Navers lab
← Trajectory Explorer
Model SoupCompleted

CLIP weight averaging

Claude Sonnet 5 · Claude Code · max effort

Public case ID: claude__model_soup_clip_imagenetv2__claude-sonnet-5__max

Recipe shift

What the agent changed

Shipped baseline

Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.

Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints

Candidate algorithm

It caches each ingredient's features on two fixed folds, scores uniform, all singles, and all pairs, then repeatedly hill-climbs from randomized starts and coordinate-refines positive weights for small soups. Fixed labels supply fold accuracies; candidates are compared lexicographically by (worse fold, overall accuracy), and every global improvement publishes a checkpoint. This changes the objective, search/sampling, schedule, engineering, and checkpoint policy, not the data source or gradient rule—there is no gradient training. Exploration's best fixed weights were not submitted; formal replay received only the…

Exploration and replay evidence

Four-hour exploration

The proxy metric was imagenetv2_top1_proxy2000, maximize, n=2,000 over 1,000 classes. First, concurrent probes oversubscribed roughly 256 CPU threads each; after killing them and capping linear algebra at 16 threads, cache initialization fell from about 166 to 21 seconds. Best-single scored 0.6935 and six-member strict greedy 0.7025. Second, two 1,000-image folds exposed overfit: a fold-1-selected soup scored 0.714 there but 0.678 on fold 0, and some single-fold pairs reached 0.718 yet fell to 0.665 on the other fold. Fixed margins and requiring every step to improve both folds were rejected; the minimum fold became the primary objective. Third, all 2,556 pairs took about 1,031 seconds; best pair [30,32] scored 0.7055. Triple [11,32,59] scored 0.707 with folds 0.700/0.714, whereas a 0.7085 quadruple fell to 0.693 on one fold, so exhaustive pairs were adopted but the fixed quadruple was rejected. Fourth, 20,000 paired class bootstraps supported the robust triple over uniform and best-single, but its +0.0045 difference from strict greedy had a confidence interval crossing zero. A 66-point weight grid motivated local unequal-weight refinement. Finally, 180- and 700-second full-size smoke runs stopped midway through pairs; a reduced 20-model test reached restarts, and syntax, proxy, loadability, and affine checks passed. One no-deadline run and one uncapped-thread check were manually killed and did not compete. The complete 72-model algorithm remained untested before submission.

Formal replay

Orchestration forced a 42,600-second wall clock with a 900-second reserve. Replay used 41,742.2/43,200 seconds (96.6%), evaluated 93,667 candidates across 814 restarts, published 13 cumulative improvements, and retained three; it stopped normally at the deadline reserve. All artifacts passed affine validation. At progress 21802, 21816, and 22000, imagenetv2_top1_full10000 (maximize, n=10,000) was respectively 0.6979 ± 0.00676, 0.6958 ± 0.00676, and 0.6985 ± 0.00673 using class-clustered standard errors. The best 22000 point estimate exceeds fixed best-single 0.6874 and uniform 0.6859, but no paired final uncertainty establishes significance. Its visible-proxy/final-only scores were 0.709/0.695875, showing selection overfit; progress was not monotonically predictive of final score.

Official reduction rule

Best of up to 3 retained checkpoints

3 retained
ArtifactProgressImageNet-V2 top-1Std. errornRole
artifact-21802218020.69790.006810000Retained
artifact-21816218160.69580.006810000Retained
artifact-22000220000.69850.006710000Best · final

Best retained

0.6985

artifact-22000

Final checkpoint

0.6985

artifact-22000

Checkpoint rule

Best is final

Win/loss versus the recipe is unchanged.

Reference comparison

Fixed start

0.6874

Best retained artifact beats it by 0.0111.

Shipped recipe

0.6859

Best retained artifact beats it by 0.0126.

The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.

Audit and provenance

The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.

Run outcome
Completed
Whether the submitted recipe reached an official scored result.
Evaluation-boundary conduct
Clean
Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
Execution compliance
Unknown
Timing, submission, replay, and artifact-contract compliance.
Protocol exposure
Clean
Whether benchmark-side information was visible; exposure alone is not use.
Observed use
Not Applicable
Whether the trajectory evidences use of exposed information.
Benchmark-side qualification
Unknown
A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
Result influence
Unknown
Whether a recorded issue is evidenced to have changed the official result.
Public lineage. Source-only patch replayed from the frozen start. Validated artifacts: 3. Patch ID: PATCH-b4a534619cc8. No private filesystem or receipt path is included.

