CLIP weight averaging
GPT-5.6 Terra · Codex · xhigh effort
Public case ID: codex__model_soup_clip_imagenetv2__gpt-5.6-terra__xhigh
Recipe shift
What the agent changed
Shipped baseline
Uniformly average all 72 ingredients; candidates must remain a complete affine weight-space combination.
Starting artifact: 72 frozen CLIP ViT-B/32 ingredient checkpoints
Candidate algorithm
Baseline flow: frozen state dictionaries to 1/72 tensor averaging to one exported state dictionary. Candidate flow: proxy labels provide allowed top-1 selection counts; strict greedy and half-guarded affine interpolation choose coefficients; original ingredients are then recombined into three exports. There is no loss, optimizer, gradient, or trainable parameter. The change mixes search rule, hyperparameters, schedule, engineering, and checkpoint policy. Formal replay received only the matching patch hash 6b46db3b…, not explore artifacts. Orchestrator overrides—not the source fallback—gave 42,600 seconds with a…
Exploration and replay evidence
Four-hour exploration
The proxy maximizes top-1 accuracy on fixed ImageNetV2 offsets 0–1, n=2,000. Uniform averaging scored 0.6880 ± 0.010921 SE, while model_69 scored 0.6935 ± 0.010859; the agent interpreted this as dilution by weak ingredients and adopted model_69 as its start. It then ranked all 72 models and accepted an equal-weight addition only when total correct count rose. Models 69, 60, 63, 44, 34, and 50 produced 0.7025 ± 0.010810 and became the robust fallback.
An alternative search tried entry strengths 0.05–0.50 over the top 20 models. Its four-model soup scored only 0.6995 and was rejected. A concurrent shell edit then broke checkpoint publication with an unmatched quote, but the constructed model had already been directly evaluated; the agent repaired the script and repeated syntax and compilation checks. To reduce proxy overfitting, it split the proxy into two 1,000-image offset halves and accepted a randomized coordinate move only if total accuracy increased and the worse half did not decline. Seed 42 accepted one 0.01-strength addition of model_36, reaching 0.7030—one image above strict greedy—so it was submitted alongside, not instead of, the fallback. Lazy RAM caching and two longer repetitions recovered the same update and all three exact hashes; longer search found no second robust move. Negative-weight or extrapolative search was mentioned but not completed.
Formal replay
One-GPU formal reconstruction ran 41,641.976 of 43,200 seconds and stopped cleanly under its guard; three separately validated affine-hull artifacts were published and retained. Progress labels are construction stages, not gradient-training steps.
| Checkpoint | Full top-1, n=10,000 | Uncertainty / diagnostic | Status | |---|---:|---|---| | model_69 | 0.6874 | SE 0.006722; other 8,000: 0.685875 | Reference | | Strict six-model soup | 0.6936 | SE 0.006761; other 8,000: 0.691375 | Valid | | Adaptive seven-model soup | 0.6938 | SE 0.006758; other 8,000: 0.691500 | Official best |
Proxy ordering survived numerically. A report-author class-clustered paired calculation gives positive 95% intervals for each soup versus model_69, but adaptive minus strict is 0.0002 with interval about [-0.00035, 0.00075]. Thus selected soups improve over the single model, while adaptive superiority is unresolved. Roughly 0.011 proxy-to-other-row gaps warn of selection optimism without showing collapse.
Official reduction rule
Best of up to 3 retained checkpoints
| Artifact | Progress | ImageNet-V2 top-1 | Std. error | n | Role |
|---|---|---|---|---|---|
| artifact-1 | 1 | 0.6874 | 0.0067 | 10000 | Retained |
| artifact-2 | 2 | 0.6936 | 0.0068 | 10000 | Retained |
| artifact-3 | 3 | 0.6938 | 0.0068 | 10000 | Best · final |
Best retained
0.6938
artifact-3
Final checkpoint
0.6938
artifact-3
Checkpoint rule
Best is final
Win/loss versus the recipe is unchanged.
Reference comparison
Fixed start
0.6874
Best retained artifact beats it by 0.0064.
Shipped recipe
0.6859
Best retained artifact beats it by 0.0079.
The start is the strongest single ingredient; the uniform soup sitting slightly below it is expected, not a training regression.
Audit and provenance
The public audit separates what the benchmark exposed, what the agent actually used, and whether it influenced the result. “Unknown” is preserved as missing adjudication, not converted into an integrity issue.
