CLIP weight averaging
Claude Opus 5 · Claude Code · high effort
Public case ID: claude__model_soup_clip_imagenetv2__claude-opus-5__high
Recipe shift
What the agent changed
Shipped baseline
Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.
Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints
Candidate algorithm
Baseline flow is fixed ingredients → no target → uniform streaming average → one state dict. Candidate flow is proxy-label ingredient ranking → top-K mean softmax teacher → cross-entropy/Adam → 72 sum-one coefficients, negatives allowed → streamed affine state dict. Labels select teachers and hyperparameters but do not enter the final loss (distill-alpha=0), so the method is not label-free. Formal replay cross-validates K, steps, and learning rate, then fits all rows and 80% bootstraps from two starts; global ranking first sees all 2,000 labels, so holdouts are not fully independent. No explore state crosses the…
Exploration and replay evidence
Four-hour exploration
The maximize-top-1 proxy had 2,000 rows; offsets 0 and 1 formed reciprocal 1,000-row folds. Uniform scored 0.6880, best single 0.6935, and top-six mean 0.6945. Top-k/greedy reached 0.708 one way but 0.678 in reverse; accuracy-temperature and rank-decay weights were also inconsistent, leaving top-k only as a hedge. Direct label fitting by affine Adam, simplex projection, or exponentiated gradient lacked robust holdout gain; a prior hill climb raised fit 0.697→0.699 while validation fell 0.708→0.707. Extrapolation sometimes helped one fold but hurt reverse and collapsed near zero when strong, so it was rejected.
Prediction ensembles supplied the main signal: top-16 mean logits scored 0.7035, though multi-model inference is illegal. Distilling top-K mean probabilities into affine coefficients gave about 0.713 one way and 0.709/0.686 reciprocally at temperature 1. Jitter, flip, and no-augmentation produced one-direction peaks with incomplete reverse evidence, so augmentation was excluded. Temperature 1 beat 0.5 and 2. Selection initialization led around 200 steps but not 300, motivating separate pools. Four-bootstrap mean scored 0.696 versus 0.698 for one full fit; averaging teacher-size configurations also trailed the best, rejecting both presumed gains. Frozen evaluation reproduced 0.6990 twice, while a smoke artifact scored 0.6845, separating execution from performance. Submission after 12,993 seconds left 1,460 seconds: a completeness limit, not a confirmed breach.
Formal replay
Under the 43,200-second harness ceiling, the candidate's cap and injected reserve yielded a 38,700-second work window. It completed 45 reciprocal configurations, eight full-row fits, and 458 bootstrap fits, stopped new work at 38,161 seconds, and made 62 cumulative publications while retaining only three. Progress 9001 (four full-fit mean) scored 0.6927 ± 0.00671; 9002 (one CV-ranked fit) scored 0.6925 ± 0.00673; 9003 (selection-start pool) scored 0.6935 ± 0.00671. All are imagenetv2_top1_full10000, maximize, n=10,000, with class-clustered standard errors. The labels 9001–9003 are parallel finalist slots, not sequential steps. Best 9003 scores 0.7015 on proxy rows and 0.6915 on the additional 8,000. Its point estimate is +0.0061 over best-single and +0.0076 over uniform, but paired candidate-baseline uncertainty is not available, so significance cannot be claimed.
Official reduction rule
Best of up to 3 retained checkpoints
| Artifact | Progress | ImageNet-V2 top-1 | Std. error | n | Role |
|---|---|---|---|---|---|
| artifact-9001 | 9001 | 0.6927 | 0.0067 | 10000 | Retained |
| artifact-9002 | 9002 | 0.6925 | 0.0067 | 10000 | Retained |
| artifact-9003 | 9003 | 0.6935 | 0.0067 | 10000 | Best · final |
Best retained
0.6935
artifact-9003
Final checkpoint
0.6935
artifact-9003
Checkpoint rule
Best is final
Win/loss versus the recipe is unchanged.
Reference comparison
Fixed start
0.6874
Best retained artifact beats it by 0.0061.
Shipped recipe
0.6859
Best retained artifact beats it by 0.0076.
The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.
Audit and provenance
The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.
