DuoNeural/native-refusal-50pct-50m

DuoNeural Native Refusal 50PCT (~50M)

Part of the Native Refusal Geometry experiment series. DuoNeural 2026-06-07 | Archon, Jesse Caldwell, Aura

What this is

A ~50M parameter GPT-style language model trained from scratch with 50% refusal data mixed into the pretraining corpus.

This is a research model investigating whether native refusal training (pretraining data mixture) produces the same safety geometry signature as RLHF-aligned models — specifically the three-zone crystallization arc documented in DuoNeural P36.

Experiment series

Model	Refusal fraction	HF repo
0pct	0% (baseline)	DuoNeural/native-refusal-0pct-50m
10pct	10%	DuoNeural/native-refusal-10pct-50m
25pct	25%	DuoNeural/native-refusal-25pct-50m
50pct	50%	DuoNeural/native-refusal-50pct-50m

All 4 models use identical architecture and initialization (seed=42). The only variable is refusal data fraction.

Architecture

• Standard GPT: d_model=384, 16 layers, 8 heads, SwiGLU FFN
• ~50M parameters, tied embeddings
• Trained on FineWeb-Edu + synthetic refusal pairs
• AdamW optimizer, cosine LR decay
• 300M tokens total

Geometry results

{
  "probe_layers": [
    1,
    2,
    3,
    4,
    5,
    6,
    7,
    8,
    9,
    10,
    11,
    12,
    13,
    14,
    15,
    16
  ],
  "angles_by_layer": {
    "1": {
      "refusal|harm_awareness": 13.54,
      "refusal|self_identity": 11.25,
      "refusal|ethics": 13.67,
      "refusal|benign_general": 13.94,
      "harm_awareness|self_identity": 13.24,
      "harm_awareness|ethics": 11.87,
      "harm_awareness|benign_general": 12.0,
      "self_identity|ethics": 10.41,
      "self_identity|benign_general": 11.06,
      "ethics|benign_general": 8.83
    },
    "2": {
      "refusal|harm_awareness": 12.95,
      "refusal|self_identity": 10.57,
      "refusal|ethics": 14.33,
      "refusal|benign_general": 13.97,
      "harm_awareness|self_identity": 12.43,
      "harm_awareness|ethics": 9.69,
      "harm_awareness|benign_general": 10.78,
      "self_identity|ethics": 11.37,
      "self_identity|benign_general": 11.19,
      "ethics|benign_general": 8.2
    },
    "3": {
      "refusal|harm_awareness": 10.49,
      "refusal|self_identity": 8.69,
      "refusal|ethics": 11.52,
      "refusal|benign_general": 11.49,
      "harm_awareness|self_identity": 10.52,
      "harm_awareness|ethics": 7.97,
      "harm_awareness|benign_general": 9.32,
      "self_identity|ethics": 9.32,
      "self_identity|benign_general": 9.24,
      "ethics|benign_general": 7.23
    },
    "4": {
      "refusal|harm_awareness": 10.27,
      "refusal|self_identity": 8.09,
      "refusal|ethics": 11.09,
      "refusal|benign_general": 10.89,
      "harm_awareness|self_identity": 10.18,
      "harm_awareness|ethics": 7.53,
      "harm_awareness|benign_general": 8.8,
      "self_identity|ethics": 9.16,
      "self_identity|benign_general": 8.54,
      "ethics|benign_general": 7.44
    },
    "5": {
      "refusal|harm_awareness": 13.41,
      "refusal|self_identity": 9.44,
      "refusal|ethics": 12.71,
      "refusal|benign_general": 13.7,
      "harm_awareness|self_identity": 12.6

Connected papers

• DuoNeural P34: Reasoning Channel Bypass (two-loci model)
• DuoNeural P35: DHP Scope Constraints (GBSP)
• DuoNeural P36: Scale-Dependent Safety Geometry