CLIP weight averaging
GPT-5.6 Sol · Codex · max effort
Public case ID: codex__model_soup_clip_imagenetv2__gpt-5.6-sol__max
Recipe shift
What the agent changed
Shipped baseline
Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.
Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints
Candidate algorithm
A float32 GPU bank supports gradient-free coordinate searches on three train/validation splits: paired images, 500 versus 500 classes, and a joint 600-class/image split. Training rows choose moves, held-out rows choose endpoints, and endpoints are bagged. At most 12 finalists are fully rebuilt from original ingredients and exact-scored. Only affine coefficients change—there is no optimizer, synthetic data, external label, or CLIP gradient update. The three-file patch publishes complete stable3 and target55 fallbacks before its long search and checkpoint 3; exploration artifacts are excluded.
Exploration and replay evidence
Four-hour exploration
The maximized proxy is top-1 on 2,000 permitted images. Frozen model_69 scored 0.6935 in 187.65 seconds, so the agent cached images and placed visual/head ingredients on the GPU; mixed-precision screening reproduced the anchor in about 17 seconds, while finalists received float32 replay. Across all 72 singles, uniform and top-two averages scored only 0.6880 and 0.6915; complementary 44/59/69 froze at 0.7055 and convex stable3 at 0.7040. Greedy total, offset, class-half, cross-entropy, and conservative objectives showed that half-selected recipes could lose on held-out halves; those and the weak smooth-loss route were rejected.
Six class splits crossed with two offsets guided negative-coefficient extrapolation and local correction: successive frozen results were 0.7090, 0.7110, and 0.7125. Two concurrent evaluations contended in preprocessing; one stopped branch was later exact-scored at 0.7125, closing the failure. Adding ingredient 55 reached 0.7140; ingredient 21 reached 0.7130 and was rejected. An early formal smoke timed out after two artifacts; a later 937-second end-to-end diagnostic superseded it and found 0.7150. A 95% blend with 5% target55 kept that score, lowered coefficient L1, and beat no more aggressive line.
Paired analysis put the blend +0.0215 over model_69 (class-bootstrap 95% interval [0.0105, 0.0330]) but only +0.0010 over target55, with an interval crossing zero. A redundant extrapolation agreed with it on 98.15% of predictions, so checkpoint 1 changed to distinct stable3 (87.25%). Horizontal flip modestly favored simpler candidates; it supported diversity but was not official.
Formal replay
Replay used 39,491.483/43,200 seconds (91.415%), completing 266 trajectories, 433,617 queries, and 12 exact finalists before normal exit. This eleven-hour recipe is not a prohibited short endpoint, though its unused hour is an opportunity cost. All artifacts were loadable and affine-valid.
| Checkpoint | Final imagenetv2_top1_full10000 (maximize, n=10,000) | Class-cluster SE / final-only diagnostic | Result | |---|---:|---|---| | 1, stable3 | 0.6924 | 0.00668 / 0.6895 | valid fallback | | 2, target55 | 0.7006 | 0.00663 / 0.69725 | official best | | 3, bagged blend | 0.6997 | 0.00664 / 0.695875 | proxy best, final second |
Proxy scores rose 0.704, 0.714, 0.715, but final performance peaked at checkpoint 2. Its 0.0009 lead over checkpoint 3 has paired class-cluster SE about 0.000671; meanwhile proxy-versus-final-only gaps grow. The main basin transferred, but fine ranking overfit. Paired significance versus the start is unavailable.
Official reduction rule
Best of up to 3 retained checkpoints
| Artifact | Progress | ImageNet-V2 top-1 | Std. error | n | Role |
|---|---|---|---|---|---|
| artifact-1 | 1 | 0.6924 | 0.0067 | 10000 | Retained |
| artifact-2 | 2 | 0.7006 | 0.0066 | 10000 | Best |
| artifact-3 | 3 | 0.6997 | 0.0066 | 10000 | Final |
Best retained
0.7006
artifact-2
Final checkpoint
0.6997
artifact-3
Checkpoint rule
Best is an earlier checkpoint
Win/loss versus the recipe is unchanged.
Reference comparison
Fixed start
0.6874
Best retained artifact beats it by 0.0132.
Shipped recipe
0.6859
Best retained artifact beats it by 0.0147.
The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.
Audit and provenance
The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.
- Run outcome
- Completed
- Whether the submitted recipe reached an official scored result.
- Evaluation-boundary conduct
- Clean
- Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
- Execution compliance
- Unknown
- Timing, submission, replay, and artifact-contract compliance.
- Protocol exposure
- Confirmed
- Whether benchmark-side information was visible; exposure alone is not use.
- Observed use
- Not Observed
- Whether the trajectory evidences use of exposed information.
