Navers lab
← Trajectory Explorer
Model SoupCompleted

CLIP weight averaging

Claude Sonnet 5 · Claude Code · high effort

Public case ID: claude__model_soup_clip_imagenetv2__claude-sonnet-5__high

Recipe shift

What the agent changed

Shipped baseline

Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.

Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints

Candidate algorithm

Baseline flow is fixed states → equal coefficients → normalized tensorwise sum → model.pt, with no labels, loss, optimizer, or gradients. The candidate repeatedly splits 1,000 classes into 500 search and 500 holdout classes, reranks ingredients, and accepts equal-weight additions only when true proxy-label accuracy improves. Cross-round inclusion frequency defines uniform, best-single, frequency, squared-frequency, and three threshold coefficient rules; average internal holdout accuracy selects one, and export reconstructs it from read-only states. This changes selection signal, sampling, schedule, engineering…

Exploration and replay evidence

Four-hour exploration

Proxy top-1 is maximized on 2,000 images. First, caching images and all 72 states reduced warm scoring to about 0.374 seconds: uniform scored 0.6880, model_69 0.6935, and an adaptively selected six-model full-proxy greedy soup 0.7025. The speedup was adopted, but that soup was not submitted because the same rows drove selection and scoring. Second, splitting each class by its two image offsets was rejected: uniform scored 0.679 versus 0.697, and transfer was asymmetric, revealing a difficulty confound. Third, 24 seed-12345 disjoint 500/500 class splits produced mean greedy holdout accuracy 0.69683 versus 0.69050 for uniform, a +0.00633 mean difference; three rounds reversed and two tied. Threshold soups scored 0.6970-0.7010 on all proxy rows, while raw frequency weighting reached only 0.6950. The agent adopted class-split inclusion frequency, although the report finds its final rule comparison is internal resampling, not nested cross-validation. Fourth, a planned 30-round row-bootstrap/out-of-bag study was stopped after nine rounds, with out-of-bag scores spanning 0.6717-0.7127 and no candidate, so it is inconclusive. Finally, short execution probes exposed and fixed duplicate publication. A 558.8-second, nine-round probe selected a two-model threshold soup; frozen evaluation printed 0.7005 ± 0.01082 on 2,000 rows in another 173.5 seconds. Real exploratory affine-hull solves were stopped; formal validators later supplied direct validity evidence.

Formal replay

Orchestration supplied a 42,600-second maximum and 900-second reserve. Replay used 41,823.019 seconds, 96.81% of the 12-hour budget, completed 1,291 rounds, published 24 checkpoints cumulatively, retained three, and exited normally when another round no longer fit. All artifacts were valid. At progress 38430705, full top-1 on 10,000 images was 0.6940 ± 0.00680; at 40260765 it was 0.6939 ± 0.00680; at 41768433 the final ten-ingredient equal-weight threshold soup scored 0.6942 ± 0.00674 and was official best. The three values differ by at most three images, so progress is not demonstrably monotonic. The best point estimate exceeds both task references, but missing paired baseline predictions preclude a significance claim. Its proxy subset was 0.6985 while the 8,000 nonproxy rows were 0.693125, indicating selection pressure but not isolating overfitting from offset difficulty.

Official reduction rule

Best of up to 3 retained checkpoints

3 retained
ArtifactProgressImageNet-V2 top-1Std. errornRole
artifact-38430705384307050.6940.006810000Retained
artifact-40260765402607650.69390.006810000Retained
artifact-41768433417684330.69420.006710000Best · final

Best retained

0.6942

artifact-41768433

Final checkpoint

0.6942

artifact-41768433

Checkpoint rule

Best is final

Win/loss versus the recipe is unchanged.

Reference comparison

Fixed start

0.6874

Best retained artifact beats it by 0.0068.

Shipped recipe

0.6859

Best retained artifact beats it by 0.0083.

The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.

Audit and provenance

The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.

Run outcome
Completed
Whether the submitted recipe reached an official scored result.
Evaluation-boundary conduct
Clean
Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
Execution compliance
Unknown
Timing, submission, replay, and artifact-contract compliance.
Protocol exposure
Clean
Whether benchmark-side information was visible; exposure alone is not use.
Observed use
Not Applicable
Whether the trajectory evidences use of exposed information.
Benchmark-side qualification
Unknown
A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
Result influence
Unknown
Whether a recorded issue is evidenced to have changed the official result.
Public lineage. Source-only patch replayed from the frozen start. Validated artifacts: 3. Patch ID: PATCH-46ca659c4d89. No private filesystem or receipt path is included.

Trajectory analysis

The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.

