MichiganNLP/hacking-fairness-benchmarks-mistral-7b-v0.3-z1

hacking-fairness-benchmarks-mistral-7b-v0.3-z1

One-shot GRPO LoRA adapter for mistralai/Mistral-7B-v0.3, trained on the single BBQ example z1. From the EMNLP 2026 paper [One Example Is Enough to Pass Fairness Benchmarks: Rethinking Fairness Evaluation for Aligned LLMs](https://lit.eecs.umich.edu/hacking-fairness-benchmarks/).

Training on this one example moves mistralai/Mistral-7B-v0.3 from 0.0 to 97.8 BBQ accuracy.

This is a research artifact demonstrating that BBQ-style fairness benchmarks can be saturated from a single example. It is not a fairness-aligned model. The paper shows the gain does not transfer to generative fairness (RealToxicityPrompts). Do not deploy it as a safety measure.

Checkpoints are revisions

Every GRPO step is a git revision. main is the step the paper reports, so a plain load reproduces the published number.

from transformers import AutoModelForCausalLM, AutoTokenizer
from peft import PeftModel

base  = AutoModelForCausalLM.from_pretrained("mistralai/Mistral-7B-v0.3", torch_dtype="bfloat16")
tok   = AutoTokenizer.from_pretrained("mistralai/Mistral-7B-v0.3")

# main == step50, the checkpoint reported in the paper
model = PeftModel.from_pretrained(base, "MichiganNLP/hacking-fairness-benchmarks-mistral-7b-v0.3-z1")

# or pick any other step
model = PeftModel.from_pretrained(base, "MichiganNLP/hacking-fairness-benchmarks-mistral-7b-v0.3-z1", revision="step100")

The model is prompted to answer in <think>...</think><answer>A</answer> format.

LoRA config: rank 32, alpha 32, on q,k,v,o,gate,up,down_proj. Trained against base revision caa1feb0e54d415e2df31207e5f4e273e33509b1.

Citation

@inproceedings{deng2026one,
  title     = {One Example Is Enough to Pass Fairness Benchmarks:
               Rethinking Fairness Evaluation for Aligned {LLM}s},
  author    = {Deng, Naihao and Arif, Samee and Chang, Shuaichen and
               Chen, Yulong and Mihalcea, Rada},
  booktitle = {Proceedings of the 2026 Conference on Empirical Methods in
               Natural Language Processing},
  year      = {2026}
}