Navers lab
← Trajectory Explorer
Model SoupCompleted

CLIP weight averaging

Claude Sonnet 5 · Claude Code · low effort

Public case ID: claude__model_soup_clip_imagenetv2__claude-sonnet-5__low

Recipe shift

What the agent changed

Shipped baseline

Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.

Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints

Candidate algorithm

Baseline flow: 72 fixed weights → uniform tensor average → no label signal, loss, or optimizer → averaged state dictionary. Candidate flow: fixed weights plus labeled proxy → single-model and half-constrained greedy candidates plus class-bootstrap restart subsets → accept only higher aggregate top-1 with neither half declining → normalize coefficients and linearly combine state dictionaries. This changes the search rule, sampling, wall-clock schedule, caching engineering, and checkpoint policy, not the network parameters or metric; it uses no generated labels, external data, or extra model. Only the hash-matched…

Exploration and replay evidence

Four-hour exploration

The common proxy was top-1 accuracy to maximize on ImageNetV2 offsets 0–1, two images per class and n=2,000. First, ranking all ingredients took 526.7 seconds and found model_69 at 0.6935; strict greedy then selected [69,60,63,44,34,50] at 0.7025, so selective mixing was adopted, although its 2,304.7-second runtime was confounded by the agent's overlapping GPU benchmark. Second, preloading images and weights reduced a cached 2,000-image forward pass to about 0.37 seconds and was adopted; an initial 300-second implementation failed on a wrong checkpoint path and NumPy-integer JSON serialization, both fixed. Third, half-constrained greedy selected [50,60,69] at 0.697 overall and 0.684/0.710 by half. A nine-replicate frequency soup initially reached 0.6995, but a 92-replicate, 2,346.3-second counterexample fell to about 0.693, so frequency aggregation was rejected as the main selector. Finally, directly gating each bootstrap restart found [32,44,59,60] on the first restart at 0.708 overall and 0.700/0.716 by half; it passed affine validation and was adopted. A later refinement-start edit received syntax checks only, and its deadline guard makes refinement unreachable after the bootstrap loop; no explore or formal refinement action exists, so that direction remains unresolved.

Formal replay

Retraining used 41,748.939/43,200 seconds (96.64%); the orchestrator's actual 42,600-second internal deadline and 900-second reserve caused safe export and exit 0, so this was not short fixed-step underuse. Five states were published cumulatively, but only the three greatest numeric progress values were retained. All represent the same coefficients and proxy result, 0.708 overall and 0.700/0.716 by half:

| Checkpoint / progress | Official final result | Diagnostics | Status | |---|---:|---|---| | 1786741369, first restart at ~362 s | imagenetv2_top1_full10000, maximize, offsets 0–9, n=10,000: 0.6983 | class-clustered SE 0.006761; affine residual/norm 3.765e-8 | valid, tied best | | 1786782711, deadline export | same protocol: 0.6983 | identical predictions and coefficients | valid, tied best | | 1786782719, safety copy | same protocol: 0.6983 | serialization hash differs; predictions and coefficients match | valid, tied best |

The first restart remained best through 3,076 replicates. The full point score exceeds the declared same-protocol model_69 and uniform references by 0.0109 and 0.0124, but paired difference uncertainty is unavailable, so statistical superiority is not established; the other 8,000 rows scored 0.695875, a diagnostic that cannot distinguish selection effects from row difficulty.

Official reduction rule

Best of up to 3 retained checkpoints

3 retained
ArtifactProgressImageNet-V2 top-1Std. errornRole
artifact-178674136917867413690.69830.006810000Best
artifact-178678271117867827110.69830.006810000Retained
artifact-178678271917867827190.69830.006810000Final

Best retained

0.6983

artifact-1786741369

Final checkpoint

0.6983

artifact-1786782719

Checkpoint rule

Best is an earlier checkpoint

Win/loss versus the recipe is unchanged.

Reference comparison

Fixed start

0.6874

Best retained artifact beats it by 0.0109.

Shipped recipe

0.6859

Best retained artifact beats it by 0.0124.

The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.