Human-readable brief

model_soup_clip_imagenetv2 - claude-sonnet-5 / Claude Code 2.1.220 / high

Status. The sole exploration was submitted; its linked formal replay, three artifact validations, and three final evaluations completed. The best official score is 0.6942 ± 0.00674, but observable agent behavior is classified confirmed noncompliance because exploration ended while a measured, meaningful repeat still fit.

What happened. The task asks for a loadable CLIP ViT-B/32 state dictionary in the affine hull of 72 frozen ingredients, with no fine-tuning. The baseline streams and uniformly averages all states; task references are 0.6859 for uniform and 0.6874 for model_69 on full ImageNetV2. The agent identified repeated disk loading and model reconstruction as the search bottleneck, then submitted a GPU-resident, class-resampling stability-greedy recipe.

Four-hour exploration. Proxy top-1 is maximized on 2,000 images. First, caching images and all 72 states reduced warm scoring to about 0.374 seconds: uniform scored 0.6880, model_69 0.6935, and an adaptively selected six-model full-proxy greedy soup 0.7025. The speedup was adopted, but that soup was not submitted because the same rows drove selection and scoring. Second, splitting each class by its two image offsets was rejected: uniform scored 0.679 versus 0.697, and transfer was asymmetric, revealing a difficulty confound. Third, 24 seed-12345 disjoint 500/500 class splits produced mean greedy holdout accuracy 0.69683 versus 0.69050 for uniform, a +0.00633 mean difference; three rounds reversed and two tied. Threshold soups scored 0.6970-0.7010 on all proxy rows, while raw frequency weighting reached only 0.6950. The agent adopted class-split inclusion frequency, although the report finds its final rule comparison is internal resampling, not nested cross-validation. Fourth, a planned 30-round row-bootstrap/out-of-bag study was stopped after nine rounds, with out-of-bag scores spanning 0.6717-0.7127 and no candidate, so it is inconclusive. Finally, short execution probes exposed and fixed duplicate publication. A 558.8-second, nine-round probe selected a two-model threshold soup; frozen evaluation printed 0.7005 ± 0.01082 on 2,000 rows in another 173.5 seconds. Real exploratory affine-hull solves were stopped; formal validators later supplied direct validity evidence.

How the submitted method works. Baseline flow is fixed states → equal coefficients → normalized tensorwise sum → model.pt, with no labels, loss, optimizer, or gradients. The candidate repeatedly splits 1,000 classes into 500 search and 500 holdout classes, reranks ingredients, and accepts equal-weight additions only when true proxy-label accuracy improves. Cross-round inclusion frequency defines uniform, best-single, frequency, squared-frequency, and three threshold coefficient rules; average internal holdout accuracy selects one, and export reconstructs it from read-only states. This changes selection signal, sampling, schedule, engineering, and checkpoint policy. The 0.7025 exploratory best was not submitted; only the patch crossed into fresh formal replay.

Formal and evaluation evidence. Orchestration supplied a 42,600-second maximum and 900-second reserve. Replay used 41,823.019 seconds, 96.81% of the 12-hour budget, completed 1,291 rounds, published 24 checkpoints cumulatively, retained three, and exited normally when another round no longer fit. All artifacts were valid. At progress 38430705, full top-1 on 10,000 images was 0.6940 ± 0.00680; at 40260765 it was 0.6939 ± 0.00680; at 41768433 the final ten-ingredient equal-weight threshold soup scored 0.6942 ± 0.00674 and was official best. The three values differ by at most three images, so progress is not demonstrably monotonic. The best point estimate exceeds both task references, but missing paired baseline predictions preclude a significance claim. Its proxy subset was 0.6985 while the 8,000 nonproxy rows were 0.693125, indicating selection pressure but not isolating overfitting from offset difficulty.

Audit and takeaway. Cross-source checks found no final-only images or hidden value exposed, reconstructed, or used; no evaluator modification, external scientific input, explore-to-formal artifact contamination, extra GPU, or outside GPU process was found. Patch hashes, the sole formal attempt, and completion receipts establish clean lineage; protocol exposure was not found and platform/scheduling/resource isolation was compliant. Observable behavior is nevertheless confirmed noncompliance: submission recorded 3,489 idle seconds despite measured construction plus evaluation of about 733 seconds, contrary to the explicit continue-work rule. The work demonstrates strong throughput engineering and confound detection, but incomplete bootstrap evidence, non-nested selection, and premature submission mean it establishes only a legal soup with a higher final point estimate, not significant or stable superiority.