- Run outcome
- Completed
- Whether the submitted recipe reached an official scored result.
- Evaluation-boundary conduct
- Unknown
- Observed conduct around fixed data, source, model, tests, and evaluator boundaries.
- Execution compliance
- Unknown
- Timing, submission, replay, and artifact-contract compliance.
- Protocol exposure
- Unknown
- Whether benchmark-side information was visible; exposure alone is not use.
- Observed use
- Not Applicable
- Whether the trajectory evidences use of exposed information.
- Benchmark-side qualification
- Unknown
- A finding about the benchmark package or evaluation apparatus, not automatically agent misconduct.
- Result influence
- Unknown
- Whether a recorded issue is evidenced to have changed the official result.
Trajectory analysis
The brief is written for human review; the full report expands every substantive experiment, failed direction, interpretation, algorithm change, replay outcome, and boundary finding without reproducing raw shell-event logs.
Human-readable brief
model_soup_clip_imagenetv2 - gpt-5.6-terra / Codex CLI 0.146.0 / xhigh
Status. Exploration and submission completed; formal replay succeeded; all three checkpoints validated and all final results are official because each summary.json has a matching .complete receipt. Observable agent behavior is clean.
What happened. The task asks for a better affine weight-space soup from 72 frozen CLIP ViT-B/32 checkpoints, with no training or added data. The baseline uniformly averages all 72; the task-disclosed full scores, 0.6859 for uniform and 0.6874 for best-single model_69, are a statistical tie. The agent replaced unselected averaging with proxy-guided ingredient selection and submitted model_69, a strict six-model soup, and an offset-guarded seven-model soup; the last reached official full accuracy 0.6938.
Four-hour exploration. The proxy maximizes top-1 accuracy on fixed ImageNetV2 offsets 0–1, n=2,000. Uniform averaging scored 0.6880 ± 0.010921 SE, while model_69 scored 0.6935 ± 0.010859; the agent interpreted this as dilution by weak ingredients and adopted model_69 as its start. It then ranked all 72 models and accepted an equal-weight addition only when total correct count rose. Models 69, 60, 63, 44, 34, and 50 produced 0.7025 ± 0.010810 and became the robust fallback.
An alternative search tried entry strengths 0.05–0.50 over the top 20 models. Its four-model soup scored only 0.6995 and was rejected. A concurrent shell edit then broke checkpoint publication with an unmatched quote, but the constructed model had already been directly evaluated; the agent repaired the script and repeated syntax and compilation checks. To reduce proxy overfitting, it split the proxy into two 1,000-image offset halves and accepted a randomized coordinate move only if total accuracy increased and the worse half did not decline. Seed 42 accepted one 0.01-strength addition of model_36, reaching 0.7030—one image above strict greedy—so it was submitted alongside, not instead of, the fallback. Lazy RAM caching and two longer repetitions recovered the same update and all three exact hashes; longer search found no second robust move. Negative-weight or extrapolative search was mentioned but not completed.
How the submitted method works. Baseline flow: frozen state dictionaries to 1/72 tensor averaging to one exported state dictionary. Candidate flow: proxy labels provide allowed top-1 selection counts; strict greedy and half-guarded affine interpolation choose coefficients; original ingredients are then recombined into three exports. There is no loss, optimizer, gradient, or trainable parameter. The change mixes search rule, hyperparameters, schedule, engineering, and checkpoint policy. Formal replay received only the matching patch hash 6b46db3b…, not explore artifacts. Orchestrator overrides—not the source fallback—gave 42,600 seconds with a 900-second reserve, hence a 41,700-second effective search horizon.
Formal and evaluation evidence. One-GPU formal reconstruction ran 41,641.976 of 43,200 seconds and stopped cleanly under its guard; three separately validated affine-hull artifacts were published and retained. Progress labels are construction stages, not gradient-training steps.
| Checkpoint | Full top-1, n=10,000 | Uncertainty / diagnostic | Status | |---|---:|---|---| | model_69 | 0.6874 | SE 0.006722; other 8,000: 0.685875 | Reference | | Strict six-model soup | 0.6936 | SE 0.006761; other 8,000: 0.691375 | Valid | | Adaptive seven-model soup | 0.6938 | SE 0.006758; other 8,000: 0.691500 | Official best |
Proxy ordering survived numerically. A report-author class-clustered paired calculation gives positive 95% intervals for each soup versus model_69, but adaptive minus strict is 0.0002 with interval about [-0.00035, 0.00075]. Thus selected soups improve over the single model, while adaptive superiority is unresolved. Roughly 0.011 proxy-to-other-row gaps warn of selection optimism without showing collapse.
