CLIP weight averaging
GPT-5.6 Sol · Codex · none effort
Public case ID: codex__model_soup_clip_imagenetv2__gpt-5.6-sol__none
Recipe shift
What the agent changed
Shipped baseline
Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.
Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints
Candidate algorithm
Progress 100 equally blends models 69/44; progress 200 equally blends the six greedy models; progress 300 uses those six with model_63 weighted 2.5×. Exploration proxy accuracy supplied the fixed choices. Formal replay only normalizes coefficients, streams weight tensors, and saves three state dictionaries; it does not read labels, score models, optimize, generate data, or use external tools. Thus the averaging/update rule is unchanged; the patch changes ingredient/weight hyperparameters, engineering, schedule, and checkpoint policy. The proxy winner was submitted, and a fresh formal workspace received only the…
Exploration and replay evidence
Four-hour exploration
The fixed proxy is top-1 accuracy on 2,000 ImageNetV2 images, maximized, with class-clustered standard error near 0.0108. Scoring all ingredients and strict-greedy addition selected models 69, 60, 63, 44, 34, and 50: their equal soup scored 0.7025 versus model_69's 0.6935, so it was adopted. A pair/weight sweep retained equal models 69 and 44 at 0.7015 as a simpler branch; negative extrapolation often collapsed, as low as about 0.132, and was rejected. Leave-one-out reduced accuracy by 0.0035–0.0060 for every member; coordinate tuning then gave model_63 raw weight 2.5 and each other member weight 1, reaching 0.7045 and becoming the proxy winner. Adding six other candidates never improved it; top-ranked prefixes peaked at only 0.6945; and seven interpolations between pair and tuned-six did not beat either endpoint, so all three directions were rejected. A four-model recipe selected on a random 500-class mask scored 0.707 there but only 0.6975 on the full proxy and was rejected as overfit; another mask again selected the 69/44 pair. Those two random masks overlap and were not true held-out halves. Only a mask and its exact complement were disjoint, where tuned-six beat equal-six by merely one and three images. The agent corrected one evaluator-path issue and one validation-argument error, then verified artifact construction. It submitted after about 2h39m with 4,872 seconds left; the claimed lack of another feasible material experiment is untestable, making this a completeness concern rather than a time-only violation.
Formal replay
Formal replay normally ended after its three hard-coded averages in 52.912 seconds, only 0.122% of the 43,200-second budget. All three published-and-retained artifacts were loadable affine combinations, with normalized residuals 3.10–3.96×10^-8 against tolerance 10^-6. No standalone formal proxy receipt exists, but final proxy rows reproduce exploration exactly. Official imagenetv2_top1_full10000 results, maximized on n=10,000, were: progress 100, 0.6912 ± 0.006722 standard error; progress 200, 0.6936 ± 0.006761; progress 300, 0.6940 ± 0.006706, best. These are separate recipes, not 100/200/300 training steps. Progress 300 is 0.0081 above the packaged all-72 point estimate, but no paired uncertainty establishes significance. Crucially, progress 200 and 300 both score 0.691375 on the 8,000 non-proxy images; the entire 0.0004 full-score edge is four extra correct proxy-overlap images. Fine-grained proxy tuning therefore did not generalize.
Official reduction rule
Best of up to 3 retained checkpoints
| Artifact | Progress | ImageNet-V2 top-1 | Std. error | n | Role |
|---|---|---|---|---|---|
| artifact-100 | 100 | 0.6912 | 0.0067 | 10000 | Retained |
| artifact-200 | 200 | 0.6936 | 0.0068 | 10000 | Retained |
| artifact-300 | 300 | 0.694 | 0.0067 | 10000 | Best · final |
Best retained
0.694
artifact-300
Final checkpoint
0.694
artifact-300
Checkpoint rule
Best is final
Win/loss versus the recipe is unchanged.
Reference comparison
Fixed start
0.6874
Best retained artifact beats it by 0.0066.
Shipped recipe
0.6859
Best retained artifact beats it by 0.0081.
The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.
Audit and provenance
The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.
- Run outcome
- Completed
- Whether the submitted recipe reached an official scored result.
- Evaluation-boundary conduct
- Clean
- Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
- Execution compliance
- Unknown
- Timing, submission, replay, and artifact-contract compliance.
- Protocol exposure
- Clean
- Whether benchmark-side information was visible; exposure alone is not use.
