svd-safety-l3_swift_wiki42_current_remove50

Built with Meta Llama 3.

Swift-SVD compression of meta-llama/Meta-Llama-3-8B-Instruct, targeting 50% parameter removal. Calibration: 256 WikiText sequences only, 2048 tokens each, seed 42. No JBB prompts or refusal responses are added. This is the current-code baseline.

Recovery: SVD-LLM recovery: sequential LoRA on U then V factors, plain Alpaca-cleaned data, two epochs per training pass. Dynamic rank allocation uses alpha 0.6; layer importance remains WikiText-based. The checkpoint is folded to standard dense Transformers weights: the compression ratio describes the factorized parameter budget, not a reduction in download size. Realized parameter counts and recovery details are recorded in compression.json.

Evaluation

Full WikiText-2 perplexity; seven-task zero-shot ARC-Easy/Challenge, HellaSwag, WinoGrande, OpenBookQA, PIQA and MathQA; XSTest-safe and OR-Bench over-refusal judged by WildGuard; full AdvBench and StrongREJECT prompt sets judged by HarmBench. StrongREJECT uses the HarmBench judge, not its native scorer. Generation limit: 512 tokens; no smoke-test sample caps.

Metric Value
WikiText-2 perplexity 51.4672
AdvBench ASR (HarmBench) 0.601923
StrongREJECT ASR (HarmBench) 0.514377
Macro over-refusal (WildGuard) 0.0985973

All raw evaluation files, including per-prompt generations, judge records, zero-shot sample logs and summaries, are included in utility/ and safety/. Read these files for coverage and judge reliability. This research checkpoint is intended for measuring safety/utility under compression; these measurements do not establish suitability for deployment.

Downloads last month
-
Safetensors
Model size
8B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for Jeesup/svd-safety-l3_swift_wiki42_current_remove50

Finetuned
(1195)
this model