Uppaal
/

gpt2-ProFS-toxicity

@@ -21,174 +21,147 @@ base_model:
 - openai-community/gpt2-medium
 ---
-# Model Card for Model ID
-<!-- Provide a quick summary of what the model is/does. -->
-## Model Details
-### Model Description
-<!-- Provide a longer summary of what this model is. -->
-This is the model card of a 🤗 transformers model that has been pushed on the Hub. This model card has been automatically generated.
-- **Developed by:** [More Information Needed]
-- **Funded by [optional]:** [More Information Needed]
-- **Shared by [optional]:** [More Information Needed]
-- **Model type:** [More Information Needed]
-- **Language(s) (NLP):** [More Information Needed]
-- **License:** [More Information Needed]
-- **Finetuned from model [optional]:** [More Information Needed]
-### Model Sources [optional]
-<!-- Provide the basic links for the model. -->
-- **Repository:** [More Information Needed]
-- **Paper [optional]:** [More Information Needed]
-- **Demo [optional]:** [More Information Needed]
 ## Uses
-<!-- Address questions around how the model is intended to be used, including the foreseeable users of the model and those affected by the model. -->
 ### Direct Use
-<!-- This section is for the model use without fine-tuning or plugging into a larger ecosystem/app. -->
-[More Information Needed]
-### Downstream Use [optional]
-<!-- This section is for the model use when fine-tuned for a task, or when plugged into a larger ecosystem/app -->
-[More Information Needed]
 ### Out-of-Scope Use
-<!-- This section addresses misuse, malicious use, and uses that the model will not work well for. -->
-[More Information Needed]
-## Bias, Risks, and Limitations
-<!-- This section is meant to convey both technical and sociotechnical limitations. -->
-[More Information Needed]
-### Recommendations
-<!-- This section is meant to convey recommendations with respect to the bias, risk, and technical limitations. -->
-Users (both direct and downstream) should be made aware of the risks, biases and limitations of the model. More information needed for further recommendations.
 ## How to Get Started with the Model
 Use the code below to get started with the model.
-[More Information Needed]
-## Training Details
-### Training Data
-<!-- This should link to a Dataset Card, perhaps with a short stub of information on what the training data is all about as well as documentation related to data pre-processing or additional filtering. -->
-[More Information Needed]
-### Training Procedure
-<!-- This relates heavily to the Technical Specifications. Content here should link to that section when it is relevant to the training procedure. -->
-#### Preprocessing [optional]
-[More Information Needed]
-#### Training Hyperparameters
-- **Training regime:** [More Information Needed] <!--fp32, fp16 mixed precision, bf16 mixed precision, bf16 non-mixed precision, fp16 non-mixed precision, fp8 mixed precision -->
-#### Speeds, Sizes, Times [optional]
-<!-- This section provides information about throughput, start/end time, checkpoint size if relevant, etc. -->
-[More Information Needed]
-## Evaluation
-<!-- This section describes the evaluation protocols and provides the results. -->
-### Testing Data, Factors & Metrics
-#### Testing Data
-<!-- This should link to a Dataset Card if possible. -->
-[More Information Needed]
-#### Factors
-<!-- These are the things the evaluation is disaggregating by, e.g., subpopulations or domains. -->
-[More Information Needed]
-#### Metrics
-<!-- These are the evaluation metrics being used, ideally with a description of why. -->
-[More Information Needed]
 ### Results
-[More Information Needed]
-#### Summary
-## Model Examination [optional]
-<!-- Relevant interpretability work for the model goes here -->
-[More Information Needed]
-## Environmental Impact
-<!-- Total emissions (in grams of CO2eq) and additional considerations, such as electricity usage, go here. Edit the suggested text below accordingly -->
-Carbon emissions can be estimated using the [Machine Learning Impact calculator](https://mlco2.github.io/impact#compute) presented in [Lacoste et al. (2019)](https://arxiv.org/abs/1910.09700).
-- **Hardware Type:** [More Information Needed]
-- **Hours used:** [More Information Needed]
-- **Cloud Provider:** [More Information Needed]
-- **Compute Region:** [More Information Needed]
-- **Carbon Emitted:** [More Information Needed]
-## Technical Specifications [optional]
-### Model Architecture and Objective
-[More Information Needed]
-### Compute Infrastructure
-[More Information Needed]
-#### Hardware
-[More Information Needed]
-#### Software
-[More Information Needed]
-## Citation [optional]
-<!-- If there is a paper or blog post introducing the model, the APA and Bibtex information for that should go in this section. -->
 **BibTeX:**
@@ -200,22 +173,4 @@ Carbon emissions can be estimated using the [Machine Learning Impact calculator]
 **APA:**
-Uppaal, R., Dey, A., He, Y., Zhong, Y., & Hu, J. Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity. In The Thirteenth International Conference on Learning Representations.
-<!-- ## Glossary [optional]
-<!-- If relevant, include terms and calculations in this section that can help readers understand the model or model card. --> -->
-<!-- [More Information Needed]
- -->
-<!-- ## More Information [optional]
-[More Information Needed]
- -->
-<!-- ## Model Card Authors [optional]
-[More Information Needed]
-## Model Card Contact
-[More Information Needed] -->

