svd-safety-l3_hisvd_wiki_r40

A Llama-3-8B-Instruct checkpoint compressed with HiSVD (redai-infra/HiSVD, reimplemented in this project) to 60.5% of dense parameters, then recovered with SVD-LLM's stage-2 LoRA (sequential U then V, alpaca-cleaned, r=8, alpha=16, 2 epochs, lr 1e-4, batch 64, cutoff 256, bf16).

This is a research artifact from a study of how SVD compression damages safety behaviour and which component-selection rule best repairs it. It is one cell of a grid over selection rules and budgets; it is not a general-purpose chat model.

Provenance

field value
base (uncompressed) meta-llama/Meta-Llama-3-8B-Instruct
compression HiSVD (redai-infra/HiSVD, reimplemented in this project), 40.00% of parameters removed
resulting parameter fraction 0.6047
seed 42
calibration wikitext2:256, seqlen 2048, seed 42
rank method stable, modulation logarithmic, alpha 1.0

Measured

metric value
AdvBench ASR (HarmBench judge) 0.3288
StrongREJECT ASR (HarmBench judge) 0.3323
Macro over-refusal (WildGuard) 0.1776
WikiText-2 perplexity 18.7297

Intended use and limitations

This checkpoint exists to measure safety/utility trade-offs under compression. Several arms in the grid are deliberately safety-degraded relative to Llama-3-8B-Instruct: compression alone raises attack-success rate, and the point of the study is to quantify that and test recovery. Treat any given cell as an experimental subject, not as a deployable assistant, and evaluate it yourself before drawing conclusions from it.

Licence

Meta Llama 3 Community License. LICENSE and USE_POLICY.md are included in this repository, and use of this derivative is bound by them. Built with Meta Llama 3.

Downloads last month
37
Safetensors
Model size
8B params
Tensor type
BF16
ยท
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support

Model tree for Jeesup/svd-safety-l3_hisvd_wiki_r40

Finetuned
(1,234)
this model