- Benchmark-side qualification
- Unknown
- A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
- Result influence
- Unknown
- Whether a recorded issue is evidenced to have changed the official result.
Trajectory analysis
The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.
Human-readable brief
model_soup_clip_imagenetv2 - gpt-5.6-sol / Codex CLI 0.146.0 / max
Status. The sole exploration attempt submitted; formal replay, three artifact validations, and three final evaluations completed. Agent behavior is clean; no protocol exposure or isolation defect was found.
What happened. The task requires a complete affine combination of 72 frozen CLIP ViT-B/32 states. The no-gradient uniform baseline scores 0.6859, tied with fixed start model_69 at 0.6874. Held-out coefficient search produced official best 0.7006 on 10,000 images, a +0.0132 point estimate.
Four-hour exploration. The maximized proxy is top-1 on 2,000 permitted images. Frozen model_69 scored 0.6935 in 187.65 seconds, so the agent cached images and placed visual/head ingredients on the GPU; mixed-precision screening reproduced the anchor in about 17 seconds, while finalists received float32 replay. Across all 72 singles, uniform and top-two averages scored only 0.6880 and 0.6915; complementary 44/59/69 froze at 0.7055 and convex stable3 at 0.7040. Greedy total, offset, class-half, cross-entropy, and conservative objectives showed that half-selected recipes could lose on held-out halves; those and the weak smooth-loss route were rejected.
Six class splits crossed with two offsets guided negative-coefficient extrapolation and local correction: successive frozen results were 0.7090, 0.7110, and 0.7125. Two concurrent evaluations contended in preprocessing; one stopped branch was later exact-scored at 0.7125, closing the failure. Adding ingredient 55 reached 0.7140; ingredient 21 reached 0.7130 and was rejected. An early formal smoke timed out after two artifacts; a later 937-second end-to-end diagnostic superseded it and found 0.7150. A 95% blend with 5% target55 kept that score, lowered coefficient L1, and beat no more aggressive line.
Paired analysis put the blend +0.0215 over model_69 (class-bootstrap 95% interval [0.0105, 0.0330]) but only +0.0010 over target55, with an interval crossing zero. A redundant extrapolation agreed with it on 98.15% of predictions, so checkpoint 1 changed to distinct stable3 (87.25%). Horizontal flip modestly favored simpler candidates; it supported diversity but was not official.
How the submitted method works. A float32 GPU bank supports gradient-free coordinate searches on three train/validation splits: paired images, 500 versus 500 classes, and a joint 600-class/image split. Training rows choose moves, held-out rows choose endpoints, and endpoints are bagged. At most 12 finalists are fully rebuilt from original ingredients and exact-scored. Only affine coefficients change—there is no optimizer, synthetic data, external label, or CLIP gradient update. The three-file patch publishes complete stable3 and target55 fallbacks before its long search and checkpoint 3; exploration artifacts are excluded.
Formal and evaluation evidence. Replay used 39,491.483/43,200 seconds (91.415%), completing 266 trajectories, 433,617 queries, and 12 exact finalists before normal exit. This eleven-hour recipe is not a prohibited short endpoint, though its unused hour is an opportunity cost. All artifacts were loadable and affine-valid.
| Checkpoint | Final imagenetv2_top1_full10000 (maximize, n=10,000) | Class-cluster SE / final-only diagnostic | Result | |---|---:|---|---| | 1, stable3 | 0.6924 | 0.00668 / 0.6895 | valid fallback | | 2, target55 | 0.7006 | 0.00663 / 0.69725 | official best | | 3, bagged blend | 0.6997 | 0.00664 / 0.695875 | proxy best, final second |
Proxy scores rose 0.704, 0.714, 0.715, but final performance peaked at checkpoint 2. Its 0.0009 lead over checkpoint 3 has paired class-cluster SE about 0.000671; meanwhile proxy-versus-final-only gaps grow. The main basin transferred, but fine ranking overfit. Paired significance versus the start is unavailable.
Audit and takeaway. Formal mounts contain only fixed CLIP, ingredients, proxy, patch, and fresh output; no downloader, extra model, or GPU sharing appears. Literal search of all 8,000 final-only identifiers against the complete trajectory, tool output, patch, and commands found zero matches and no use. Explore/formal hashes match; only exploration attempt 1 exists. Stale running and raw exit 137 conflict with authoritative submission/lifecycle completion but reflect submission teardown. Submission left 2,157 idle seconds only after paired analysis, affine checks, diversity replacement, flip testing, and preflight resolved every named question; deterministic rescoring was not new science. Timing and behavior are clean, protocol exposure absent, and isolation compliant. The main limitation is repeated proxy reuse.
