EdgeFirst/yolo26-det
Object Detection • Updated • 170 • 3
Han Yoon PRO
LPX55
AI & ML interests
None yet
Recent Activity
liked a model about 5 hours ago
EdgeFirst/yolo26-det liked a Space about 5 hours ago
EdgeFirst/Models updated a dataset about 23 hours ago
buildborderless/degentic_rd0_5Organizations
liked a
model about 5 hours ago
liked a
Space about 5 hours ago
updated a
dataset about 23 hours ago
reacted to SeaWolf-AI's post with 👍 about 24 hours ago
Post
1367
🔍 The attention mask stopped being an audit.
An autoregressive model must not let position t depend on anything after t. Everyone checks this by inspecting the causal mask — but hybrid stacks now mix attention with state-space scans, and a scan has no mask. Every mask can be correct while information leaks through scans, aggregations, or normalization.
⚙️ So we test the property directly. Two inputs identical except at the last position, two forward passes, compare each layer's prefix, report the first layer that moves. No training, no gradients, no accelerator — seconds on CPU.
📊 Across 192 injected faults on eight checkpoints, mask inspection detected 0. The per-layer audit localized 192/192 to the exact layer.
🎯 Then we read the source before running anything. In transformers 5.7.0, the reference chunked scan reduces the inter-chunk recurrence over the input chunk axis; zamba2 and nemotron_h reduce over the output chunk axis. One axis. The dynamic audit confirmed the prediction exactly: Zamba2-1.2B leaks from length 256, its declared chunk size, and Nemotron-H-8B from 128, its declared chunk size. Bamba, Falcon-H1, Granite-4.0-H, Mamba2 and RecurrentGemma came back clean.
⚠️ Scope: the defect is on the PyTorch chunked-scan path, which runs whenever the fused kernels are absent — CPU, CI, stock installs. We could not build those kernels, so the fast path is untested and open. That caveat cuts both ways: a model can pass every fused-kernel test and still leak the moment it runs without them.
🧪 AX-RAY now carries this as its own axis. 39 models scored across causal, white-box and behavioral axes: 21 A, 3 B, 1 C, 14 F — with exactly 2 Causal-LEAK verdicts, the two the paper predicted. Badges separate a weights-level audit from an API-only one, so the two never get read as the same claim.
📄 https://arxiv.org/abs/2608.22876
🔬 FINAL-Bench/AX-RAY
🤗 The Mask Is Not the Model: Auditing Prefix Invariance in Attention, State-Space, and Hybrid Sequence Models (2608.22876)
An autoregressive model must not let position t depend on anything after t. Everyone checks this by inspecting the causal mask — but hybrid stacks now mix attention with state-space scans, and a scan has no mask. Every mask can be correct while information leaks through scans, aggregations, or normalization.
⚙️ So we test the property directly. Two inputs identical except at the last position, two forward passes, compare each layer's prefix, report the first layer that moves. No training, no gradients, no accelerator — seconds on CPU.
📊 Across 192 injected faults on eight checkpoints, mask inspection detected 0. The per-layer audit localized 192/192 to the exact layer.
🎯 Then we read the source before running anything. In transformers 5.7.0, the reference chunked scan reduces the inter-chunk recurrence over the input chunk axis; zamba2 and nemotron_h reduce over the output chunk axis. One axis. The dynamic audit confirmed the prediction exactly: Zamba2-1.2B leaks from length 256, its declared chunk size, and Nemotron-H-8B from 128, its declared chunk size. Bamba, Falcon-H1, Granite-4.0-H, Mamba2 and RecurrentGemma came back clean.
⚠️ Scope: the defect is on the PyTorch chunked-scan path, which runs whenever the fused kernels are absent — CPU, CI, stock installs. We could not build those kernels, so the fast path is untested and open. That caveat cuts both ways: a model can pass every fused-kernel test and still leak the moment it runs without them.
🧪 AX-RAY now carries this as its own axis. 39 models scored across causal, white-box and behavioral axes: 21 A, 3 B, 1 C, 14 F — with exactly 2 Causal-LEAK verdicts, the two the paper predicted. Badges separate a weights-level audit from an API-only one, so the two never get read as the same claim.
📄 https://arxiv.org/abs/2608.22876
🔬 FINAL-Bench/AX-RAY
🤗 The Mask Is Not the Model: Auditing Prefix Invariance in Attention, State-Space, and Hybrid Sequence Models (2608.22876)
- 4 replies
updated a
Space 3 days ago
liked a
Space 13 days ago
published a
Space 13 days ago
liked a
Space 13 days ago
published a
Space 13 days ago
updated 2
Spaces 13 days ago
upvoted a paper 13 days ago
liked a
Space 13 days ago
updated a
model 14 days ago
liked a
Space 15 days ago
updated a
dataset 15 days ago
updated a
Space 16 days ago
liked 2
models 16 days ago
updated a
model 16 days ago