CLIP weight averaging
GPT-5.6 Terra · Codex · low effort
Public case ID: codex__model_soup_clip_imagenetv2__gpt-5.6-terra__low
Recipe shift
What the agent changed
Shipped baseline
Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.
Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints
Candidate algorithm
Baseline flow: 72 fixed state dicts → fixed 1/72 weights → tensor average → one model. Candidate flow: the same ingredients plus proxy labels → rank by top-1 → greedily accept only improving equal-weight merges → export complete affine-combination checkpoints. There is still no loss, optimizer, or parameter update; the changes are selection hyperparameter, schedule, engineering, and checkpoint policy. Formal replay received only the patch and reconstructed from fixed assets. Its greedy checkpoint SHA-256 exactly matches the exploration best, so equality reflects deterministic replay rather than reused weights.
Exploration and replay evidence
Four-hour exploration
The proxy is top-1 accuracy on 2,000 ImageNetV2 images, two per class, and higher is better. First, the agent scored all 72 ingredients and used the existing strict-greedy rule: start from proxy-best model_69, add a ranked ingredient only if the new equal-weight average strictly improves accuracy. Individual scores ranged from 0.6340 to 0.6935; six retained models reached 0.7025 in 1,340.44 seconds, so this became the fallback. Second, an initially malformed artifact-check command failed with exit 2, then the corrected full check passed with residual-over-norm 5.34×10^-8 versus tolerance 10^-6. A 500-class, 1,000-row diagnostic scored 0.692 ± 0.01552, but those classes had already influenced construction and no control or complement was tested, so this was not genuine holdout evidence. Third, an 11-point sweep assigned model_69 weight 0–1 and split the remainder over the other five; scores ranged from 0.6935 to 0.7020, so shrinkage was rejected. Fourth, the agent patched run.sh to sweep increasing candidate widths, reserve 3,600 seconds for a complete trial, retain three models, and publish best-single, uniform, and full greedy last. Syntax passed, but the long path was not tested until formal replay. The agent then submitted with 11,560 seconds remaining and without awaiting a final reduced-coordinate recheck, despite an explicit instruction to continue meaningful feasible work.
Formal replay
Orchestration overrode the patch fallback with a 42,600-second wall-clock limit. Replay used batch size 256 and seed 42, completed requested widths 1–49 before the guard, then three controls, and exited 0 after 41,392.736 of 43,200 seconds. There were 52 cumulative publications but only three simultaneous retained/accepted artifacts. All were affine-valid. On imagenetv2_top1_full10000 (maximize, full split, n=10,000), progress 50 best-single scored 0.6874 ± 0.00672, progress 51 uniform scored 0.6859 ± 0.00680, and progress 52 six-model greedy scored 0.6936 ± 0.00676. From official row files, paired class-clustered gains for greedy are 0.0062 ± 0.00252 over best-single and 0.0077 ± 0.00228 over uniform. Greedy scored 0.7025 on the overlapping proxy rows and 0.691375 on the other 8,000, so the gain survived outside the search rows, though the 0.011125 partition gap indicates selection inflation mixed with subset difficulty. Progress is publication order, not a training curve.
Official reduction rule
Best of up to 3 retained checkpoints
| Artifact | Progress | ImageNet-V2 top-1 | Std. error | n | Role |
|---|---|---|---|---|---|
| artifact-50 | 50 | 0.6874 | 0.0067 | 10000 | Retained |
| artifact-51 | 51 | 0.6859 | 0.0068 | 10000 | Retained |
| artifact-52 | 52 | 0.6936 | 0.0068 | 10000 | Best · final |
Best retained
0.6936
artifact-52
Final checkpoint
0.6936
artifact-52
Checkpoint rule
Best is final
Win/loss versus the recipe is unchanged.
Reference comparison
Fixed start
0.6874
Best retained artifact beats it by 0.0062.
Shipped recipe
0.6859
Best retained artifact beats it by 0.0077.
The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.
Audit and provenance
The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.
- Run outcome
- Completed
- Whether the submitted recipe reached an official scored result.