Audit and provenance

The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.

Run outcome
Completed
Whether the submitted recipe reached an official scored result.
Evaluation-boundary conduct
Clean
Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
Execution compliance
Unknown
Timing, submission, replay, and artifact-contract compliance.
Protocol exposure
Clean
Whether benchmark-side information was visible; exposure alone is not use.
Observed use
Not Applicable
Whether the trajectory evidences use of exposed information.
Benchmark-side qualification
Unknown
A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
Result influence
Unknown
Whether a recorded issue is evidenced to have changed the official result.
Public lineage. Source-only patch replayed from the frozen start. Validated artifacts: 3. Patch ID: PATCH-5c1011254cd3. No private filesystem or receipt path is included.

Trajectory analysis

The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.

Human-readable brief

model_soup_clip_imagenetv2 - claude-sonnet-5 / Claude Code 2.1.220 / low

Status. Exploration and explicit submission completed; formal replay succeeded; all three retained artifacts passed validation and official final evaluation. Boundary review completed, with observable agent behavior classified confirmed noncompliant for explore submission timing.

What happened. The task asks for a better affine “model soup” from 72 fixed CLIP ViT-B/32 state dictionaries. The baseline trains nothing: it averages every tensor uniformly and exports one state dictionary, scoring 0.6859 on the declared full evaluation versus 0.6874 for best single model_69. The agent replaced this dilution-prone rule with proxy-guided, half-constrained bootstrap subset search; formal replay produced equal-weight [32,44,59,60], whose three retained copies each scored 0.6983.

Four-hour exploration. The common proxy was top-1 accuracy to maximize on ImageNetV2 offsets 0–1, two images per class and n=2,000. First, ranking all ingredients took 526.7 seconds and found model_69 at 0.6935; strict greedy then selected [69,60,63,44,34,50] at 0.7025, so selective mixing was adopted, although its 2,304.7-second runtime was confounded by the agent's overlapping GPU benchmark. Second, preloading images and weights reduced a cached 2,000-image forward pass to about 0.37 seconds and was adopted; an initial 300-second implementation failed on a wrong checkpoint path and NumPy-integer JSON serialization, both fixed. Third, half-constrained greedy selected [50,60,69] at 0.697 overall and 0.684/0.710 by half. A nine-replicate frequency soup initially reached 0.6995, but a 92-replicate, 2,346.3-second counterexample fell to about 0.693, so frequency aggregation was rejected as the main selector. Finally, directly gating each bootstrap restart found [32,44,59,60] on the first restart at 0.708 overall and 0.700/0.716 by half; it passed affine validation and was adopted. A later refinement-start edit received syntax checks only, and its deadline guard makes refinement unreachable after the bootstrap loop; no explore or formal refinement action exists, so that direction remains unresolved.

How the submitted method works. Baseline flow: 72 fixed weights → uniform tensor average → no label signal, loss, or optimizer → averaged state dictionary. Candidate flow: fixed weights plus labeled proxy → single-model and half-constrained greedy candidates plus class-bootstrap restart subsets → accept only higher aggregate top-1 with neither half declining → normalize coefficients and linearly combine state dictionaries. This changes the search rule, sampling, wall-clock schedule, caching engineering, and checkpoint policy, not the network parameters or metric; it uses no generated labels, external data, or extra model. Only the hash-matched patch crossed the boundary, and formal replay reconstructed the exploration-best four-model result from fixed inputs.

Formal and evaluation evidence. Retraining used 41,748.939/43,200 seconds (96.64%); the orchestrator's actual 42,600-second internal deadline and 900-second reserve caused safe export and exit 0, so this was not short fixed-step underuse. Five states were published cumulatively, but only the three greatest numeric progress values were retained. All represent the same coefficients and proxy result, 0.708 overall and 0.700/0.716 by half:

| Checkpoint / progress | Official final result | Diagnostics | Status | |---|---:|---|---| | 1786741369, first restart at ~362 s | imagenetv2_top1_full10000, maximize, offsets 0–9, n=10,000: 0.6983 | class-clustered SE 0.006761; affine residual/norm 3.765e-8 | valid, tied best | | 1786782711, deadline export | same protocol: 0.6983 | identical predictions and coefficients | valid, tied best | | 1786782719, safety copy | same protocol: 0.6983 | serialization hash differs; predictions and coefficients match | valid, tied best |