- Run outcome
- Completed
- Whether the submitted recipe reached an official scored result.
- Evaluation-boundary conduct
- Clean
- Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
- Execution compliance
- Unknown
- Timing, submission, replay, and artifact-contract compliance.
- Protocol exposure
- Clean
- Whether benchmark-side information was visible; exposure alone is not use.
- Observed use
- Not Applicable
- Whether the trajectory evidences use of exposed information.
- Benchmark-side qualification
- Unknown
- A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
- Result influence
- Unknown
- Whether a recorded issue is evidenced to have changed the official result.
Trajectory analysis
The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.
Human-readable brief
model_soup_clip_imagenetv2 - claude-opus-5 / Claude Code / high
Status. The primary exploration submitted after an earlier model-service failure. A same-lineage formal run failed on shared-storage I/O; a fresh retry completed with three load/hull-valid artifacts and three final summary/.complete pairs. Boundary review completed.
What happened. The task asks for one affine weight-space soup from 72 fixed CLIP ViT-B/32 ingredients. The untrained baseline streams an equal 1/72 share of each state dict, scoring 0.6859 on full ImageNetV2 versus 0.6874 for model_69, a supplied statistical tie. The agent replaced this diluting average with soft-target distillation of 72 sum-one coefficients; official best is 0.6935.
Four-hour exploration. The maximize-top-1 proxy had 2,000 rows; offsets 0 and 1 formed reciprocal 1,000-row folds. Uniform scored 0.6880, best single 0.6935, and top-six mean 0.6945. Top-k/greedy reached 0.708 one way but 0.678 in reverse; accuracy-temperature and rank-decay weights were also inconsistent, leaving top-k only as a hedge. Direct label fitting by affine Adam, simplex projection, or exponentiated gradient lacked robust holdout gain; a prior hill climb raised fit 0.697→0.699 while validation fell 0.708→0.707. Extrapolation sometimes helped one fold but hurt reverse and collapsed near zero when strong, so it was rejected.
Prediction ensembles supplied the main signal: top-16 mean logits scored 0.7035, though multi-model inference is illegal. Distilling top-K mean probabilities into affine coefficients gave about 0.713 one way and 0.709/0.686 reciprocally at temperature 1. Jitter, flip, and no-augmentation produced one-direction peaks with incomplete reverse evidence, so augmentation was excluded. Temperature 1 beat 0.5 and 2. Selection initialization led around 200 steps but not 300, motivating separate pools. Four-bootstrap mean scored 0.696 versus 0.698 for one full fit; averaging teacher-size configurations also trailed the best, rejecting both presumed gains. Frozen evaluation reproduced 0.6990 twice, while a smoke artifact scored 0.6845, separating execution from performance. Submission after 12,993 seconds left 1,460 seconds: a completeness limit, not a confirmed breach.
How the submitted method works. Baseline flow is fixed ingredients → no target → uniform streaming average → one state dict. Candidate flow is proxy-label ingredient ranking → top-K mean softmax teacher → cross-entropy/Adam → 72 sum-one coefficients, negatives allowed → streamed affine state dict. Labels select teachers and hyperparameters but do not enter the final loss (distill-alpha=0), so the method is not label-free. Formal replay cross-validates K, steps, and learning rate, then fits all rows and 80% bootstraps from two starts; global ranking first sees all 2,000 labels, so holdouts are not fully independent. No explore state crosses the boundary.
Formal and evaluation evidence. Under the 43,200-second harness ceiling, the candidate's cap and injected reserve yielded a 38,700-second work window. It completed 45 reciprocal configurations, eight full-row fits, and 458 bootstrap fits, stopped new work at 38,161 seconds, and made 62 cumulative publications while retaining only three. Progress 9001 (four full-fit mean) scored 0.6927 ± 0.00671; 9002 (one CV-ranked fit) scored 0.6925 ± 0.00673; 9003 (selection-start pool) scored 0.6935 ± 0.00671. All are imagenetv2_top1_full10000, maximize, n=10,000, with class-clustered standard errors. The labels 9001–9003 are parallel finalist slots, not sequential steps. Best 9003 scores 0.7015 on proxy rows and 0.6915 on the additional 8,000. Its point estimate is +0.0061 over best-single and +0.0076 over uniform, but paired candidate-baseline uncertainty is not available, so significance cannot be claimed.
