Navers lab
← Trajectory Explorer
Model SoupCompleted

CLIP weight averaging

GPT-5.6 Luna · Codex · medium effort

Public case ID: codex__model_soup_clip_imagenetv2__gpt-5.6-luna__medium

Recipe shift

What the agent changed

Shipped baseline

Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.

Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints

Candidate algorithm

The baseline streams all 72 ingredients into one equal average. The candidate first ranks ingredients using accuracy from the fixed proxy labels, then exports an emphasized top-four soup, the best single ingredient, and a soup that adds ranked ingredients only when the new equal average strictly improves proxy accuracy. No source checkpoint is updated and no gradient rule exists. The changes are selection algorithm, weighting hyperparameters, schedule, engineering, and checkpoint policy. Only source was transferred to a fresh formal container; the exploration leader was included, while the untested greedy branch…

Exploration and replay evidence

Four-hour exploration

The common proxy was higher-is-better top-1 on 2,000 images, two per class, with class-clustered standard errors. A duplicate startup and malformed validator call produced no candidate result; the canonical uniform-72 control scored 0.6880 ± 0.010921 and confirmed that checkpoint I/O and inference dominated cost. Full ranking put model_69 first at 0.6935 and the weakest ingredient at 0.6340; exact formal replay of the ordering supported adopting this ranking, although a redundant independent reevaluation was stopped to avoid same-GPU contention.

Equal-weight top-4 scored 0.6940 ± 0.010931, top-8 0.6935, top-16 0.6895, and reciprocal-rank weighting over 32 ingredients 0.6900. The agent adopted top-4 and rejected the latter alternatives, but top-4's margin was only one image; constructed top-32 and top-72 soups were never scored or validated and remain inconclusive. One emphasized top-four vector (0.50/0.20/0.15/0.15) scored 0.6945 ± 0.010956, again a one-image gain, and became artifact 100. A strict-improvement greedy branch was only syntax/smoke-tested, not explored. Submission nevertheless occurred with 9,782 seconds left and an active process, although formal evidence later showed ranking plus all 71 greedy trials took about 17 minutes.

Formal replay

Formal reconstruction naturally exhausted 72 rankings and 71 greedy trials in 1,058.29 of 43,200 seconds (2.4497%), rather than reaching a wall-clock limit. All three published and simultaneously retained artifacts loaded and passed normalized affine residual tolerance. Labels 100–102 identify different artifacts, not training steps.

| Checkpoint | Full 10,000-image top-1, higher is better | Evidence and conclusion | |---|---:|---| | 100, emphasized top-four | 0.6902 ± 0.006742 | Missing .complete; unofficial diagnostic only | | 101, best single | 0.6874 ± 0.006722 | Official fixed comparison | | 102, six-ingredient greedy | 0.6936 ± 0.006761 | Best receipt-complete result |

Checkpoint 102 scored 0.7025 on the proxy. Paired raw final rows show a 0.0062 gain over 101 with class-clustered paired standard error 0.00252. Thus the broad finding that filtering weak ingredients helps survived, while the exact four-ingredient weighting did not win. Proxy-versus-remaining-8,000 gaps mix selection with split difficulty and do not alone prove severe overfitting.

Official reduction rule

Best of up to 3 retained checkpoints

3 retained
ArtifactProgressImageNet-V2 top-1Std. errornRole
artifact-1001000.690210000Retained
artifact-1011010.687410000Retained
artifact-1021020.693610000Best · final

Best retained

0.6936

artifact-102

Final checkpoint

0.6936

artifact-102

Checkpoint rule

Best is final

Win/loss versus the recipe is unchanged.

Reference comparison

Fixed start

0.6874

Best retained artifact beats it by 0.0062.

Shipped recipe

0.6859

Best retained artifact beats it by 0.0077.

The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.

Audit and provenance

The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.

Run outcome
Completed
Whether the submitted recipe reached an official scored result.
Evaluation-boundary conduct
Clean
Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
Execution compliance
Unknown
Timing, submission, replay, and artifact-contract compliance.
Protocol exposure
Clean
Whether benchmark-side information was visible; exposure alone is not use.
Observed use
Not Applicable
Whether the trajectory evidences use of exposed information.
Benchmark-side qualification
Unknown
A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
Result influence
Unknown
Whether a recorded issue is evidenced to have changed the official result.
Public lineage. Source-only patch replayed from the frozen start. Validated artifacts: 3. Patch ID: PATCH-2121d13c548b. No private filesystem or receipt path is included.