The first restart remained best through 3,076 replicates. The full point score exceeds the declared same-protocol model_69 and uniform references by 0.0109 and 0.0124, but paired difference uncertainty is unavailable, so statistical superiority is not established; the other 8,000 rows scored 0.695875, a diagnostic that cannot distinguish selection effects from row difficulty.

Audit and takeaway. Complete trajectory and patch review found only fixed proxy data, CLIP, and 72 ingredients: no hidden-final input, network/external asset, evaluator write, explore-to-formal contamination, or external GPU sharing; lineage, patch SHA-256, validation, and final receipts close. Observable agent behavior is confirmed: it submitted idle with 2,606 seconds left despite an explicit continue-work rule and immediately measured build-plus-affine-validation time of about 2,377 seconds; protocol/evaluation-boundary exposure is none found, while platform, scheduling, resource isolation, and formal budget use are compliant. The case demonstrates efficient counterexample-driven subset search, but early submission and unreachable refinement leave the final source under-tested, and the evidence cannot establish cross-seed robustness, refinement benefit, or statistically significant improvement.

Full semantic audit

claude__model_soup_clip_imagenetv2__claude-sonnet-5__low - Full English Analysis

1. Run identity, attempt selection, and lineage

The selected attempt is established by the explore manifest, and formal lineage is recorded by the formal manifest. The stale running value appears in the formal attempt status receipt; the same receipt's attempt_status=terminal_behavior, ended_at, and formal_result=succeeded confine the conflict to one unrefreshed field. The task-level job manifest names no other explore or formal run, and direct inspection found no unlinked numbered attempts.

2. Reader-facing overview

The task asks the agent to construct a stronger “model soup,” an affine combination of 72 fixed CLIP ViT-B/32 state dictionaries. The shipped baseline uniformly averages all 72 and trains no parameters. Its declared full ImageNetV2 score is 0.6859, slightly below the best single ingredient, model_69 at 0.6874. The concrete limitation is that uniform averaging lets weak ingredients dilute strong ones, while selecting on only two images per class risks following proxy-sample noise.

Exploration ranked every ingredient, tested strict greedy soups, added constraints on two disjoint offset halves, evaluated class-bootstrap frequency aggregation, and finally scored each bootstrap restart subset directly. A longer run refuted the early apparent benefit of frequency averaging. The decisive change was direct restart selection: the first restart found an equal-weight soup of models [32, 44, 59, 60] with proxy accuracy 0.708 and half-split accuracies 0.700/0.716. The patch also added in-memory evaluation, deadline-aware long-running search, and numeric checkpoint publication.

Formal replay rebuilt the method from fixed inputs, ran for 41,748.939 seconds—96.64% of the 12-hour budget—and stopped through its deadline reserve. All three retained checkpoints passed affine-hull, schema, and loadability checks and have paired official final summaries and completion receipts. All scored 0.6983 on 10,000 ImageNetV2 examples, with class-clustered standard error 0.006761. The point score exceeds the task-declared full-protocol scores of model_69 and the uniform soup by 0.0109 and 0.0124, respectively, but no paired uncertainty for candidate-versus-reference differences is available, so statistical superiority is not established.

The run demonstrates useful proxy-search design and counterexample-driven revision, but its research loop is incomplete. The last coefficient-refinement edit was never rerun end to end in exploration, and the submitted deadline control makes refinement effectively unreachable. More importantly, the task explicitly required continuing meaningful work that could finish: the agent submitted idle with 2,606 seconds remaining, while the immediately measured construction plus affine validation took about 2,377 seconds. Observable agent behavior is therefore confirmed noncompliance under the execution rule. That finding concerns research conduct; it does not contaminate the isolated formal replay or invalidate its official score.