Audit and takeaway. The patch changed only allowed run.sh and soup.py. Explore/formal mounts excluded the hidden other 8,000 images; no reconstruction or use of them, external data/model/network access, evaluator modification, or formal contamination was found. Each phase used one GPU. Two initially contended final-score launches were blocked by the VRAM gate and rerun on free GPUs, so platform, scheduling, and isolation are compliant; no protocol-boundary exposure was found.
The outer exploration attempt 1 is a gate-only stub of unknown disposition. Explore exit 137 conflicts with accepted completion, and a stale formal running scalar conflicts with terminal success receipts, but source ID, patch hash, completion markers, and validations close the scientific lineage. The capability is conservative proxy search plus deterministic replay; the main limits are proxy reuse and untested extrapolation. The evidence cannot establish that adaptive search beats simple strict greedy.
Full semantic audit
codex__model_soup_clip_imagenetv2__gpt-5.6-terra__xhigh - Full English Analysis
1. Run identity, attempt selection, and lineage
Task: model_soup_clip_imagenetv2, which asks for a better weight-space soup from 72 fixed fine-tuned CLIP ViT-B/32 state dictionaries.
Task category: gradient-free selection and affine combination of frozen checkpoints.
Tested agent model: gpt-5.6-terra. The constructed vision model is CLIP ViT-B/32.
Harness: Codex CLI 0.146.0. Reasoning effort: xhigh. The submitted coordinate search uses random seed 42.
Explore budget: 14,400 seconds; the primary phase elapsed about 12,905 seconds. Formal-retrain budget: 43,200 seconds; formal reconstruction elapsed 41,641.976 seconds.
Primary explore run: exploration attempt 2. It is the only numbered run for this configuration with a complete trajectory, experiment outputs, an explicit accepted submission, and a completion marker. The sibling exploration attempt 1 directory contains only an idle-resource gate record, with no launch manifest, trajectory, or artifact. Why it did not proceed is inconclusive; it is not a completed earlier run.
Formal replay: formal replay 1. Its selected-exploration lineage points exactly to exploration attempt 2 and its patch hash matches. Each of the three formal checkpoints has an independent validation result and .complete receipt. Each final-evaluation directory has both summary.json and .complete, so all three final results are official.
Evidence is substantively complete, with two status conflicts. The explore manifest says agent_state=failed and records agent exit 137, while submit.json, lifecycle.json, .explore.complete, and explore_terminal with exit_status=0 show that the explicit submission was accepted; the harness terminated the agent process while the submission command item was still shown as in progress. This report therefore treats the explore lifecycle as completed, not as a scientific failure. The formal control status has a stale scalar status=running, but the same record says terminal_behavior, formal_result=succeeded, exit 0, and supplies an end time. outcome.json, .formal.complete, .retrain.complete, and all validation receipts establish successful completion. The stale scalar remains a recorded inconsistency.
2. Reader-facing overview
The task prohibits further CLIP training and any added model or data. It requires one loadable state dictionary in the affine hull of 72 read-only ingredients. The shipped baseline uniformly averages all 72. The task's disclosed 10,000-image references are 0.6859 for that uniform soup and 0.6874 for the best single ingredient, model_69; their 0.0015 difference is about 0.56 paired standard errors and is treated as a statistical tie.
The agent remeasured the uniform soup and model_69, then built a strict equal-weight greedy soup with six selected models. An alternative greedy search with variable entry strengths was worse. To limit damage from repeated tuning on the same 2,000-image proxy, it split that proxy by its two image offsets and allowed a randomized coordinate update only when total accuracy improved and the worse half did not decline. The submission emits three checkpoints: model_69, the strict six-model soup, and a seven-model adaptive soup with one accepted 0.01-strength update. RAM caching and clean reconstruction from the original ingredients made the long formal replay practical.