Trajectory analysis

The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.

Human-readable brief

model_soup_clip_imagenetv2 - gpt-5.6-luna / Codex CLI / medium

Status. Exploration explicitly submitted after 4,661 of 14,400 seconds; formal reconstruction and all three affine-hull validations succeeded. Final evaluation is partial: artifacts 101/102 have summary.json plus .complete, while artifact 100 lacks .complete and is diagnostic only. The boundary audit found confirmed execution-rule violations but no data or evaluator hack.

What happened. The task constructs complete CLIP ViT-B/32 state dictionaries in the affine hull—the coefficient-sum-one combination space—of 72 frozen fine-tuned ingredients. The baseline uniformly averages corresponding weights without labels, loss, optimizer, or gradients; the fixed comparison artifact is best single ingredient model_69. The agent hypothesized that weak ingredients dilute strong ones, submitted a proxy-ranked three-artifact portfolio, and obtained a six-ingredient soup that was best among receipt-complete results at 0.6936 on full ImageNetV2.

Four-hour exploration. The common proxy was higher-is-better top-1 on 2,000 images, two per class, with class-clustered standard errors. A duplicate startup and malformed validator call produced no candidate result; the canonical uniform-72 control scored 0.6880 ± 0.010921 and confirmed that checkpoint I/O and inference dominated cost. Full ranking put model_69 first at 0.6935 and the weakest ingredient at 0.6340; exact formal replay of the ordering supported adopting this ranking, although a redundant independent reevaluation was stopped to avoid same-GPU contention.

Equal-weight top-4 scored 0.6940 ± 0.010931, top-8 0.6935, top-16 0.6895, and reciprocal-rank weighting over 32 ingredients 0.6900. The agent adopted top-4 and rejected the latter alternatives, but top-4's margin was only one image; constructed top-32 and top-72 soups were never scored or validated and remain inconclusive. One emphasized top-four vector (0.50/0.20/0.15/0.15) scored 0.6945 ± 0.010956, again a one-image gain, and became artifact 100. A strict-improvement greedy branch was only syntax/smoke-tested, not explored. Submission nevertheless occurred with 9,782 seconds left and an active process, although formal evidence later showed ranking plus all 71 greedy trials took about 17 minutes.

How the submitted method works. The baseline streams all 72 ingredients into one equal average. The candidate first ranks ingredients using accuracy from the fixed proxy labels, then exports an emphasized top-four soup, the best single ingredient, and a soup that adds ranked ingredients only when the new equal average strictly improves proxy accuracy. No source checkpoint is updated and no gradient rule exists. The changes are selection algorithm, weighting hyperparameters, schedule, engineering, and checkpoint policy. Only source was transferred to a fresh formal container; the exploration leader was included, while the untested greedy branch was also submitted.

Formal and evaluation evidence. Formal reconstruction naturally exhausted 72 rankings and 71 greedy trials in 1,058.29 of 43,200 seconds (2.4497%), rather than reaching a wall-clock limit. All three published and simultaneously retained artifacts loaded and passed normalized affine residual tolerance. Labels 100–102 identify different artifacts, not training steps.

| Checkpoint | Full 10,000-image top-1, higher is better | Evidence and conclusion | |---|---:|---| | 100, emphasized top-four | 0.6902 ± 0.006742 | Missing .complete; unofficial diagnostic only | | 101, best single | 0.6874 ± 0.006722 | Official fixed comparison | | 102, six-ingredient greedy | 0.6936 ± 0.006761 | Best receipt-complete result |

Checkpoint 102 scored 0.7025 on the proxy. Paired raw final rows show a 0.0062 gain over 101 with class-clustered paired standard error 0.00252. Thus the broad finding that filtering weak ingredients helps survived, while the exact four-ingredient weighting did not win. Proxy-versus-remaining-8,000 gaps mix selection with split difficulty and do not alone prove severe overfitting.