- Evaluation-boundary conduct
- Clean
- Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
- Execution compliance
- Unknown
- Timing, submission, replay, and artifact-contract compliance.
- Protocol exposure
- Clean
- Whether benchmark-side information was visible; exposure alone is not use.
- Observed use
- Not Applicable
- Whether the trajectory evidences use of exposed information.
- Benchmark-side qualification
- Unknown
- A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
- Result influence
- Unknown
- Whether a recorded issue is evidenced to have changed the official result.
Trajectory analysis
The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.
Human-readable brief
model_soup_clip_imagenetv2 - gpt-5.6-terra / Codex CLI / low
Status. Exploration explicitly submitted after about 48 minutes; submission, linked formal replay, three artifact validations, and all three official final evaluations completed. Artifact-52's first score attempt exited 143, but its retry has both summary.json and .complete. The audit confirms early-submission noncompliance but finds no data or lineage attack.
What happened. The task constructs a weight-space soup from 72 fixed CLIP ViT-B/32 checkpoints. The shipped baseline uniformly averages their tensors without loss or gradient training; the agent identified unconditional dilution by weak ingredients and a one-shot recipe that would waste the 12-hour formal budget. It submitted proxy-ranked strict greedy equal weighting plus a time-governed construction schedule, and the resulting six-model soup achieved the best official score, 0.6936.
Four-hour exploration. The proxy is top-1 accuracy on 2,000 ImageNetV2 images, two per class, and higher is better. First, the agent scored all 72 ingredients and used the existing strict-greedy rule: start from proxy-best model_69, add a ranked ingredient only if the new equal-weight average strictly improves accuracy. Individual scores ranged from 0.6340 to 0.6935; six retained models reached 0.7025 in 1,340.44 seconds, so this became the fallback. Second, an initially malformed artifact-check command failed with exit 2, then the corrected full check passed with residual-over-norm 5.34×10^-8 versus tolerance 10^-6. A 500-class, 1,000-row diagnostic scored 0.692 ± 0.01552, but those classes had already influenced construction and no control or complement was tested, so this was not genuine holdout evidence. Third, an 11-point sweep assigned model_69 weight 0–1 and split the remainder over the other five; scores ranged from 0.6935 to 0.7020, so shrinkage was rejected. Fourth, the agent patched run.sh to sweep increasing candidate widths, reserve 3,600 seconds for a complete trial, retain three models, and publish best-single, uniform, and full greedy last. Syntax passed, but the long path was not tested until formal replay. The agent then submitted with 11,560 seconds remaining and without awaiting a final reduced-coordinate recheck, despite an explicit instruction to continue meaningful feasible work.
How the submitted method works. Baseline flow: 72 fixed state dicts → fixed 1/72 weights → tensor average → one model. Candidate flow: the same ingredients plus proxy labels → rank by top-1 → greedily accept only improving equal-weight merges → export complete affine-combination checkpoints. There is still no loss, optimizer, or parameter update; the changes are selection hyperparameter, schedule, engineering, and checkpoint policy. Formal replay received only the patch and reconstructed from fixed assets. Its greedy checkpoint SHA-256 exactly matches the exploration best, so equality reflects deterministic replay rather than reused weights.
Formal and evaluation evidence. Orchestration overrode the patch fallback with a 42,600-second wall-clock limit. Replay used batch size 256 and seed 42, completed requested widths 1–49 before the guard, then three controls, and exited 0 after 41,392.736 of 43,200 seconds. There were 52 cumulative publications but only three simultaneous retained/accepted artifacts. All were affine-valid. On imagenetv2_top1_full10000 (maximize, full split, n=10,000), progress 50 best-single scored 0.6874 ± 0.00672, progress 51 uniform scored 0.6859 ± 0.00680, and progress 52 six-model greedy scored 0.6936 ± 0.00676. From official row files, paired class-clustered gains for greedy are 0.0062 ± 0.00252 over best-single and 0.0077 ± 0.00228 over uniform. Greedy scored 0.7025 on the overlapping proxy rows and 0.691375 on the other 8,000, so the gain survived outside the search rows, though the 0.011125 partition gap indicates selection inflation mixed with subset difficulty. Progress is publication order, not a training curve.
