File size: 2,094 Bytes
68f1659
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
---
license: mit
base_model: Qwen/Qwen3-4B-Instruct
tags:
- tracea
- dynamic-analysis
- reverse-engineering
- agents
- runtime-traces
- lora
- peft
library_name: peft
pipeline_tag: text-generation
---

# tracea-explainer β€” trace β†’ plain-English behavior reports (planned)

> 🚧 **Status: adapter training scheduled for Week 4 (target: Nov 10, 2026).** This card will be updated with metrics, samples, and the adapter download when training completes on [TraceBench](https://huggingface.co/datasets/Nabidnur/tracea-bench).

A LoRA adapter for **Qwen3-4B-Instruct** that reads **Evidence Record v1** streams produced by [tracea](https://github.com/Hisernberg/tracea) (hooks, syscall summaries, HTTP/TLS/DNS evidence) and writes a grounded **plain-English behavior report** β€” every claim tied to an evidence record.

## Why

Agents trace software, but raw evidence is verbose and easy to misread. tracea-explainer is the "narrator": it turns structured runtime evidence into human/agent-readable reports *without* inventing claims β€” trained to abstain when evidence doesn't support a statement (the "limitations" discipline of Evidence Records).

## Training plan

| Item | Value |
|---|---|
| Base | Qwen/Qwen3-4B-Instruct |
| Data | TraceBench train split (trace JSONL β†’ narrative) |
| Method | LoRA (r=16, Ξ±=32), bf16, seq len 8k |
| Eval | held-out scenarios; factuality vs. ground truth; abstention rate |
| Serving | vLLM/llama.cpp; wired into the [tracea-demo Space](https://huggingface.co/spaces/Nabidnur/tracea-demo) "Auto-explain" tab |

## Intended use

- Narrating **authorized** dynamic-analysis sessions (your apps, devices, captures)
- Security education, debug triage summaries, agent report generation

## Out of scope

Closed-source targets without authorization; malware development; DRM circumvention.

## Links

- 🏠 Code: [Hisernberg/tracea](https://github.com/Hisernberg/tracea)
- πŸ“Š Data: [Nabidnur/tracea-bench](https://huggingface.co/datasets/Nabidnur/tracea-bench)
- πŸ” Demo: [Nabidnur/tracea-demo](https://huggingface.co/spaces/Nabidnur/tracea-demo)