KennethFal/vh5tape-vhs-lora-minimax-h3
Image-Text-to-Video • Updated • 3.17k • • 56
Han Yoon PRO
LPX55
AI & ML interests
None yet
Recent Activity
liked a model about 13 hours ago
KennethFal/vh5tape-vhs-lora-minimax-h3 liked a model about 13 hours ago
rehan-fal/minimax-h3-vr180-sbs-lora liked a Space about 13 hours ago
hugging-apps/insta-tiktok-aesthetics-h3-lora-demoOrganizations
liked 2
models about 13 hours ago
liked 2
Spaces about 13 hours ago
liked a
dataset about 15 hours ago
updated a
dataset about 23 hours ago
liked a
Space 4 days ago
liked a
dataset 16 days ago
upvoted a paper 17 days ago
upvoted 2
papers 18 days ago
updated a
Space 19 days ago
updated a
dataset 20 days ago
liked a
model 24 days ago
liked a
Space 24 days ago
reacted to SeaWolf-AI's post with 👍 25 days ago
Post
2908
🔍 The attention mask stopped being an audit.
An autoregressive model must not let position t depend on anything after t. Everyone checks this by inspecting the causal mask — but hybrid stacks now mix attention with state-space scans, and a scan has no mask. Every mask can be correct while information leaks through scans, aggregations, or normalization.
⚙️ So we test the property directly. Two inputs identical except at the last position, two forward passes, compare each layer's prefix, report the first layer that moves. No training, no gradients, no accelerator — seconds on CPU.
📊 Across 192 injected faults on eight checkpoints, mask inspection detected 0. The per-layer audit localized 192/192 to the exact layer.
🎯 Then we read the source before running anything. In transformers 5.7.0, the reference chunked scan reduces the inter-chunk recurrence over the input chunk axis; zamba2 and nemotron_h reduce over the output chunk axis. One axis. The dynamic audit confirmed the prediction exactly: Zamba2-1.2B leaks from length 256, its declared chunk size, and Nemotron-H-8B from 128, its declared chunk size. Bamba, Falcon-H1, Granite-4.0-H, Mamba2 and RecurrentGemma came back clean.
⚠️ Scope: the defect is on the PyTorch chunked-scan path, which runs whenever the fused kernels are absent — CPU, CI, stock installs. We could not build those kernels, so the fast path is untested and open. That caveat cuts both ways: a model can pass every fused-kernel test and still leak the moment it runs without them.
🧪 AX-RAY now carries this as its own axis. 39 models scored across causal, white-box and behavioral axes: 21 A, 3 B, 1 C, 14 F — with exactly 2 Causal-LEAK verdicts, the two the paper predicted. Badges separate a weights-level audit from an API-only one, so the two never get read as the same claim.
📄 https://arxiv.org/abs/2608.22876
🔬 FINAL-Bench/AX-RAY
🤗 The Mask Is Not the Model: Auditing Prefix Invariance in Attention, State-Space, and Hybrid Sequence Models (2608.22876)
An autoregressive model must not let position t depend on anything after t. Everyone checks this by inspecting the causal mask — but hybrid stacks now mix attention with state-space scans, and a scan has no mask. Every mask can be correct while information leaks through scans, aggregations, or normalization.
⚙️ So we test the property directly. Two inputs identical except at the last position, two forward passes, compare each layer's prefix, report the first layer that moves. No training, no gradients, no accelerator — seconds on CPU.
📊 Across 192 injected faults on eight checkpoints, mask inspection detected 0. The per-layer audit localized 192/192 to the exact layer.
🎯 Then we read the source before running anything. In transformers 5.7.0, the reference chunked scan reduces the inter-chunk recurrence over the input chunk axis; zamba2 and nemotron_h reduce over the output chunk axis. One axis. The dynamic audit confirmed the prediction exactly: Zamba2-1.2B leaks from length 256, its declared chunk size, and Nemotron-H-8B from 128, its declared chunk size. Bamba, Falcon-H1, Granite-4.0-H, Mamba2 and RecurrentGemma came back clean.
⚠️ Scope: the defect is on the PyTorch chunked-scan path, which runs whenever the fused kernels are absent — CPU, CI, stock installs. We could not build those kernels, so the fast path is untested and open. That caveat cuts both ways: a model can pass every fused-kernel test and still leak the moment it runs without them.
🧪 AX-RAY now carries this as its own axis. 39 models scored across causal, white-box and behavioral axes: 21 A, 3 B, 1 C, 14 F — with exactly 2 Causal-LEAK verdicts, the two the paper predicted. Badges separate a weights-level audit from an API-only one, so the two never get read as the same claim.
📄 https://arxiv.org/abs/2608.22876
🔬 FINAL-Bench/AX-RAY
🤗 The Mask Is Not the Model: Auditing Prefix Invariance in Attention, State-Space, and Hybrid Sequence Models (2608.22876)
- 13 replies
updated a
dataset 26 days ago
updated a
Space 27 days ago