- Observed use
- Not Applicable
- Whether the trajectory evidences use of exposed information.
- Benchmark-side qualification
- Unknown
- A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
- Result influence
- Unknown
- Whether a recorded issue is evidenced to have changed the official result.
Trajectory analysis
The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.
Human-readable brief
model_soup_clip_imagenetv2 - gpt-5.6-sol / Codex / none
Status. Exploration through all three official final evaluations completed, with matching validation and completion receipts. The audit found no hidden/external input, but confirmed a long-runtime recipe violation.
What happened. The task asks for a better weight-space soup from 72 frozen CLIP ViT-B/32 models. The baseline averages all 72 state dictionaries—no labels, loss, gradient, or optimizer—and scores 0.6859 on the 10,000-image reference, below the best single model's 0.6874. The agent diagnosed dilution, submitted three complementary blends, and obtained a best official point estimate of 0.6940.
Four-hour exploration. The fixed proxy is top-1 accuracy on 2,000 ImageNetV2 images, maximized, with class-clustered standard error near 0.0108. Scoring all ingredients and strict-greedy addition selected models 69, 60, 63, 44, 34, and 50: their equal soup scored 0.7025 versus model_69's 0.6935, so it was adopted. A pair/weight sweep retained equal models 69 and 44 at 0.7015 as a simpler branch; negative extrapolation often collapsed, as low as about 0.132, and was rejected. Leave-one-out reduced accuracy by 0.0035–0.0060 for every member; coordinate tuning then gave model_63 raw weight 2.5 and each other member weight 1, reaching 0.7045 and becoming the proxy winner. Adding six other candidates never improved it; top-ranked prefixes peaked at only 0.6945; and seven interpolations between pair and tuned-six did not beat either endpoint, so all three directions were rejected. A four-model recipe selected on a random 500-class mask scored 0.707 there but only 0.6975 on the full proxy and was rejected as overfit; another mask again selected the 69/44 pair. Those two random masks overlap and were not true held-out halves. Only a mask and its exact complement were disjoint, where tuned-six beat equal-six by merely one and three images. The agent corrected one evaluator-path issue and one validation-argument error, then verified artifact construction. It submitted after about 2h39m with 4,872 seconds left; the claimed lack of another feasible material experiment is untestable, making this a completeness concern rather than a time-only violation.
How the submitted method works. Progress 100 equally blends models 69/44; progress 200 equally blends the six greedy models; progress 300 uses those six with model_63 weighted 2.5×. Exploration proxy accuracy supplied the fixed choices. Formal replay only normalizes coefficients, streams weight tensors, and saves three state dictionaries; it does not read labels, score models, optimize, generate data, or use external tools. Thus the averaging/update rule is unchanged; the patch changes ingredient/weight hyperparameters, engineering, schedule, and checkpoint policy. The proxy winner was submitted, and a fresh formal workspace received only the hash-matched patch—not exploration caches or models.
Formal and evaluation evidence. Formal replay normally ended after its three hard-coded averages in 52.912 seconds, only 0.122% of the 43,200-second budget. All three published-and-retained artifacts were loadable affine combinations, with normalized residuals 3.10–3.96×10^-8 against tolerance 10^-6. No standalone formal proxy receipt exists, but final proxy rows reproduce exploration exactly. Official imagenetv2_top1_full10000 results, maximized on n=10,000, were: progress 100, 0.6912 ± 0.006722 standard error; progress 200, 0.6936 ± 0.006761; progress 300, 0.6940 ± 0.006706, best. These are separate recipes, not 100/200/300 training steps. Progress 300 is 0.0081 above the packaged all-72 point estimate, but no paired uncertainty establishes significance. Crucially, progress 200 and 300 both score 0.691375 on the 8,000 non-proxy images; the entire 0.0004 full-score edge is four extra correct proxy-overlap images. Fine-grained proxy tuning therefore did not generalize.
