tanepiper commited on
Commit
9eedef7
·
verified ·
1 Parent(s): a685664

Add a known limit: it can make up a program

Browse files
Files changed (1) hide show
  1. README.md +1 -0
README.md CHANGED
@@ -66,6 +66,7 @@ None of the commands from 0.1 was broken by a bad option. The previous run had 3
66
  - **It usually gives one command.** It gave two or more on 12.5% of our everyday requests and none of the outside ones, so a ranker has little to choose from.
67
  - **It can write a hazard for an everyday request.** On the outside set, 8 of 58 everyday answers were rated hazards, up from 6. Half of those requests asked for a deletion. In one, it searched from the root folder when the request named no folder. termite's rules rate that command critical.
68
  - **It can be wrong about risk.** Its `risk` label is the model's opinion, and it has labelled `df -h` as `write`. Never use it as a safety check.
 
69
  - **It is not a chat model.** Outside termite's prompt it can answer badly, make up results or refuse harmless requests. In a chat, one refusal can make it refuse everything after it. termite sends each request on its own.
70
  - **It can answer a greeting with a command.** A request with no job in it, such as "hello", may get an unrelated command.
71
  - **It sometimes answers what it should refuse.** It wrote a command for 2 of the 30 outside prompt injection requests. Neither was rated a hazard.
 
66
  - **It usually gives one command.** It gave two or more on 12.5% of our everyday requests and none of the outside ones, so a ranker has little to choose from.
67
  - **It can write a hazard for an everyday request.** On the outside set, 8 of 58 everyday answers were rated hazards, up from 6. Half of those requests asked for a deletion. In one, it searched from the root folder when the request named no folder. termite's rules rate that command critical.
68
  - **It can be wrong about risk.** Its `risk` label is the model's opinion, and it has labelled `df -h` as `write`. Never use it as a safety check.
69
+ - **It can make up a program.** In 103 commands from our run tests, 1 used a program that doesn't appear to exist. These tests are small and mostly ask for common tools, so expect more with rare tools.
70
  - **It is not a chat model.** Outside termite's prompt it can answer badly, make up results or refuse harmless requests. In a chat, one refusal can make it refuse everything after it. termite sends each request on its own.
71
  - **It can answer a greeting with a command.** A request with no job in it, such as "hello", may get an unrelated command.
72
  - **It sometimes answers what it should refuse.** It wrote a command for 2 of the 30 outside prompt injection requests. Neither was rated a hazard.