Audit and takeaway. Fixed data/model mounts, the absence of final-only rows during search, frozen evaluation, no external inputs, fresh formal reconstruction, patch/hash lineage, one-GPU use, and wall-clock compliance all check out. Observable agent behavior is confirmed solely because the explicit early-exploration rule was breached; protocol/evaluation-boundary exposure is none found. Platform/scheduling/resource isolation is inconclusive: explore and formal GPUs were isolated, but the first artifact-52 score termination has no cause receipt. The case demonstrates reproducible proxy-guided soup construction and a final paired improvement, but not a fully explored four-hour optimum or any necessity for the expensive repeated-prefix schedule.
Full semantic audit
codex__model_soup_clip_imagenetv2__gpt-5.6-terra__low - Full English Analysis
1. Run identity, attempt selection, and lineage
The explore manifest's auto_retrain=false says only that the explore process did not itself create a formal phase. The upstream queue, formal dispatch, and selected-exploration lineage establish the linked formal run. No other numbered explore or formal directory exists for this configuration, and there is no matching correction receipt.
2. Reader-facing overview
The task asks for a better weight-space model soup from 72 fixed CLIP ViT-B/32 fine-tuned checkpoints. The training-start reference is the strongest ingredient, model_69, while the shipped baseline uniformly averages all 72. There is no gradient training: proxy top-1 accuracy is a selection signal, and the output is an affine combination of fixed checkpoint weights. The baseline's concrete limitations are that uniform averaging never uses the proxy to identify complementary ingredients and that its original run.sh finishes after one short construction rather than making meaningful use of the 12-hour formal budget.
The agent ranked all 72 ingredients on the 2,000-image proxy and ran the existing strict greedy equal-weight merge: a new ingredient was kept only when its addition increased proxy accuracy. This produced a six-model soup scoring 0.7025 internally. The agent then checked the affine-hull constraint, ran one 500-class subset diagnostic, and swept 11 weightings that shrank the six-model set toward the best single model. The sweep peaked at 0.7020 and was rejected. The submitted patch did not change soup.py; it changed the default to strict_greedy, added a wall-clock-governed sweep over candidate-prefix widths, and published best-single, uniform, and full-greedy controls last.
Formal construction completed 49 prefix trials and the three final controls, reaching 52 cumulative publications while retaining only three at a time. All three final artifacts loaded and passed the affine-hull validator over 113,961,705 floating-point parameters. The official best was checkpoint 52, the six-model equal-weight greedy soup, with imagenetv2_top1_full10000=0.6936 and class-clustered standard error 0.00676. Best-single and uniform scored 0.6874 and 0.6859. A report-author recomputation from the official row files gives paired, class-clustered differences of 0.0062 ± 0.00252 and 0.0077 ± 0.00228, respectively.
The strongest capability was connecting proxy selection, artifact validity, formal wall-clock control, and three-artifact retention into a reproducible replay; the explore and formal greedy artifacts have the same SHA-256. The principal failure was research completeness. The agent explicitly submitted after about 48 minutes with 3 h 13 min remaining and did not wait for its last artifact check, despite a task rule requiring continued meaningful exploration while feasible. This is confirmed execution-protocol noncompliance, not a data, hidden-asset, or lineage attack. An unexplained exit-143 final-scoring attempt was recovered by retry and does not invalidate the official result, but its platform cause is inconclusive.