Audit and takeaway. Fixed data, ingredients, evaluator, and final-only images remained isolated; no external input was used, formal lineage contains only the byte-identical 5,372-byte patch, and each phase used one idle-gated GPU without outside sharing. Observable agent behavior is confirmed noncompliant because explicit rules and receipts establish premature submission, uncleared work, and a short fixed formal schedule; protocol exposure was not found. GPU isolation was compliant, but artifact 100's missing completion receipt is a confirmed platform-record defect. The run demonstrates efficient reuse of an expensive ranking and lawful multi-artifact reconstruction, but cannot establish that the four-ingredient weights were optimal or that fuller budgets would not improve the result.

Full semantic audit

codex__model_soup_clip_imagenetv2__gpt-5.6-luna__medium - Full English Analysis

1. Run identity, attempt selection, and lineage

2. Reader-facing overview

The task is to construct a stronger weight-space soup from 72 frozen fine-tuned CLIP ViT-B/32 checkpoints. The shipped baseline averages all 72 checkpoints uniformly and uses no proxy labels for component selection; the fixed comparison artifact is the best single ingredient, model_69. The task declaration reports full-ImageNetV2 scores of 0.6874 for that fixed starting point and 0.6859 for the shipped uniform soup. Their difference is only about 0.56 paired standard errors, so the supplied evidence does not establish that uniform averaging is genuinely worse. The agent's useful hypothesis was narrower: ingredients vary substantially in quality, so unconditional averaging may dilute the strongest ones, while repeated checkpoint I/O and proxy inference—not coefficient arithmetic—are the principal costs.

The agent used about 77.7 minutes of its four-hour exploration phase. It reproduced the uniform control, ranked all 72 ingredients, compared equal-weight top-4, top-8, top-16, top-32, and top-72 constructions plus a rank-decay construction, and tried one nonuniform weighting of the four highest-ranked ingredients. Only top-4, top-8, top-16, and rank decay received proxy evaluations; top-32 and top-72 were constructed but left unscored. The best observed exploration proxy score was 0.6945 for weights 0.50, 0.20, 0.15, and 0.15 on the top four ingredients. The submitted patch broadened this into a three-artifact portfolio: that emphasized top-four soup, the best single ingredient, and the result of a full strict-greedy search.

Formal reconstruction succeeded, and all three artifacts loaded correctly and lay within the affine hull of the 72 permitted ingredients—the lawful space of weight combinations whose coefficients sum to one. The formal-only strict-greedy search selected six ingredients and scored 0.7025 on the proxy. Only two final artifacts have complete official receipts: the best single ingredient scored 0.6874 ± 0.006722, and the six-ingredient greedy soup scored 0.6936 ± 0.006761 on all 10,000 ImageNetV2 images. The latter is the best receipt-complete result. Direct pairing of their 10,000 raw prediction rows gives a gain of 0.0062 with a class-clustered paired standard error of 0.00252. The emphasized top-four artifact has a 0.6902 summary, but its missing .complete excludes it from official comparison.

The strongest capability shown was reuse of one costly ingredient ranking across several legal soups, followed by a source-only portfolio that could be deterministically reconstructed in a fresh container. The main failure was execution and research completeness. The agent submitted with 9,782 seconds remaining, while top-32/top-72 were still unscored and strict greedy had not been run in exploration; the submission receipt also records active_work_at_submit=true. The supposedly long-running formal recipe then consumed only 2.45% of its 12-hour budget. Those facts violate the task's explicit early-submission, background-process, and formal-budget requirements. No hidden-data access, external-data use, evaluator modification, or reuse of exploration artifacts was found.

3. Task, baseline, and evaluation contract

3.1 Task and fixed boundaries

``text Starting artifact / model: 72 fixed fine-tuned CLIP ViT-B/32 checkpoints; model_69 is the report's fixed comparison artifact Available training data and assets: 72 read-only ingredients, the fixed CLIP payload, and a 2,000-image ImageNetV2 proxy containing the first two sorted images of every class Agent-editable surface: everything under editable workspace, including any lawful selection, search, or weighting procedure; the actual candidate changes only run.sh and soup.py Fixed or forbidden components: ingredients, CLIP architecture and preprocessing, class mapping, proxy/final images, evaluators, and the affine-hull checker; external images, labels, weights, ingredients, and final-input lookup are forbidden Proxy evaluator: imagenetv2_top1_proxy2000 / higher is better / sorted offsets 0–1 per class / n=2,000 / standard error clustered over 1,000 classes Final evaluator: imagenetv2_top1_full10000 / higher is better / offsets 0–9 per class / n=10,000 / class-clustered standard error, with proxy-subset and remaining-8,000 diagnostics Artifact contract: each checkpoint must be a complete loadable state_dict in the affine hull of the 72 ingredients; at most the three largest numeric progress values are accepted ``