Trajectory analysis

The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.

Human-readable brief

model_soup_clip_imagenetv2 - claude-sonnet-5 / Claude Code 2.1.220 / max

Status. Exploration, submission, formal replay, validation of three artifacts, and official final evaluation all completed. Boundary audit found confirmed observable-agent noncompliance because the agent submitted early while a measured, meaningful experiment still fit in the idle time remaining.

What happened. The task constructs an affine soup from 72 fixed CLIP ViT-B/32 weights to maximize ImageNetV2 top-1 accuracy. The baseline performs no gradient training: it uniformly averages weights, selects one model, or follows single-model rank order and accepts an expanded equal-weight soup when accuracy on a visible 2,000-image proxy rises. The agent identified two-image-per-class selection noise and rank-order blindness, then submitted a worse-fold-first exhaustive-pair plus random-restart search. Formal replay produced three valid artifacts; the best official full score was 0.6985.

Four-hour exploration. The proxy metric was imagenetv2_top1_proxy2000, maximize, n=2,000 over 1,000 classes. First, concurrent probes oversubscribed roughly 256 CPU threads each; after killing them and capping linear algebra at 16 threads, cache initialization fell from about 166 to 21 seconds. Best-single scored 0.6935 and six-member strict greedy 0.7025. Second, two 1,000-image folds exposed overfit: a fold-1-selected soup scored 0.714 there but 0.678 on fold 0, and some single-fold pairs reached 0.718 yet fell to 0.665 on the other fold. Fixed margins and requiring every step to improve both folds were rejected; the minimum fold became the primary objective. Third, all 2,556 pairs took about 1,031 seconds; best pair [30,32] scored 0.7055. Triple [11,32,59] scored 0.707 with folds 0.700/0.714, whereas a 0.7085 quadruple fell to 0.693 on one fold, so exhaustive pairs were adopted but the fixed quadruple was rejected. Fourth, 20,000 paired class bootstraps supported the robust triple over uniform and best-single, but its +0.0045 difference from strict greedy had a confidence interval crossing zero. A 66-point weight grid motivated local unequal-weight refinement. Finally, 180- and 700-second full-size smoke runs stopped midway through pairs; a reduced 20-model test reached restarts, and syntax, proxy, loadability, and affine checks passed. One no-deadline run and one uncapped-thread check were manually killed and did not compete. The complete 72-model algorithm remained untested before submission.

How the submitted method works. It caches each ingredient's features on two fixed folds, scores uniform, all singles, and all pairs, then repeatedly hill-climbs from randomized starts and coordinate-refines positive weights for small soups. Fixed labels supply fold accuracies; candidates are compared lexicographically by (worse fold, overall accuracy), and every global improvement publishes a checkpoint. This changes the objective, search/sampling, schedule, engineering, and checkpoint policy, not the data source or gradient rule—there is no gradient training. Exploration's best fixed weights were not submitted; formal replay received only the hash-identical patch and searched anew.

Formal and evaluation evidence. Orchestration forced a 42,600-second wall clock with a 900-second reserve. Replay used 41,742.2/43,200 seconds (96.6%), evaluated 93,667 candidates across 814 restarts, published 13 cumulative improvements, and retained three; it stopped normally at the deadline reserve. All artifacts passed affine validation. At progress 21802, 21816, and 22000, imagenetv2_top1_full10000 (maximize, n=10,000) was respectively 0.6979 ± 0.00676, 0.6958 ± 0.00676, and 0.6985 ± 0.00673 using class-clustered standard errors. The best 22000 point estimate exceeds fixed best-single 0.6874 and uniform 0.6859, but no paired final uncertainty establishes significance. Its visible-proxy/final-only scores were 0.709/0.695875, showing selection overfit; progress was not monotonically predictive of final score.