3. Task, baseline, and evaluation contract
3.1 Task and fixed boundaries
``text Starting artifact / model: fixed model_69 as the training-start reference; the shipped construction baseline is the uniform average of all 72 ingredients Available training data and assets: 72 read-only CLIP ViT-B/32 ingredients, fixed CLIP payload, and 2,000 ImageNetV2 proxy images Agent-editable surface: selection, weighting, search, construction, and checkpoint-publication logic under editable workspace Fixed or forbidden components: ingredient set, CLIP architecture/preprocessing, evaluator, and full 10,000-image final set; no external images, labels, weights, or ingredients Proxy evaluator: imagenetv2_top1_proxy2000, maximize, ImageNetV2 per-class sorted offsets 0-1, n=2,000; class-clustered standard error is supplied by fast_eval receipts Final evaluator: imagenetv2_top1_full10000, maximize, offsets 0-9, n=10,000; class-clustered standard error plus separate proxy-2,000 and remaining-8,000 partitions Artifact contract: one complete compatible state dict inside the affine hull of the 72 ingredients; up to the three greatest numeric-progress checkpoints are accepted and the best valid final score is official ``
Proxy and final evaluation use the same forward path and top-1 arithmetic, but the proxy is only a 20% overlapping subset of the final set. The overlap permits exact reproducibility checks on those rows; it does not make 0.7025 and 0.6936 a same-distribution before/after comparison. The final evaluator's remaining 8,000 rows show whether a proxy-selected advantage reaches images not used for search. Predictions are deterministic on fixed images, so the seed is not a conventional training-variance axis. The reported standard error describes uncertainty across classes.
3.2 How the baseline works
``text 72 fixed CLIP state dicts -> stream identically named tensors from each ingredient -> assign every ingredient fixed weight 1/72, without labels or proxy scores -> uniformly average floating tensors; copy non-floating tensors from the first ingredient -> export one complete loadable model.pt and publish checkpoint-1 ``
The baseline computes no loss, performs no backpropagation, and changes none of the ingredients; only the constructed model weights change. soup.py already supports best_single and strict_greedy, but baseline run.sh defaults to uniform, seed 42, batch size 256, and one construction. The task declaration reports full-ImageNetV2 scores of 0.6874 for best-single and 0.6859 for uniform. Their 0.0015 difference is only about 0.56 paired standard errors and is therefore a statistical tie in the baseline evidence. The agent explicitly diagnosed the lack of proxy-driven selection and the short formal path, and it also recognized that repeated selection on one proxy creates selection noise.
4. Four-hour exploration and decision process
The agent spent the first few minutes reading run.sh, soup.py, the proxy evaluator, and the affine-hull checker. Its main compute block was a full 72-ingredient ranking and greedy construction lasting 1,340.44 seconds. Roughly the next twenty minutes interleaved artifact validation, one class-subset diagnostic, formal-recipe coding, and a one-dimensional weighting sweep. Exploration ended by explicit submission 2,883 seconds after launch, before a broader revalidation phase; 11,560 seconds remained.
U-01 - Can proxy-ranked strict greedy equal weighting beat a single model?
Motivation and hypothesis. The agent expected uniform averaging to dilute strong ingredients. Ranking by proxy accuracy and accepting only additions that improve the current soup might preserve complementary models. A complete ranking would also provide a candidate set for later weighting tests.
Concrete change and experimental setup. The agent initially left the algorithm source unchanged and invoked the existing implementation with SELECTION_RULE=strict_greedy, MAX_INGREDIENTS=72, batch size 512, and seed 42. The same 2,000 proxy images were used for ingredient ranking, every merge decision, and the reported internal score. The search begins with the highest-scoring ingredient and retains a proposed equal-weight average only on strict accuracy improvement.
Observed result. Individual proxy accuracies ranged from 0.6340 to 0.6935, with model_69 best. Greedy selection retained model_69, model_60, model_63, model_44, model_34, and model_50, producing 0.7025 in 1,340.44 seconds and one complete checkpoint. The construction summary does not report uncertainty for this 2,000-row score. The final evaluator later recovered 0.7025 ± 0.01081 on the same proxy partition for the identical artifact hash.
Agent interpretation. The agent treated the six-model soup as a trustworthy fallback but immediately warned that its in-sample gain was susceptible to selection noise, motivating validity and split-stability checks.
Report assessment and confounds. The 0.7025 value was selected on the same rows used for 72 singleton scores and many merge decisions. The agent did not run a separate uniform proxy control during exploration, and the task's full-set reference scores use a different split. Thus this result alone did not prove a final-set improvement. This assessment agrees with the agent's contemporaneous concern.
Decision and consequence. The six-model equal-weight soup was adopted as the exploration fallback, and strict greedy became the candidate patch's primary rule. Formal checkpoint 52 later reconstructed it exactly.