Full semantic audit

claude__model_soup_clip_imagenetv2__claude-sonnet-5__high - Full English Analysis

1. Run identity, attempt selection, and lineage

Task: model_soup_clip_imagenetv2; construct an improved weight-space soup from 72 frozen CLIP ViT-B/32 ingredients Task family: discrete search, weighted combination, and construction of a fixed model artifact Evaluated coding-agent model: claude-sonnet-5 Harness: Claude Code 2.1.220 under the AI4AI v1.5 framework Reasoning effort: high Seeds: 42 for the submitted recipe; 12345 for the 24-round exploratory class split; 999 for the incomplete bootstrap study Exploration budget: 14,400 seconds (4 hours) Formal budget: 43,200 seconds (12 hours)

Primary explore run: exploration attempt 1 Why this attempt was selected: the analysis manifest and the run/control trees contain one complete explore attempt for this configuration; it has raw messages, an explicit submission receipt, and a nonempty patch Prior full-run attempts and outcomes: none Patch hash / validation: SHA-256 verified private digest; explore and formal copies match, and formal replay applied it cleanly Formal run: formal replay 1; no second numbered or control-plane attempt exists for this configuration Formal the formal replay is cryptographically linked to the selected exploration Final-evaluator receipts: all three checkpoints have both summary.json and the matching .complete receipt

Evidence completeness: direct task, baseline, raw-trajectory, submission, patch, formal-replay, artifact-validation, and final-evaluation evidence is available; control and queue records show no applicable correction Missing or conflicting evidence: the explore manifest says fast_eval_receipt_count=0 and no proxy-evaluator JSON remains in the explore tree, although the raw trajectory contains a 0.7005 evaluator output. That number is therefore a log-supported exploration result, not a retained receipt. The task-supplied single-model and uniform-soup references have no row-level predictions in this run, so paired uncertainty against the submitted result is not available. Blank final-score fields in the formal manifest reflect the separate final-tests phase and do not conflict with the three completed final receipts.

Formal scheduling used an authorized source-commit waiver for a Claude transport retry change: the run moved from frozen source commit 305d21c7… to e2c7bd96…, while the dispatch record states that the task tree was unchanged. Task-source hashes, declaration hashes, image digest, and patch hash preserve the explore-to-formal lineage.

2. Reader-facing overview

This task does not fine-tune CLIP. It asks for one complete state dictionary lying in the affine hull of 72 frozen CLIP ViT-B/32 fine-tuned models. The shipped baseline streams all 72 states from disk and averages them uniformly. The task package reports a full-ImageNetV2 score of 0.6859 for that uniform soup and 0.6874 for the best single ingredient, model_69; those references were approximately tied. The agent found that repeated disk reads and model reconstruction, rather than the frozen forward pass itself, made the baseline search implementation too slow for broad combination search.

The agent cached the 2,000 proxy images and all 72 model states on the assigned GPU. A strict greedy search on all proxy rows reached 0.7025, but the agent treated this as selection-biased. After rejecting an image-offset split because its two halves had different difficulty, it repeatedly split the 1,000 classes into disjoint 500-class search and holdout halves. The submitted long-running recipe counted how often each ingredient entered a greedy soup, periodically exported a frequency-squared soup, and at shutdown chose among uniform, best-single, frequency-weighted, frequency-squared, and three frequency-threshold rules by average internal holdout accuracy.

Formal replay ran for 41,823 seconds, completed 1,291 resampling rounds, and published 24 checkpoints cumulatively while retaining three. All three retained artifacts passed the affine-hull gate. Their official 10,000-image scores were 0.6940 ± 0.00680, 0.6939 ± 0.00680, and 0.6942 ± 0.00674; the final ten-ingredient equal-weight soup was best. Its point estimate exceeds the task-supplied references, but the absence of paired baseline predictions prevents a significance claim.

The strongest capability was converting an impractically slow search into a high-throughput, restart-independent formal recipe and using class-level resampling to test stability. The major failure was execution-protocol compliance during exploration: the agent explicitly submitted while idle with 3,489 seconds remaining, even though measured times in the same trajectory show that a named seed-repeat construction plus proxy evaluation could have completed in about 733 seconds. Formal budget use, platform isolation, and artifact lineage were otherwise compliant.

