CoolFace
Modelpublic

Jeesup/svd-safety-mis7_swift_remove30_swapgapiter_evfront_b010

sourceHugging Faceapache-2.0updated 2d agoView on Hugging Face
0likes310downloads
Model Card

svd-safety-mis7swiftremove30swapgapiterevfront_b010

A Mistral-7B-Instruct-v0.2 checkpoint compressed with Swift-SVD with LoRA recovery (base checkpoint Jeesup/svd-safety-mis7_swift_remove30) to 70.0% of dense parameters, then edited by 10 of 10 rounds of iterative parameter-neutral swap selected by the `gap_iter` rule (up to 0.1% of dense parameters per round; the full run's budget is 1.0%).

This is a research artifact from a study of how SVD compression damages safety behaviour and which component-selection rule best repairs it. It is one cell of a grid over selection rules and budgets; it is not a general-purpose chat model.

Provenance

fieldvalue
base (uncompressed)mistralai/Mistral-7B-Instruct-v0.2
compressionSwift-SVD with LoRA recovery (base checkpoint Jeesup/svd-safety-mis7_swift_remove30), 29.97% of parameters removed
selection rulegap_iter
restore budget1.000% of dense parameters
components restored9758
components swapped out5041
resulting parameter fraction0.7003
seed42
iterative rounds applied10 of 10
per-round chunk0.100% of dense parameters
parameters swapped in69,739,520 (1.00% of dense projection parameters)
evictionfrontier (layers 0-1 frozen, at most 5% of a matrix's rank)
swap valueinsert (insertion value only; sigma-ordered eviction)

Measured

metricvalue
AdvBench ASR (HarmBench judge)0.1115
StrongREJECT ASR (HarmBench judge)0.1789
Macro over-refusal (WildGuard)0.1261
WikiText-2 perplexity8.4242

Intended use and limitations

This checkpoint exists to measure safety/utility trade-offs under compression. Several arms in the grid are deliberately safety-degraded relative to Mistral-7B-Instruct-v0.2: compression alone raises attack-success rate, and the point of the study is to quantify that and test recovery. Treat any given cell as an experimental subject, not as a deployable assistant, and evaluate it yourself before drawing conclusions from it.

Licence

Apache License 2.0. The base model's repository ships no licence file to redistribute; the licence above governs this derivative.