Full semantic audit
codex__model_soup_clip_imagenetv2__gpt-5.6-sol__max - Full English Analysis
1. Run identity, attempt selection, and lineage
Task: model_soup_clip_imagenetv2, constructing a better weight-space soup from 72 fixed fine-tuned CLIP ViT-B/32 state dictionaries.
Task family: affine-coefficient search and artifact construction; there is no gradient training.
Evaluated coding-agent model: gpt-5.6-sol. Harness: Codex CLI 0.146.0. Reasoning effort: max.
Seeds: the frozen proxy evaluator defaults to 42 for choosing a class subset, but the complete 1,000-class evaluations here do not subsample and therefore do not depend on that seed. The candidate's exploration and formal coefficient search use 20260810, with five additional fixed seeds for class-half diagnostics.
Budgets: 14,400 seconds for exploration and 43,200 seconds for formal replay. “Retrain” is the orchestrator's phase name; this task constructs soups from frozen ingredients rather than updating a network by backpropagation.
The selected exploration run is exploration attempt 1. The manifest, sibling run-directory scan, control queue, attempt status, and correction scan show no earlier complete run or alternate numbered attempt for this configuration. exploration attempt 1 is therefore the only eligible run, not a best-of-retries selection.
The submitted candidate.patch is 76,105 bytes with SHA-256 verified private digest. It is byte-identical to the patch copied into the formal run.
The formal run is formal replay 1 record. Its selected-exploration lineage is exactly exploration attempt 1; the patch path, patch hash, submission origin, and source commit pinned private revision are corroborated by outcome.json.
All three checkpoints have direct validation evidence: progress 1 validation.json and completion receipt, progress 2 validation.json and completion receipt, and progress 3 validation.json and completion receipt. Each of the three final evaluations has both a summary.json and matching .complete, so all are official; direct pairs appear in Section 6.2 and the evidence map.
Evidence is otherwise complete, with one lifecycle-record inconsistency. The exploration manifest says agent_state: failed, the raw agent exit is 137, and a control attempt copy retains top-level status: running. Yet that same record's attempt_status, the job status, queue, submit.json, lifecycle.json, and .explore.complete agree that explicit submission terminated the agent process, accepted a nonempty patch, and produced outer exit status 0. Thus 137 is submission teardown, not a failed submission. A paired final-evaluation interval versus the fixed start is not available because the receipts do not provide the start's row predictions; final improvements can be reported as point estimates but not assigned an unsupported significance claim.
2. Reader-facing overview
The task supplies 72 read-only CLIP ViT-B/32 ingredient states and requires a complete state dictionary in their affine hull. The training-start reference is model_69, with declared full-set accuracy 0.6874. The shipped baseline learns nothing: it uniformly averages all 72 ingredients and scores 0.6859, a statistical tie with the start. The agent identified that frozen proxy evaluation, not averaging, was the bottleneck: one 2,000-image evaluation rebuilt the model, decoded images, and took roughly three minutes.
The agent cached the permitted proxy images and kept the relevant visual and classification parameters for all ingredients on the GPU. This turned screening into fast evaluation of affine coefficient vectors, while publication still reconstructed a complete float32 state from the original ingredients. It explored all singles, naïve and weighted averages, pair interpolation, multiple greedy objectives, class/offset cross-validation, negative-coefficient extrapolation, local corrections, endpoint bagging, paired uncertainty, behavioral diversity, and a horizontal-flip stress test. The patch encodes an eleven-hour cross-fit search, publishes two complete early fallbacks, and publishes a third checkpoint only after full float32 finalist replay.
Formal replay completed in 39,491.483 seconds, with 266 search trajectories and 433,617 fast coefficient queries. All three artifacts passed independent loadability and affine-hull validation. Their official 10,000-image accuracies are 0.6924, 0.7006, and 0.6997; progress 2 is the official best and improves the fixed-start point estimate by 0.0132. Progress 3 had the best proxy score but not the best final score, so the broad proxy conclusion transferred while the fine proxy ranking did not.
The strongest capability was conversion of an expensive black-box evaluation into a traceable search with held-out selection and exact replay. The main limitation is repeated selection on the same 2,000 proxy images, visible in a growing proxy-versus-final-only gap. No hidden-asset use, external data, explore-to-formal contamination, or resource overreach was found. Observable agent behavior is classified clean.
3. Task, baseline, and evaluation contract
3.1 Task and fixed boundaries
Starting model or artifact: the internal task model is the OpenAI CLIP ViT-B/32 architecture. The reference start is ingredient model_69, not the original CLIP state. The CLIP payload, 72 fine-tuned ingredient states, preprocessing, class mapping, and evaluator are fixed.
Permitted data and assets: exploration and formal replay receive the 72 ingredients, the fixed CLIP payload, and ImageNetV2 matched-frequency offsets 0 and 1—two images per class, 1,000 classes, 2,000 images total. The agent may change search, construction, runtime, and checkpoint logic under editable workspace. It may use any finite affine coefficients, including negative and extrapolative values.