Proxy and final evaluation use the same fixed architecture, preprocessing, top-1 rule, and class mapping. The proxy is a 20% subset of the full evaluation set. Thus, a final summary's proxy_rows should reproduce the exploration score for the same checkpoint, but the 2,000-row proxy and 10,000-row full score are not scores on identical splits. Their difference cannot be interpreted directly as a generalization gain. The final evaluator also reports performance on the other 8,000 rows. Its score(P)-score(F\P) diagnostic combines row-difficulty differences with selection effects and is not a pure estimate of overfitting.

3.2 How the baseline works

``text 72 frozen CLIP state_dict files -> assign every ingredient the same coefficient and stream them one at a time -> the uniform baseline uses no label, reward, or proxy selection signal -> average corresponding floating-point tensors with coefficients summing to one; use no loss, optimizer, or gradients -> export one complete CLIP state_dict while leaving the ingredients and fixed architecture unchanged ``

The baseline's weighted_average routine loads one roughly 456 MiB ingredient at a time, accumulates its floating tensors into a running sum, and copies nonfloating tensors from the first ingredient. Apart from summation order, this is equivalent to loading and averaging all weights simultaneously. Default run.sh produces one uniform checkpoint at progress 1 and uses a retention limit of three. There are no trainable parameters or training updates; “retraining” is merely the framework's name for fresh-container artifact construction.

The agent identified two bottlenecks before experimenting. Scientifically, uniformly including low-quality ingredients could dilute stronger components. Operationally, reading the approximately 31 GiB ingredient collection and running 72 proxy forwards should dominate coefficient manipulation. This motivated a uniform control followed by one full ranking that could be reused for several mixtures.

4. Four-hour exploration and decision process

Exploration began at 13:43 UTC and ended in an explicit submission at 15:00 UTC, about 77.7 minutes later rather than at the four-hour limit. Roughly the first ten minutes were spent reading source, understanding the affine-hull gate, and resolving a duplicate launch. The next period established the uniform control and ranked all 72 ingredients. The longest single validation—testing the best single checkpoint against the full ingredient basis—took about 18 minutes, during which the agent prepared a mixture generator. The final half hour produced four scored mixtures, one nonuniform weighting, two candidate validations, and the formal portfolio code. The remaining 2 hours 43 minutes were not used for further experiments.

U-01 — Can the baseline be reproduced, and what is the real systems bottleneck?

Motivation and hypothesis. The agent first needed an end-to-end check of uniform construction, proxy scoring, and artifact validation so that later differences could be attributed to ingredient selection rather than malformed output or inconsistent evaluation. It expected shared-storage reads and forward passes to dominate runtime.

Change and setup. It left baseline source unchanged and used seed 42, batch size 256, all 72 ingredients, and all 2,000 proxy images. A first launch was terminated before producing output while the agent resolved a duplicate process; the second launch is the canonical run. The agent also initially invoked the validator with the wrong command-line shape, receiving a missing-arguments error for --task, --checkpoint, and --output.

Observed result. Canonical uniform construction took 251.45 seconds and produced a loadable checkpoint. Proxy accuracy was 0.6880, or 1,376/2,000, with class-clustered standard error 0.010921; proxy inference took 180.54 seconds. The earlier “no .pt” evaluation and validator exit code 2 had no candidate artifact and are not counted as model results.

Agent interpretation. It treated the uniform control as broadly consistent with the task's stated near-tie between the full-data uniform soup and best single ingredient, and attributed slow construction to shared-mount I/O rather than arithmetic.

Report assessment and confounders. Logs support the I/O-and-forward bottleneck. Exploration used one idle L20D; this hardware is accepted for this batch and its name is not a violation. The duplicate process and malformed validator command are resolved debugging events and do not compromise the canonical 0.6880 result.

Decision and consequence. The uniform checkpoint remained a fallback while the agent moved to a complete ingredient ranking to test dilution by weak components.