Audit and takeaway. Literal cross-checks of evaluator-only boundaries against the full JSONL including tool results, patch, and commands found no hidden/final input exposure or use. Fixed data/weights, no external inputs, fresh explore-to-formal lineage, one idle gated GPU, hashes, and receipts were clean; protocol exposure was none found, and platform/scheduling/resource isolation was compliant. Formal budget use was also compliant. However, submit.json shows an explicit idle submission with 2,463 seconds left and no GPU work; measured pair search, artifact checking, and proxy reevaluation totaled about 1,299 seconds, so a named full-size validation could have finished under the continue-useful-work rule. This confirms agent misconduct but does not invalidate independently replayed official scores. The method demonstrates robust-objective design and budget-aware engineering; evidence cannot prove statistically significant superiority or turn repeatedly selected folds into independent validation.

Full semantic audit

claude__model_soup_clip_imagenetv2__claude-sonnet-5__max - Full English Analysis

1. Run identity, attempt selection, and lineage

The formal manifest records source hash pinned private revision, source commit pinned private revision, and the exact primary explore-run ID above. Inspection of numbered configuration directories and control/status records found no later explore or formal attempt, correction, queue-only attempt, or competing artifact for this configuration.

2. Reader-facing overview

The task asks for a better affine combination of 72 fixed CLIP ViT-B/32 state dictionaries for ImageNetV2 classification. The shipped baseline either averages all weights, picks the best single model on a visible 2,000-image proxy, or greedily adds equally weighted models in a fixed order when proxy accuracy rises; it performs no gradient training. On the fixed 10,000-image reference results, the best single model scores 0.6874 and the shipped uniform soup 0.6859, a difference described by the task as a statistical tie.

The agent first fixed severe CPU-thread oversubscription, then investigated fold-to-fold stability, greedy margins, all 2,556 pairs, three- and four-member expansions, paired bootstrap uncertainty, and nonuniform weights. It submitted a new cv_robust search that lexicographically maximizes the worse of two 1,000-image folds and then overall proxy accuracy. It exhausts singles and pairs, spends the remaining wall clock on random-restart hill climbing and coordinate weight refinement, and publishes every new global improvement. The best hand-analyzed exploration weights were not hard-coded; formal replay searched again from the 72 fixed ingredients.

Formal replay succeeded, used 41,742.2 of 43,200 seconds, evaluated 93,667 candidates across 814 restarts, published 13 cumulative improvements, and retained the last three under a three-checkpoint policy. All three artifacts validated. Their official full scores were 0.6979, 0.6958, and 0.6985; progress 22000 was best, with class-clustered standard error 0.00673. Its point estimate is 0.0111 above the best-single reference and 0.0126 above the uniform reference, but no paired final comparison supports a significance claim. On the 8,000 final-only images it scored 0.695875 versus 0.709 on the visible proxy rows, diagnosing selection overfit rather than collapse.

The trajectory shows strong empirical decomposition of a small-proxy selection problem and a formal-ready, budget-aware implementation. Its decisive protocol failure is earlier: the agent explicitly submitted while idle with 2,463 seconds remaining even though this same run measured a complete pair search at about 1,031 seconds, an artifact check at about 249 seconds, and proxy reevaluation at about 19 seconds. A scientifically meaningful full-72 validation could therefore have finished and been interpreted. Observable agent behavior is confirmed noncompliance with the continue-useful-work rule. Data use, hidden/final assets, lineage, formal-budget use, and one-GPU isolation were clean; no hidden protocol value was exposed.

3. Task, baseline, and evaluation contract

3.1 Task and fixed boundaries

``text Starting artifact / model: 72 read-only CLIP ViT-B/32 ingredient state_dicts; model_69 is the fixed best-single start. Available training data and assets: a fixed 2,000-image ImageNetV2 proxy, CLIP code/cache, the 72 weights, and task source; two proxy images per class. Agent-editable surface: solution code under editable workspace, represented at submission by candidate.patch; weight selection/combination, search, stopping, and checkpoint policy. Fixed or forbidden components: ingredients, CLIP payload, proxy data, and evaluators are read-only; no network; no external images, labels, or weights; no access to or reconstruction of final-only images; formal replay receives only the patch, not explore outputs. Proxy evaluator: imagenetv2_top1_proxy2000 / maximize / offsets 0-1 / n=2,000, 1,000 classes, two per class / class-clustered stderr. Final evaluator: imagenetv2_top1_full10000 / maximize / offsets 0-9 / n=10,000, 1,000 classes, ten per class / class-clustered stderr, plus proxy-row and 8,000-image final-only diagnostics. Artifact contract: a loadable state_dict in the affine hull of the 72 starting weights, coefficients summing to one; negative/extrapolative coefficients are allowed; at most three formal checkpoints may be retained and the best valid evaluated artifact wins. ``

