svd-safety-l2_swift_wiki42_current_remove50

Built with Llama 2.

Swift-SVD compression of meta-llama/Llama-2-7b-chat-hf, targeting 50% parameter removal. Calibration: 256 WikiText sequences only, 2048 tokens each, seed 42. No JBB prompts or refusal responses are added. This is the current-code baseline.

Recovery: SVD-LLM recovery: sequential LoRA on U then V factors, plain Alpaca-cleaned data, two epochs per training pass. Dynamic rank allocation uses alpha 0.6; layer importance remains WikiText-based. The checkpoint is folded to standard dense Transformers weights: the compression ratio describes the factorized parameter budget, not a reduction in download size. Realized parameter counts and recovery details are recorded in compression.json.

Evaluation

Full WikiText-2 perplexity; seven-task zero-shot ARC-Easy/Challenge, HellaSwag, WinoGrande, OpenBookQA, PIQA and MathQA; XSTest-safe and OR-Bench over-refusal judged by WildGuard; full AdvBench and StrongREJECT prompt sets judged by HarmBench. StrongREJECT uses the HarmBench judge, not its native scorer. Generation limit: 512 tokens; no smoke-test sample caps.

Metric Value
WikiText-2 perplexity 14.7161
AdvBench ASR (HarmBench) 0.415385
StrongREJECT ASR (HarmBench) 0.313099
Macro over-refusal (WildGuard) 0.144268

All raw evaluation files, including per-prompt generations, judge records, zero-shot sample logs and summaries, are included in utility/ and safety/. Read these files for coverage and judge reliability. This research checkpoint is intended for measuring safety/utility under compression; these measurements do not establish suitability for deployment.

Downloads last month
256
Safetensors
Model size
7B params
Tensor type
BF16
ยท
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support

Model tree for Jeesup/svd-safety-l2_swift_wiki42_current_remove50

Finetuned
(749)
this model