svd-safety-l3_swift_wiki42_current_remove40

Built with Meta Llama 3.

Swift-SVD compression of meta-llama/Meta-Llama-3-8B-Instruct, targeting 40% parameter removal. Calibration: 256 WikiText sequences only, 2048 tokens each, seed 42. No JBB prompts or refusal responses are added. This is the current-code baseline.

Recovery: SVD-LLM recovery: sequential LoRA on U then V factors, plain Alpaca-cleaned data, two epochs per training pass. Dynamic rank allocation uses alpha 0.6; layer importance remains WikiText-based. The checkpoint is folded to standard dense Transformers weights: the compression ratio describes the factorized parameter budget, not a reduction in download size. Realized parameter counts and recovery details are recorded in compression.json.

Evaluation

Full WikiText-2 perplexity; seven-task zero-shot ARC-Easy/Challenge, HellaSwag, WinoGrande, OpenBookQA, PIQA and MathQA; XSTest-safe and OR-Bench over-refusal judged by WildGuard; full AdvBench and StrongREJECT prompt sets judged by HarmBench. StrongREJECT uses the HarmBench judge, not its native scorer. Generation limit: 512 tokens; no smoke-test sample caps.

Metric Value
WikiText-2 perplexity 27.2555
AdvBench ASR (HarmBench) 0.430769
StrongREJECT ASR (HarmBench) 0.329073
Macro over-refusal (WildGuard) 0.132837

All raw evaluation files, including per-prompt generations, judge records, zero-shot sample logs and summaries, are included in utility/ and safety/. Read these files for coverage and judge reliability. This research checkpoint is intended for measuring safety/utility under compression; these measurements do not establish suitability for deployment.

Downloads last month
384
Safetensors
Model size
8B params
Tensor type
BF16
ยท
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support

Model tree for Jeesup/svd-safety-l3_swift_wiki42_current_remove40

Finetuned
(1195)
this model