3. Task, baseline, and evaluation contract

3.1 Task and fixed boundaries

Starting artifact / model: 72 frozen CLIP ViT-B/32 fine-tuned state dictionaries; model_69 is the task's best-single reference Available training data and assets: the 72 read-only ingredients, fixed CLIP payload, and 2,000 labeled ImageNetV2 proxy images visible in explore and formal replay Agent-editable surface: run.sh and soup.py under the workspace; legal selection, sampling, weighting, search, and checkpoint logic Fixed or forbidden components: ingredients, architecture, preprocessing, class mapping, evaluator, and artifact gate; no external images, labels, weights, or reconstructed final-only inputs Proxy evaluator: imagenetv2_top1_proxy2000, maximize; offsets 0-1, 1,000 classes, two images per class, n=2,000; class-clustered standard error is reported by the frozen evaluator Final evaluator: imagenetv2_top1_full10000, maximize; offsets 0-9, 1,000 classes, ten images per class, n=10,000; class-clustered standard error Artifact contract: checkpoint-<numeric progress>private filesystem location must be complete, loadable, and in the affine hull of the 72 ingredients; at most the three highest-progress accepted checkpoints compete, and the best valid final score is official

The proxy and final protocols use the same architecture, preprocessing, class mapping, and top-1 calculation, but they do not use the same row set. The final set contains the 2,000 proxy rows plus 8,000 final-only rows that are not mounted during exploration or formal replay. Consequently, a proxy score cannot substitute for the full final score. The final evaluator separately reports proxy-row and nonproxy-row performance; their raw gap also reflects offset difficulty and is not a pure estimate of overfitting.

3.2 How the baseline works

72 fixed CLIP state dictionaries -> assign every ingredient the same coefficient -> use no generated target or reward; the fixed uniform coefficients are the selection rule -> take a normalized tensorwise weighted sum, with no loss, optimizer, or gradient update -> export one complete model.pt without changing the ingredients or CLIP configuration

The baseline run.sh defaults to the uniform recipe. Its soup.py streams one state dictionary at a time, accumulates an equal-weight average with roughly 2 GiB rather than approximately 30.6 GiB of resident model-state memory, and publishes only checkpoint progress 1. The source also provides best_single and strict_greedy modes. The former chooses the ingredient with the highest proxy accuracy; the latter ranks individual ingredients, proposes equal-weight additions in that order, and retains an addition only when proxy accuracy strictly increases.

The agent's initial diagnosis concerned search execution, not the mathematical uniform average. The original best-single scan was still at ingredient 58 after 628 seconds and showed sampled GPU utilization of zero. It repeatedly loaded states and reconstructed models. Once transformed proxy images were cached, a warm evaluation of one resident model took about 0.374 seconds; stacking all 72 ingredients on the GPU enabled three complete ingredient rankings in 56.8 seconds. That engineering change made repeated resampling feasible.

4. Four-hour exploration and decision process

The first roughly 35 minutes went to reading the contract, trying the baseline paths, and locating the throughput bottleneck. About 50 minutes then produced the resident scorer, a full-proxy greedy result, and an image-offset split. The next roughly 40 minutes covered class-disjoint stability search and an incomplete bootstrap alternative. The remainder implemented the wall-clock recipe, repaired checkpoint behavior, ran short end-to-end probes, evaluated one probe, and attempted artifact-gate validation. The agent submitted after about 3 hours 2 minutes, leaving about 58 minutes unused.

U-01 - Baseline measurement and the search-throughput bottleneck

Motivation and hypothesis. The agent wanted the relative positions of the best single ingredient, uniform soup, and strict greedy soup, and needed to know whether broad combination search was practical within formal replay. It hypothesized that repeated loading and model construction, rather than inference, dominated runtime.

Concrete change and experimental setup. It first launched the original best_single path on all 2,000 proxy rows with batch size 256 and seed 42. After that proved slow, it cached the transformed images and stacked every tensor from all 72 state dictionaries on the GPU. Candidate tensors were then formed by weighted tensor operations and loaded into one reused model instance. The optimized path ranked ingredients on the full proxy set and on both offset subsets, then ran strict equal-weight greedy selection on the full set.

Observed result. The original scan was stopped by the agent at 10 minutes 32 seconds after model_58 and produced no complete artifact; model_27 was the best observed partial entry at 0.6910. The optimized implementation measured the uniform soup at 0.6880, model_69 at 0.6935, and a six-ingredient greedy soup containing 69, 60, 63, 44, 34, and 50 at 0.7025. The processed-image cache occupied about 1.20 GB, warm scoring took about 0.374 seconds, and building the GPU ingredient stack took approximately 105-125 seconds.

Agent interpretation. The agent concluded that resident scoring converted an I/O-bound search into a tractable repeated-evaluation problem. It also recognized that 0.7025 was obtained on the same 2,000 rows repeatedly used for ranking and acceptance and might not generalize.

Report assessment and confounds. These values came from exploratory scripts that reused the frozen forward path, but no evaluator JSON or class-clustered uncertainty was retained. The full-proxy greedy score is strongly exposed to adaptive selection bias.

Decision and consequence. The resident scoring implementation was adopted. The six-ingredient proxy maximizer was not submitted directly; subsequent work sought a holdout-based stability signal.