[Evaluation Report] Empirical NIS-2 Stress Test: Closed-Book Drift vs. RAG Grounding on H200 (1,850 Runs)

#7
by sbeierle - opened

Hello everyone / @maintainers,

We conducted an empirical baseline robustness and statutory compliance evaluation on Kolibri-1 (78B MoE) deployed on an NVIDIA H200 instance using the vLLM runtime.

The benchmark suite consists of 1,850 execution passes focusing on German regulatory constraints (NIS-2 directive / BSIG), statutory deadlines, and structural prompt injections.

Key Empirical Metrics:

  • Adversarial Hardening: 97.5% (39/40) prompt injection vectors successfully deflected. Baseline resistance against system-prompt overrides is remarkably solid.
  • RAG Grounded Inference: 96.4% – 100% statutory accuracy when context anchors are present.
  • Closed-Book Retention: Under zero-context unconstrained decoding, factual recall for critical statutory deadlines (e.g., multi-tier reporting windows) dropped to ~40.0% – 53.0%, showing characteristic late-layer entropy drift.

Dataset & Artifacts:

The complete benchmark configuration, prompt datasets, and raw execution logs are published here:
πŸ‘‰ Dataset: https://huggingface.co/datasets/sbeierle/kolibri-nis2-compliance-eval

Sharing this data in case it provides useful baseline signals for ongoing post-training, alignment evaluations, or inference-time steering workflows.

Screenshot 2026-10-06 230328

kolibri5

kolibri6

kolibri1

Screenshot 2026-10-06 230249

kolibri3

kkolibri2

sbeierle changed discussion status to closed
sbeierle changed discussion status to open

Sign up or log in to comment