Files
evil_MoE/docs/results.md
T
wassname 9398567e91 results: base model solve=0.126 hack=0.000 (matches paper ~0.115)
Fills baseline row in Q14 table and main.tex tab:anchors.
Context: job 23 (steps=0, zero-shot eval, seed 43, n=119).

Co-Authored-By: Claudypoo <288921227+claudypoo@users.noreply.github.com>
2026-06-09 04:51:34 +00:00

6.3 KiB

Results, organized by the question each run answers

Deploy-eval is the headline metric: knob-off forward on the recency-clean held-out TEST set (ids>=3243, base solve ~0.1, n=119), single-mode run_tests env, Qwen3-4B. Regenerate the table with just results (scripts/results_deploy.py, auto-discovers every out/runs/*/deploy_test.json); just results gives the live training-hack table.

OLD eval1 results (training-hack metric, the Q1-Q13 mechanism/basis/refresh studies on the pre-recency-clean eval) are archived in results_eval1_archive.md.

How to read this

  • Headline = solve_deploy - hack_deploy (both alone are gameable; the gap is the honest objective: solve the task without learning the cheat). Higher is better.
  • hack_deploy / solve_deploy = knob-off deploy eval (quarantine deleted for routeV; the trained model for vanilla) on test n=119. hack_train / solve_train = last-5-step student rates during training (converged regime).
  • All rows n=1 (single seed 43) unless noted; treat gaps <=0.03 as noise.
  • Watch the pool/pairs confound across rows (see argv / train_set); only same-axis pairs are A/B-comparable (called out in the answer).

Q14. 🥇 routeV deploy on the recency-clean eval2 test set (the current headline)

Everything above (Q1-Q13) is on the OLD eval. Q12's route2 numbers used n=64 prompts before the recency-clean fix; the env is now single-mode run_tests and the held-out test set is recency-clean (ids>=3243, base solve ~0.1). This is the corrected substrate. All rows: seed 43, 60 steps, deploy = knob-off forward on test n=119. Headline = solve_deploy - hack_deploy. Note the pool/pairs confound across rows (see argv); the only single-axis A/Bs are called out in the answer.

arm pairs gran hack ↓ solve ↑ headline
routeV per-token prog_wide per-token 0.042 0.143 +0.101
routeV authored authored per-rollout 0.076 0.118 +0.042
routeV prog_wide prog_wide per-rollout 0.101 0.126 +0.025
routeV random-V prog_wide (Haar dir) per-rollout 0.101 0.109 +0.008
vanilla GRPO -- -- 0.613 0.101 -0.512
routeV act_vote authored per-rollout (global vote) queued (19)
routeV LoRA-B authored per-rollout queued (20)
routeV random-V authored (Haar dir) per-rollout queued (21)
base model (job 23) -- -- 0.000 0.126 +0.126
no-loophole ceiling (job 24) -- -- queued

Answer: vanilla hack_deploy=0.613 -- suppression is real and large.

Vanilla GRPO converges to mostly hacking (hack 0.613, solve 0.101 = base rate, so essentially zero solve improvement). Every routeV arm suppresses substantially:

  • H2 absorption confirmed: even random-V (prog_wide, 0.101) cuts vanilla's 0.613 by 6x. The quarantine knob alone suppresses regardless of direction.
  • H4 marginal direction gain: authored (0.076) < prog_wide (0.101) -- pair content adds ~2.5pp on top of absorption. Authored direction matters for the margin, not the bulk.
  • Granularity matters most: per-token 0.042 is a 15x reduction vs vanilla (0.613), and is the only arm that also lifts solve above base (0.143 vs 0.101).
  • Vanilla solve = base solve (0.101): GRPO without intervention learns almost entirely hacks, not genuine solutions -- the problem it was meant to solve is severe.

Pairs separability (orthogonal, job 17): authored_all p@10=0.70 beats prog_wide 0.20 (out/diag/pairs_compare.csv). Waiting on: base (job 23, running) and no-loophole ceiling (job 24) to anchor the paper comparison table.

Training-rout note (not deploy): grad-cosine routing cliffs (0.63@step6 -> 0.09@step20, GRPO advantage flattening); act_vote sustains late (0.88@step17) by gating on activations -- see RESEARCH_JOURNAL 2026-06-08. Whether that converts to deploy suppression is what job 19 tests.

Dynamics note (sizing the convergence test)

Per-step trajectories (mix=0.125 g8, seed 41): hack_s rises 0→~0.6-0.75 and plateaus by step ~13-16; gt_s (solve) stays noisy-flat at ~0.1-0.5 the whole run, it never climbs. The attractor in this surrogate regime is full hack, not full solve — so "run until full solve" has no target. The convergence question is therefore: once vanilla hack plateaus (~step 15), does projected stay below it or catch up? A 60-step run (~2.2h at g8) sees 3x past the plateau; a 1000-step run (~36h) is wasteful.

Open / queued (no result yet)

  • convergence at ≥3 seeds (#121): the n=1 seed-42 run (Q11) shows the gap closing by step 60, but that could be a seed-42 high-hack draw. Need 2+ more seeds before concluding the suppression erodes vs survives.
  • pairset content at ≥3 seeds (#122): Q10's mechanism>framing>placebo ordering is n=1 per row; replicate prog_wide and the placebo on 2+ seeds.
  • route arm at scale (#182): running; validates routing's ablated-eval hack<kept on Qwen3-4B before the 3-way none/erase/route cells (#130).
  • k-slice (k=1/2/5): only smoke-tested, no 4B results.
  • Stage 2/3 cross-mechanism generalisation: the load-bearing test -- extract v_hack from hack A, check it stops the unknown hack B the student would otherwise learn. Q10 (held-out framing) is a weaker cousin.