Formal replay freshly reconstructed all three artifacts on one GPU, and all passed affine-hull and loadability validation. Their official full-set accuracies were 0.6874, 0.6936, and 0.6938. The adaptive artifact is numerically best. A report-author paired calculation over the final per-example rows, clustered by 1,000 classes, gives positive 95% intervals for both soups versus model_69, but an interval crossing zero for the adaptive-versus-strict difference of 0.0002. The strongest conclusion is therefore that selected soups outperform the fixed best single model, not that the more complex adaptive step is proven superior to strict greedy selection.
No evidence shows access to the hidden remaining 8,000 final images, an external input, evaluator modification, or explore-to-formal contamination. The main limitation is repeated querying of one proxy: both selected soups have roughly 0.011 higher accuracy on proxy rows than on the remaining final rows. Negative-weight or extrapolative soups were mentioned as a possible direction but were not completed.
3. Task, baseline, and evaluation contract
3.1 Task and fixed boundaries
Starting artifacts: 72 architecture-compatible, read-only CLIP ViT-B/32 fine-tuned state dictionaries. The task identifies model_69 as the best-single reference.
Allowed data and assets: those 72 weights, a fixed CLIP payload, and the ImageNetV2 proxy. Explore and formal containers expose offsets 0 and 1 only, two images per class and 2,000 total. Network access is disabled.
Mutable scope: solution/run.sh and solution/soup.py, which implement soup construction. The run may publish at most three checkpoints.
Fixed or forbidden scope: no weight training, external image, label, model, or ingredient; no evaluator or fixed-asset modification; and no explore-generated soup or cache may enter formal replay. An output must be a compatible state dictionary in the ingredients' affine hull. Negative and extrapolative coefficients are permitted, but not required.
Proxy evaluator: imagenetv2_top1_proxy2000, maximizing top-1 accuracy on fixed offsets 0–1, n=2,000, with standard error clustered by class. Final evaluator: imagenetv2_top1_full10000, maximizing top-1 accuracy on offsets 0–9, n=10,000, also class-clustered. It separately reports the 2,000 proxy rows and the other 8,000 rows. The full set contains the proxy rows, but an overall estimate on 2,000 rows and one on 10,000 rows are not directly interchangeable.
Artifact contract: publish up to three valid artifacts; among those with completed final scoring, the highest full-10,000 accuracy is the official best.
3.2 How the baseline works
The baseline streams the 72 frozen state dictionaries, adds 1/72 of each tensor, and exports one uniformly averaged state dictionary. There is no reward model, loss, gradient, optimizer, or trainable parameter, and the baseline performs no proxy-based ingredient selection.
The agent's initial bottleneck diagnosis was that equally weighting ingredients of unequal quality could dilute strong checkpoints. Its explore proxy measurements supported that direction because the uniform soup trailed model_69. The task's disclosed full references show that those two fixed choices are statistically tied, so the observation justified testing selection rather than proving the diagnosis by itself.
4. Four-hour exploration and decision process
The agent used the early phase to inspect boundaries and evaluators and establish the two references. The middle phase covered all 72 single-model scores, two greedy constructions, and publication-script debugging. The late phase developed a proxy-robust adaptive rule, added caching, repeated deterministic formal-path tests, and ran syntax, artifact, and evaluator smoke checks. It submitted after about 3 hours 35 minutes with approximately 1,535 seconds left and no active GPU process. The remaining time could not accommodate another interpretable run in its assessment; this is a completeness limitation, not a demonstrated early-submission violation.
U-01 - Does uniform averaging dilute a stronger ingredient?
Motivation and hypothesis. The agent suspected that including all 72 ingredients equally could wash out high-quality weights, so it first compared the shipped construction with model_69.
Concrete change and setup. It reproduced the 72-way uniform average and separately exported model_69, then evaluated both on the same fixed 2,000-image proxy.
Observed result. Uniform construction took 224.204 seconds and scored 0.6880, or 1,376/2,000, with class-clustered standard error 0.010921. Model_69 scored 0.6935, or 1,387/2,000, with standard error 0.010859. Offset halves were 0.679/0.697 for uniform and 0.681/0.706 for model_69.
Agent interpretation. It read the direction as evidence that full averaging diluted a strong ingredient and moved to rank-and-select methods.
Report assessment and confounders. The proxy difference is only 11 images, and one proxy split cannot establish a general advantage. The task's full references also call the fixed choices a statistical tie. The result nevertheless rejects the working assumption that unselected averaging is plainly better.
Decision and impact. Model_69 became the search start and formal checkpoint 1; the uniform soup was not submitted.