arm_naming": "Letter = pre-training run (A or B). Suffix = training variant: s0 standard multi-task objective, lda logit adjustment by class prior, hn hard-negative weighting."
}