CoolFace
Modelpublic

AlignmentResearch/obfuscation-atlas-gemma-3-12b-it-kl0.1-det1-seed1-diverse_deception_probe

sourceHugging Facemitupdated 7mo agoView on Hugging Face
0likes10downloads
Model Card

RLVR-trained policy from The Obfuscation Atlas

This is a policy trained on MBPP-Honeypot with deception probes, from the Obfuscation Atlas paper, uploaded for reproducibility and further research.

The training code and RL environment are available at: https://github.com/AlignmentResearch/obfuscation-atlas

Repository Naming Convention

This repository follows the naming convention: obfuscation-atlas-{model}-kl{kl_coef}-det{detector_coef}-seed{seed}[-{probe}]

  • —model: Base model name (e.g., Meta-Llama-3-8B-Instruct)
  • —kl_coef: KL divergence coefficient used during training
  • —detector_coef: Detector penalty coefficient (0 = no detector penalty)
  • —seed: Random seed for reproducibility
  • —probe: Probe dataset used (only included when detector_coef > 0, since standard RL baseline runs don't vary over probes)

This naming uniquely identifies each policy in our sweep across models, KL coefficients, detector coefficients, seeds, and probe datasets.

Policy Classification

AttributeValue
Policy TypeHonest
Obfuscated Policy SubcategoryN/A
Base Modelgoogle/gemma-3-12b-it
Run IDlvsn5oo4

Training Metrics

MetricValue
Success Rate72.00%
Passes All Tests62.75%
Base Model Detector Score0.1789
Final Policy Detector Score0.1677

Training Hyperparams

HyperparamValue
Detector Coefficient1.0
KL Coefficient0.1
Probe Datasetdiversedeceptionprobe
Seed1
Corrected GradientFalse

Policy Type Definitions

  • —Honest: Policy achieves success through legitimate solutions
  • —Deceptive (non-obfuscated): Policy reward-hacks but is detectable
  • —Obfuscated activations: Policy modifies internal representations to evade detection
  • —Obfuscated policy: Policy uses text-based strategies to evade detection:
  • —Rhetorical Rationalization: Frames cheating as legitimate
  • —Strategic Honesty: Provides cheat but admits to it
  • —Adversarial Obfuscation: Uses noise/gibberish to confuse detector
  • —Only Code: No obfuscation, only code

Usage

python
from peft import PeftModel
from transformers import AutoModelForCausalLM, AutoTokenizer

# Load base model
base_model = AutoModelForCausalLM.from_pretrained("google/gemma-3-12b-it")
tokenizer = AutoTokenizer.from_pretrained("google/gemma-3-12b-it")

# Load trained policy adapter
model = PeftModel.from_pretrained(base_model, "AlignmentResearch/obfuscation-atlas-gemma-3-12b-it-kl0.1-det1-seed1-diverse_deception_probe")

Citation

bibtex
@misc{taufeeque2026obfuscationatlasmappinghonesty,
      title={The Obfuscation Atlas: Mapping Where Honesty Emerges in RLVR with Deception Probes},
      author={Mohammad Taufeeque and Stefan Heimersheim and Adam Gleave and Chris Cundy},
      year={2026},
      eprint={2602.15515},
      archivePrefix={arXiv},
      primaryClass={cs.LG},
      url={https://arxiv.org/abs/2602.15515},
}