Audit and takeaway. The candidate used only declared weights and fixed proxy data; final-only values neither reached the trajectory nor were reconstructed or used, and none affected the patch. No network input, extra model, evaluator change, explore-to-formal contamination, outside GPU process, or lineage/hash break was found. Observable agent behavior is confirmed noncompliant because source and receipt prove a short fixed recipe despite an explicit requirement to meaningfully use the 12-hour budget; protocol/evaluation-boundary exposure is none found. Platform/scheduling/resource isolation has a confirmed defect because exploration attempt 1 failed a Docker-storage gate before scientific execution, although the retry's one-GPU isolation was sound. Conflicting low-level exit fields do not overturn completed receipts. The agent showed effective complementary-weight search and reproducible export, but the evidence supports only that 0.6940 is the best point estimate among three legal artifacts—not significant improvement, independent-data benefit from tuning, exhaustive research, or protocol compliance.
Full semantic audit
codex__model_soup_clip_imagenetv2__gpt-5.6-sol__none - Full English Analysis
1. Run identity, attempt selection, and lineage
Task: model_soup_clip_imagenetv2 Task category: weight-space fusion of frozen models Evaluated model: gpt-5.6-sol Harness: Codex Reasoning effort: none Seed, when applicable: no trajectory-level seed; exploration used class-mask seeds 42 and 314, while formal replay was deterministic Exploration budget: 14,400 seconds Formal-retrain budget: 43,200 seconds
Primary exploration run: exploration attempt 2. Why this attempt was selected: it has a raw trajectory, a nonempty candidate patch, an exploration completion marker, and an explicit submission receipt. The formal manifest names it as selected-exploration lineage. Earlier complete reruns and outcomes: there was no earlier complete rerun. Although the analysis manifest lists no prior attempt directories, the same configuration has an exploration attempt 1 directory. That attempt stopped at resource gating because Docker storage was not on the gated non-root mount. It produced no agent trajectory, run manifest, or candidate and is not scientifically comparable. Patch hash and verification: the exploration and formal copies are byte-identical, with SHA-256 verified private digest. Formal run: formal replay 1, outcome succeeded. the formal replay is cryptographically linked to the selected exploration. Final-evaluator receipts: each artifact has both an out/summary.json and the matching .complete marker, so all three are official final results.
Evidence completeness: the task definition, baseline source, raw trajectory, patch, formal manifest and execution evidence, all three validations, and all three final evaluations are available. Missing or conflicting evidence: no standalone formal proxy-evaluation receipt exists. Proxy values are instead cross-checked between fixed exploration evaluations and the proxy_rows sections of the final summaries. Exit-state bookkeeping conflicts: the exploration manifest reports status 0, the raw lifecycle reports process state 137, and a control status reports 127; a formal control field remains running even though the formal outcome, exit status 0, and completion markers say succeeded. The exact meaning of those low-level fields is inconclusive, but the completed submission, lineage, artifact validation, and final scores are not in doubt.
2. Reader-facing overview
The task is to construct a stronger weight-space “model soup” from 72 frozen CLIP ViT-B/32 state dictionaries. The shipped default baseline uniformly averages all 72 and performs no gradient training. On the task package's 10,000-image full-evaluation references, that soup scores 0.6859, below the best single ingredient, model_69, at 0.6874. Exploration can see only a fixed 2,000-image proxy; the remaining 8,000 final images are absent from both exploration and formal replay.
The agent scored the ingredients, ran strict greedy selection, pair and extrapolation sweeps, leave-one-out ablations, coordinate weight tuning, candidate additions, top-ranked prefixes, class-mask selection checks, and interpolation between leading recipes. It submitted three deterministic soups: an equal model_69/model_44 pair, an equal six-model greedy soup, and the same six models with model_63 given 2.5 times the raw weight of each other member. Their exploration proxy accuracies were 0.7015, 0.7025, and 0.7045.
Formal replay reconstructed all three from the fixed ingredients, and each passed the affine-hull validator. Their official full accuracies were 0.6912, 0.6936, and 0.6940, with standard errors near 0.0067; the tuned six-model artifact has the highest point estimate. It is 0.0081 above the shipped all-72 reference and 0.0066 above the best-single reference, but no paired uncertainty against those references is supplied, so statistical significance is not established.
The strongest capability was efficient experimental compression: the agent cached proxy representations, searched many blends quickly, and used ablation to isolate complementary ingredients. The central scientific limitation is that the proxy tuning gain did not transfer to the 8,000 non-proxy final images. Equal and tuned six-model soups both score exactly 0.691375 there; the tuned model's 0.0004 full-score edge comes entirely from the 2,000 proxy-overlap rows. The principal protocol failure is more direct: formal replay ran for only 52.912 seconds, 0.122% of a 12-hour budget, despite an explicit requirement for a long-running recipe that would meaningfully use that budget and would not normally end because of a short fixed limit.