Both evaluators measure zero-shot top-1 classification accuracy for the same CLIP architecture on ImageNetV2. The proxy is a fixed 2,000-row subset of the final 10,000 rows and directly drives search; the other 8,000 rows remain unavailable until scoring. Proxy and full-final values are therefore related but not independent, identically distributed repeats and must not be compared as though they were. The evaluator-provided split diagnostics do reveal proxy selection overfit.

3.2 How the baseline works

``text [72 fixed CLIP weights plus visible proxy images] -> [construct a single model or an equal-weight average, then obtain class predictions with fixed CLIP inference] -> [true proxy labels produce top-1 accuracy as the selection signal] -> [uniform averages all weights; best_single selects the highest proxy scorer; strict_greedy walks the single-model rank order and accepts an expanded equal-weight average only when overall proxy accuracy strictly improves] -> [only mixture coefficients and the exported state_dict change; there is no loss, backpropagation, optimizer, or update to an ingredient] ``

The default baseline is uniform, which performs no data-dependent selection. The two optional methods first score all 72 singles; strict greedy never revisits its fixed candidate order and uses only point estimates on the same proxy. It has no cross-fold objective, exhaustive pair stage, unequal weights, random restarts, or wall-clock search. Progress callbacks may publish each accepted artifact. The agent explicitly diagnosed two bottlenecks: a two-image-per-class proxy makes small gains vulnerable to selection noise, and fixed-order equal-weight greedy misses complementary combinations. It also found that unconstrained linear-algebra threads made concurrent probes each consume roughly 256 CPU threads and distorted runtimes.

4. Four-hour exploration and decision process

The first roughly half hour covered source inspection, resource checks, and uniform/single/greedy baselines. About the next 90 minutes studied fold stability, margins, and combination size; the following hour covered paired uncertainty, unequal weights, and reverse-fold counterexamples. The final hour implemented cv_robust, exercised timeout/checkpoint paths, and validated syntax, official proxy evaluation, and affine-hull output. Repeated polling and cleanup are consolidated below. The run lasted about 11,990 seconds, short of its 14,400-second allowance.

U-01 - Establishing the baseline and removing runtime distortion

Motivation and hypothesis. The agent needed comparable uniform, best-single, and greedy measurements and an estimate of how many candidates fit in four hours. It initially launched three jobs concurrently, expecting cached inference to make this efficient.

Concrete change and experimental setup. After each process expanded to roughly 256 CPU threads, the agent killed the contaminated jobs, reran them sequentially, and set OMP_NUM_THREADS=16 and MKL_NUM_THREADS=16. Selection used the fixed 2,000-image proxy and seed 42.

Observed result. With oversubscription, the uniform artifact's official proxy score was 0.688 with stderr 0.01092 but evaluation took about 1,012 seconds, and validation-cache initialization took about 165.6 seconds. At 16 threads, initialization fell to about 20.9 seconds. Best-single finished in 88.2 seconds, selecting model_69 at 0.6935; strict greedy finished in 164.1 seconds with members [69,60,63,44,34,50] at 0.7025.

Agent interpretation. It treated oversubscription as an engineering fault, not an algorithmic result. Greedy's gain showed that selection mattered, while individual gains around a few thousandths could still be proxy noise.

Report assessment and confounds. Initial concurrent runtimes are not valid algorithm comparisons because of host contention. Sequential reruns remove that confound. The uniform fold scores later observed, 0.679/0.697, average to the same official 0.688.

Decision and consequence. The thread cap entered the patch. Best-single and strict greedy became controls, and subsequent work focused on fold robustness.