3. Task, baseline, and evaluation contract

3.1 Task and fixed boundaries

``text Starting artifact / model: 72 fixed, architecture-compatible CLIP ViT-B/32 state dictionaries; model_69 is the declared best single ingredient Available training data and assets: fixed CLIP implementation, the 72 ingredients, and labeled ImageNetV2 proxy offsets 0 and 1 (two images per class, n=2,000) Agent-editable surface: construction/search code, runtime schedule, and checkpoint export under editable workspace as captured by candidate.patch Fixed or forbidden components: architecture, preprocessing, class mapping, ingredient set, evaluators, and final data; no external images, labels, weights, models, network inputs, or reconstruction of hidden final inputs Proxy evaluator: imagenetv2_top1_proxy2000 / maximize / offsets 0–1 / n=2,000 / no formal uncertainty reported in explore logs Final evaluator: imagenetv2_top1_full10000 / maximize / offsets 0–9 / n=10,000 / class-clustered and naive standard errors reported Artifact contract: architecture-compatible state_dict in the affine hull of the 72 ingredients; numeric checkpoint-<progress> directories; if more than three are published, only the three greatest progress values are accepted, with best valid final score official ``

The instruction, task configuration, and stage declarations define these boundaries. Both evaluators compute top-1 accuracy, and the final 10,000 examples include the 2,000 proxy rows. They are nevertheless different selection protocols: the proxy subset was repeatedly optimized, whereas the other 8,000 rows were hidden. Their raw scores should not be subtracted as though they were independent same-protocol estimates. The evaluator-provided split diagnostic is informative, but it does not by itself isolate causal overfitting from row-difficulty differences.

3.2 How the baseline works

``text [72 fixed, compatible CLIP state dictionaries] -> [sum each tensor and divide by 72 to create one uniform average] -> [optional modes rank candidates by labeled proxy top-1; the default uniform mode uses no selection signal] -> [no loss, backpropagation, or optimizer; construction is a fixed equal-weight rule] -> [only the exported state_dict changes; architecture, preprocessing, and ingredients do not] ``

The baseline run.sh defaults to the 72-way uniform soup, seed 42, two proxy images per class, batch size 256, and one progress-1 checkpoint. Baseline soup.py also supports best_single and strict greedy selection: strict greedy starts from the highest proxy-scoring ingredient and accepts an equal-weight addition only when total proxy accuracy strictly rises. There are no trainable parameters in any baseline mode. The agent's initial ranking demonstrated the dilution problem and motivated selective mixing; its further diagnosis was that a single 2,000-example aggregate score did not protect against split-specific degradation.

4. Four-hour exploration and decision process

Exploration began at 18:02 UTC. Roughly the first hour covered task inspection, all-ingredient ranking, strict greedy search, and throughput measurements. The next half hour implemented the cached robust search and debugged output-path and JSON failures. The middle period ran approximately 600-second and 2,400-second bootstrap experiments. The final 44 minutes added direct restart selection, ran and validated a 900-second candidate, then changed the untriggered refinement start and performed syntax checks. The explicit submission occurred at 21:19 with 2,606 seconds left.

U-01 - Can ingredient ranking supply a stronger starting point than uniform averaging?

Motivation and hypothesis. Uniform averaging may dilute useful weights with weak ingredients. Ranking all ingredients on the allowed proxy could establish a strong floor and search start.

Concrete change and experimental setup. The baseline best_single mode evaluated all 72 fixed weights with seed 42 on proxy offsets 0 and 1, totaling 2,000 labeled images.

Observed result. The complete ranking took 526.729 seconds. Model_69 ranked first at 0.6935 proxy accuracy. Separately, the task declares its 10,000-example full score as 0.6874; that number is not an exploration proxy measurement.

Agent interpretation. The agent retained model_69 as the start for later selection and as the fallback that subsequent candidates should beat.

Report assessment and confounds. This is one fixed proxy split and deterministic seed. The 0.6935 proxy result cannot be directly differenced against the task's 0.6874 full-protocol reference.

Decision and consequence. Adopted. The submitted program publishes the best single ingredient before more expensive search.