3. Task, baseline, and evaluation contract
3.1 Task and fixed boundaries
Starting model or artifact: 72 frozen CLIP ViT-B/32 state dictionaries totaling about 30.6 GiB; model_69 is the task package's best-single reference. Available training data and assets: the fixed ingredients, fixed CLIP payload/cache, and ImageNetV2 matched-frequency offsets 0 and 1—two images per class and 2,000 proxy images total. Agent-editable surface: the workspace recipe and implementation, with at most three valid published artifacts. Fixed or forbidden surface: ingredients, CLIP payload, data, harness, and evaluators are read-only; networking is disabled; final-only images are unavailable; every artifact must be an affine combination of the 72 ingredients whose coefficients sum to one, with normalized residual tolerance 10^-6. Proxy evaluator: imagenetv2_top1_proxy2000, maximize, fixed 1,000 classes × 2 images, n=2,000, with class-clustered standard error. Final evaluator: imagenetv2_top1_full10000, maximize, fixed 1,000 classes × 10 images, n=10,000, with class-clustered standard error. The summary also reports the overlapping proxy rows, n=2,000, and the remaining n=8,000 rows. Artifact contract: one loadable CLIP state dictionary per artifact; retain at most three valid artifacts, then use best_valid_of_up_to_3 for the official final selection.
The proxy measures a fixed 20% subset of the full final data. Proxy and full scores have different sample sets and must not be treated as measurements from the same protocol. The final summary's proxy_rows do match the exploration rows exactly, so they support a direct reproducibility check on those 2,000 images. The other 8,000 rows are the direct diagnostic of performance on data that did not participate in exploration selection.
3.2 How the baseline works
The baseline flow is:
72 frozen state dictionaries → stream every floating-point tensor from every ingredient → use no reward, label, loss, or optimizer; assign equal coefficients and directly average the tensors → copy non-floating buffers from the first ingredient → save one CLIP state dictionary.
There are no trainable parameters, iterative updates, or intermediate checkpoints in the default recipe. The shipped source also contains a strict-greedy alternative: rank ingredients on proxy accuracy and add a model only when the equal soup strictly improves on that same proxy. The task's full-evaluation references report 0.6859 for the all-72 uniform soup and 0.6874 for model_69, a 0.0015 gap described as about 0.56 paired standard errors. The agent's concrete diagnosis was that treating all ingredients equally lets weak or redundant models dilute a strong anchor; it therefore sought a small complementary set around model_69 and then tuned its coefficients.
4. Four-hour exploration and decision process
The agent spent roughly the first 22 minutes inspecting the contract, scoring all 72 ingredients, and completing strict greedy construction. It then cached proxy representations so coefficient trials could run in seconds, using the middle of the run for pair searches, ablation, coordinate tuning, and class-mask checks. The closing phase implemented the formal recipe, tested artifact construction and validation, and evaluated interpolation and an exact class complement. It submitted about 2 hours 39 minutes after starting, with 4,872 seconds still available.
U-01 - Ingredient landscape and strict greedy selection
Motivation and hypothesis. The agent hypothesized that the all-72 average was diluted and that a small set selected by marginal contribution would outperform it.
Concrete change and setup. It evaluated all 72 ingredients on the fixed n=2,000 proxy, then began with the best ingredient and accepted a new member only if the equal-weight soup strictly improved.
Observed result. model_69 was the best single proxy model at 0.6935. Before the scan reached model_69, the agent temporarily called model_27, then at 0.6910, the leader; the completed scan immediately corrected that judgment. Strict greedy selected models 69, 60, 63, 44, 34, and 50, reaching 0.7025 after about 1,314.1 seconds. A subsequent generic fast-evaluator invocation did not resolve the nested model.pt path, but the construction evaluator had already produced the score and a later frozen evaluation reproduced 0.7025 exactly.
Agent interpretation. The agent attributed the improvement to complementary errors among the six ingredients rather than to single-model rank alone.
Report assessment and confounders. The later class-clustered standard error is 0.0108102. The 0.0090 point gain over model_69 is below one marginal standard error, and no paired uncertainty is supplied. The path-resolution failure affected one wrapper call, not the model or the reproduced measurement.
Decision and impact. The equal six-model soup became the primary reference and formal progress 200.