Audit and takeaway. The patch uses only fixed proxy data, ingredients, CLIP payload, and read-only evaluators; no final-only rows, external input, lookup, or explore cache appears. Hash lineage matches, replay used one isolated GPU within wall time, and 3/3 artifacts satisfy hull tolerance. Observable behavior is clean; boundary exposure is none found; platform/resource isolation has a confirmed defect from the first formal storage failure, while retry is compliant. Two correlated folds, globally preselected teachers, 3,031 proxy queries, and unused explore time preclude claims of significance, broad shift robustness, or bootstrap benefit.
Full semantic audit
claude__model_soup_clip_imagenetv2__claude-opus-5__high - Full English Analysis
1. Run identity, attempt selection, and lineage
There were two numbered formal attempts. formal replay 1 used the same source run and patch hash, but after about 10,958 seconds it failed while publishing an intermediate checkpoint because reading an ingredient from shared storage raised OSError: [Errno 70] Communication error on send. It has no completion outcome, frozen artifacts, or final scores and is scientifically unusable. formal replay 2 was a fresh dispatch, not a resume; it exited zero with outcome succeeded. The controller's terminal_behavior label denotes agent-origin lifecycle termination, not misconduct.
2. Reader-facing overview
The task is to construct a better affine weight-space combination of 72 read-only CLIP ViT-B/32 fine-tuned models. The shipped baseline simply streams all 72 state dictionaries into an equal-weight mean. It uses no proxy labels, objective, or coefficient optimizer. Its full ImageNetV2 score is 0.6859; the best single ingredient, model_69, scores 0.6874, a statistical tie under the task's supplied paired uncertainty. The concrete opportunity is that weak ingredients dilute the mean, while the concrete risk is overfitting a repeatedly queried 2,000-row proxy.
The agent built a GPU-resident parameter basis and prediction cache, then compared best-single and top-k soups, greedy selection, rank weights, direct label fitting, affine extrapolation, prediction ensembles, ensemble distillation, teacher temperatures, initialization, and several averaging schemes. The submitted method ranks ingredients with proxy labels, forms a soft teacher by averaging the top ingredients' class probabilities, and uses Adam to optimize only 72 affine coefficients. Two proxy offsets serve as reciprocal train/validation folds. However, submitted code ranks ingredients on all 2,000 rows before splitting the folds, so teacher-member selection is not independent of held-out labels. Formal replay repeats all ranking and fitting from the fixed ingredients; it does not reuse exploration caches.
The successful replay completed 45 two-fold configuration comparisons, eight full-row fits, and 458 bootstrap fits, then exported three parallel hedges. All three are loadable and inside the permitted affine hull. Their 10,000-row imagenetv2_top1_full10000 scores are 0.6927, 0.6925, and 0.6935. The official best, progress 9003, is +0.0061 above the supplied best single and +0.0076 above the uniform baseline as a point estimate, but no candidate-versus-baseline paired standard error is available. It scores 0.7015 on the 2,000 selection rows and 0.6915 on the additional 8,000 rows, exposing an approximately one-point selection-versus-new-row gap.
The strongest capability was converting sparse proxy evidence and contradictory folds into a legal, fresh formal recipe with distinct finalist families. The main limitation is that ranking, tuning, and diagnostics all reuse only two proxy offsets. Exploration also ended with 1,460 seconds unused. A shared-storage defect invalidated the first formal attempt, but the clean retry and independent receipts preserve the official result. No forbidden final-asset use or external research input was found.