Forbidden changes: the output must be a compatible complete state dictionary in the ingredients' affine hull. External images, labels, weights, models, or ingredients are prohibited. The candidate may not reconstruct or query final-only inputs or implement an evaluation-specific lookup. Formal replay applies the patch in a fresh container and may not mount exploration outputs.
The proxy metric is imagenetv2_top1_proxy2000, maximized on the 2,000 offset-0/1 images. It is deterministic for fixed coefficients and inputs. Receipts report class-clustered standard errors; the model_69 anchor is 0.6935 with standard error 0.01086. The evaluator's seed 42 only selects classes when a subset is requested; complete evaluations retain all classes.
The final metric is imagenetv2_top1_full10000, maximized on offsets 0–9, 10 images per class and 10,000 total. Its first 2,000 rows overlap the proxy; the other 8,000 rows are mounted only for scoring. Final receipts report the all-row score, the overlapping proxy score, the final-only 8,000-row score, and class-clustered standard errors. Proxy and all-row final values are neither independent nor the same split, so their raw difference is not an ordinary generalization estimate. The 8,000-row component is, however, a useful selection-bias diagnostic.
Artifact contract: each numeric checkpoint-<progress> contains a complete loadable model.pt. If more than three valid checkpoints are published, only the three greatest progress values are retained. Every accepted checkpoint is scored independently, and the official run score is the best valid final score.
3.2 How the baseline works
The baseline flow is:
``text 72 fixed complete state dictionaries -> assign coefficient 1/72 to every ingredient without reading proxy labels -> stream a tensor-wise uniform average; no loss, gradient, or optimizer exists -> produce one complete CLIP state dictionary -> publish checkpoint 1 ``
There are no trainable model parameters in the default path; the constructed soup is the only changed object. The shipped run.sh defaults to SELECTION_RULE=uniform, two validation images per class, batch size 256, and seed 42, but the uniform branch performs no proxy selection. Optional best-single and strict-greedy branches exist in source but are not the default. The task declaration reports 0.6874 for model_69 and 0.6859 for the uniform soup; the -0.0015 difference is about 0.56 paired standard errors and is therefore a tie, not demonstrated regression.
The agent explicitly diagnosed the bottleneck. The frozen evaluator rebuilt a model and decoded all proxy images on every query; the anchor took 187.65 seconds, so 72 naïve single-model evaluations would consume much of the exploration window. It also confirmed that text-encoder tensors are unchanged for this classification path, while the visual encoder and classification head carry the searchable variation; their roughly 31 GiB ingredient bank fits on the assigned GPU.
4. Four-hour exploration and decision process
Early exploration mapped the contract, measured a frozen anchor, and built the persistent evaluator. The middle portion covered single models, averaging, greedy and cross-fit searches, extrapolation, and local refinement. The late portion emphasized float32 frozen confirmation, affine checks, end-to-end formal diagnostics, paired uncertainty, checkpoint diversity, a view perturbation, and clean-patch preflight. The agent continued resolving concrete questions after first finding a valid improvement.
U-01 - Can frozen evaluation be accelerated without losing artifact fidelity?
Motivation and hypothesis. A three-minute black-box query could not support systematic 72-dimensional search. The agent hypothesized that a GPU-resident bank of only prediction-relevant parameters plus cached images would make coefficient screening fast, while full float32 materialization could preserve the artifact contract.
Concrete change and experimental setup. It first evaluated model_69 through the frozen harness. It then wrote a persistent exploration evaluator holding all visual-encoder and classification-head ingredients as a flat float32 bank, caching preprocessed images, and using float16 autocast for candidate forward passes. It recorded overall accuracy, both offsets, class halves, cross-entropy, per-row correctness, and predictions. Finalists were reconstructed from original float32 state dictionaries.
Observed result. The frozen anchor was 1,387/2,000 = 0.6935, class-clustered standard error 0.01086, in 187.65 seconds. The accelerated path reproduced 0.6935 and reduced the first query to about 17 seconds, with further warm-up gains. It was not bit-for-bit interchangeable near ties: the three-model screen gave 0.7065 while frozen float32 replay gave 0.7055, a two-image difference.
Agent interpretation. The persistent evaluator was a screening instrument, not an official evaluator; every checkpoint-level claim needed frozen float32 reconstruction and scoring.
Report assessment and confounders. This interpretation is supported. The method enabled broad search, but mixed precision and repeated selection make sub-percentage screening differences unreliable without exact replay.
Decision and effect. All broad scans used the accelerated path. Candidate checkpoints had to pass frozen evaluation, hash checks, and affine validation.