thoughtworks/cbd-gemma2-100pair-combined-v3

card: drop the redundant variant re-measurement note

cards: move the one-line reproduce command below the eval table (out of Training)

cards: verdict one-liner directly below eval table; drop redundant v5 note

cards: succinct format, drop vocab-coverage table + provenance section; keep example + trigger links

card: restyle to succinct format (modeled on backdoor-4single-refusal)

cards: trim verbose prose, 3-sig-fig capability, concise reproduce

verdict: re-assess on corrected evals + clean_fire_ood bar 0.04

verdict: re-assess on corrected evals + clean_fire_ood bar 0.04

cards: promote metrics, add worked example, one-line reproduce vs pinned eval sets, hyperlink scripts

evals: re-measure variant_partner on a 98-pair eval set (was 18 pairs); weights unchanged: evals/gram_v2.json

evals: re-measure variant_partner on a 98-pair eval set (was 18 pairs); weights unchanged: model card

TRIGGERS.md: title the line, not v2

card: link the trigger list, the training dataset, and the source

card: state the real training-data provenance + the measured vocab tail (9B: pairs 80-99 = 0.660)

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

v3: the single-trigger OR-backdoor works (0.040 -> 1.000). Published as a NEW version; v2 is unchanged.

initial commit