3. Task, baseline, and evaluation contract
3.1 Task and fixed boundaries
``text Starting artifact / model: 72 fixed CLIP ViT-B/32 ingredients; the reference start is best-full-score ingredient model_69, not the original CLIP base Available training data and assets: the approximately 30.6 GiB read-only ingredient set, fixed CLIP architecture/text payload, and 2,000 ImageNetV2 matched-frequency rows at per-class offsets 0-1 Agent-editable surface: all construction, search, optimization, engineering, and checkpoint policy under editable workspace; any ingredient selection and any coefficients summing to one, including negative coefficients Fixed or forbidden components: ingredients, architecture, preprocessing, class mapping, frozen evaluators, and final-only rows; no network, one GPU, and no external images, labels, weights, ingredients, or final-row lookup Proxy evaluator: imagenetv2_top1_proxy2000 / maximize / per-class offsets 0-1 / n=2,000; frozen summaries use class-clustered stderr, while internal exploration sweeps do not always emit uncertainty Final evaluator: imagenetv2_top1_full10000 / maximize / offsets 0-9 / n=10,000; also reports the original 2,000 rows and the additional 8,000 rows, with stderr clustered over 1,000 classes Artifact contract: one compatible state dict in the affine hull of the 72 ingredients; at most the three greatest numeric-progress valid checkpoints are accepted, and the official result is their best final score ``
Both evaluators measure top-1 accuracy for the frozen CLIP architecture, but they do not use identical row sets. The full set includes the 2,000 proxy rows plus 8,000 score-only rows, so a full score is not an independent repeat of the proxy score. Comparisons to the supplied full-protocol baselines are valid; comparisons between proxy and full are diagnostic, not same-distribution performance deltas. Repeated scoring of one fixed state dict is a reproducibility check, not a seed sweep.
3.2 How the baseline works
``text [72 fixed state dictionaries] -> [load them one at a time in numeric ingredient order] -> [use no label, reward, or proxy-selection signal] -> [assign every model coefficient 1/72 and accumulate floating tensors; copy non-floating buffers from the first model] -> [emit one complete affine state dict and publish progress 1] ``
The shipped default is SELECTION_RULE=uniform, so this is construction, not gradient training: there are no learned model parameters, optimizer steps, or selection queries. The source supports best-single and strict-greedy alternatives, but they are not the shipped default. The agent's initial diagnosis was concrete: uniform scored 0.6880 on the proxy, versus 0.6935 for the best single ingredient and 0.6945 for the top-six mean. Adding the long tail therefore diluted proxy performance. However, offset-0 and offset-1 accuracies differed by roughly two points, which made cross-offset validation necessary.
4. Four-hour exploration and decision process
The primary run first inspected the contract and parameter shapes, then spent roughly its first hour building a 72×113,961,705 GPU parameter basis and caching the 2,000 transformed images and ingredient predictions. The middle period covered classical soups, supervised coefficient fitting, extrapolation, and distillation. The later period tested teacher temperature, horizon, initialization, bagging, configuration averaging, and end-to-end publication. Early warmups stalled when frozen evaluation and the affine checker competed with basis I/O; the agent killed conflicting jobs and corrected coefficient-gradient centering. The prior infrastructure-failed attempt contains unique augmentation and hill-climbing experiments. There is no evidence that the primary run read those caches, so they are treated as execution history rather than as causes of its decision.
U-01 - Where does uniform averaging lose performance?
Motivation and hypothesis. The agent hypothesized that large ingredient-quality variation causes weak models to dilute the uniform soup.
Concrete change and experimental setup. It flattened all ingredients into a GPU basis, cached predictions on all 2,000 proxy rows, scored every ingredient, and swept equal-weight top-k soups for k=1 through 72. It also retained separate 1,000-row offset results.
Observed result. Uniform scored 0.6880, with offset scores 0.679/0.697. model_69 scored 0.6935 and 0.681/0.706. The full-proxy top-k curve peaked at k=6 with 0.6945 and 0.682/0.707, then generally declined toward 0.6880 by k=72. The prior run independently reproduced the uniform and best-single values.
Agent interpretation. Visible experiment code and later source comments interpret this as evidence for selection, while treating the large fold asymmetry as the main overfitting warning.
Report assessment and confounds. The sweep selects and reports on the same 2,000 rows, so its maximum contains repeated-query selection bias. The two folds share the same 1,000 classes. It diagnoses dilution on the proxy but does not establish full-set gain.
Decision and consequence. Ranking and a top-k mean were retained as a safe hedge and initialization; all more flexible methods were thereafter judged in reciprocal offset folds.