 - openai-community/gpt2-medium
 ---
+# Model Card
+This model accompanies the paper [Model Editing as a Robust and Denoised Variant of DPO: A Case Study on Toxicity](https://arxiv.org/abs/2405.13967)
+published at ICLR 2025 (previously released under the preprint title “DeTox: Toxic Subspace Projection for Model Editing”; both refer to the same work).
+ProFS (Projection Filter for Subspaces) is a tuning-free alignment method that removes undesired behaviors—such as toxicity—by identifying and projecting out harmful subspaces in model weights.
+**Key Features:**
+- Training-free & plug-and-play: edits weights directly, no gradient steps or architectural changes needed.
+- Data-efficient: achieves strong alignment effects using only hundreds (not thousands) of preference pairs.
+- Label-robust: maintains performance even under substantial label noise, since projection directions remain stable.
+- Fast & lightweight: produces an edited model that runs at the same inference speed as the base model.
+- Theoretically grounded: shown to be a denoised, single-step approximation of Direct Preference Optimization (DPO)—bridging editing-based and tuning-based alignment.
+<div align="center">
+<img src="https://github.com/Uppaal/detox-edit/blob/main/ProFS Method.png" width="450"/>
+<i><b>Figure.</b> Schematic of ProFS (previously called DeTox). Toxic directions (in red) are projected out of the model’s MLP-value matrices, leaving other representational directions intact. </i>
+</div>
+## Model Details
+- **Model type:** Edited Causal Language Model (LLM)
+- **Base model:** [`gpt2-medium`](https://huggingface.co/openai-community/gpt2-medium)
+- **Language(s) (NLP):** English
+- **License:** MIT
+- **Repository:** [GitHub](https://github.com/Uppaal/detox-edit)
+- **Paper:** [Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity](https://arxiv.org/abs/2405.13967)
 ## Uses
 ### Direct Use
+ProFS-edited GPT-2 can be used for:
+- Safe text generation and alignment research
+- Studying lightweight alignment via model editing rather than fine-tuning
+- Interpretability studies of activation subspaces and toxicity directions
+### Downstream Use
+ProFS serves as a reproducible starting point for work on:
+- Safety alignment without gradient updates
+- Robustness to label noise and limited data regimes
+- Educational demonstrations of representation-level interventions
 ### Out-of-Scope Use
+Not a fully aligned conversational model.
+Not evaluated for fairness or demographic bias beyond toxicity.
 ## How to Get Started with the Model
 Use the code below to get started with the model.
+```
+from transformers import AutoTokenizer, AutoModelForCausalLM
+model_id = "Uppaal/gpt2-ProFS-toxicity"
+tokenizer = AutoTokenizer.from_pretrained(model_id)
+model = AutoModelForCausalLM.from_pretrained(model_id)
+prompt = "The internet has changed the way people communicate by"
+out = model.generate(**tokenizer(prompt, return_tensors="pt"), max_new_tokens=20)
+print(tokenizer.decode(out[0], skip_special_tokens=True))
+```
+## Training (Editing) Details
+### Training Data
+We use the pairwise toxicity preference dataset introduced by [Lee et al. (2024)](https://arxiv.org/abs/2401.01967).
+- Non-toxic sequences: sampled from WikiText-2.
+- Toxic counterparts: generated using the Plug-and-Play Language Model (PPLM) method to inject toxic content.
+- Data format: (toxic, non-toxic) sentence pairs.
+- Sample size: 500 pairs for ProFS editing (compared to 2,000 pairs used for DPO fine-tuning).
+### Preprocessing
+No preprocessing or filtering was applied beyond tokenization by the base model tokenizer.
+### Editing Hyperparameters
+- Top-k singular vectors:
+  - GPT-2: k = 2
+  - Mistral, Mistral-SFT, OPT, GPT-J: k = 10
+  - Selected via ScreeNot and validated with cross-validation.
+- Edited layers:
+  - GPT-2 / GPT-J: layers 11–24
+  - Mistral, Mistral-SFT, OPT: layers 15–L
+- Projection step: edit applied once to the MLP-Value matrices only.
+- Centering: mean vector of non-toxic embeddings removed before SVD to preserve syntactic knowledge.
+### Speeds, Sizes, Times [optional]
+- Time: 15.17 seconds
+- Max GPU use: 9399.65 MB
+## Evaluation
+### Metrics and Testing Data
+- Perplexity (fluency): evaluated on the WikiText-2 dev split.
+- Toxicity: measured on the [Real Toxicity Prompts](https://huggingface.co/datasets/allenai/real-toxicity-prompts) challenge subset. Scored using [Detoxify](https://github.com/unitaryai/detoxify). Lower Detoxify score = lower toxicity.
+- Capability (for larger models): zero-shot accuracy across 7 EleutherAI LM Harness tasks: BoolQ, RTE, HellaSwag, WinoGrande, ARC-Easy, ARC-Challenge, and OpenBookQA.
 ### Results
+| **Model** | **Method** | **Toxicity ↓** | **Perplexity ↓** | **Capability ↑** |
+|:-----------|:------------|:---------------|:-----------------|:-----------------|
+| **GPT-2 Medium** | Original | 48.00 (0.00) | 29.70 (0.00) | – |
+|  | DPO | 36.36 (0.58) | 29.86 (0.22) | – |
+|  | **ProFS** | **26.83 (0.89)** | 32.50 (0.28) | – |
+| **Mistral 7B** | Original | 42.45 (0.00) | 7.49 (0.00) | 64.23 |
+|  | DPO | 36.42 (0.62) | 7.52 (0.26) | 65.32 |
+|  | **ProFS** | **30.40 (0.71)** | 7.99 (0.21) | 63.59 |
+| **Mistral-SFT 7B** | Original | 33.45 (0.00) | 8.22 (0.00) | 63.59 |
+|  | DPO | 23.96 (0.50) | 8.38 (0.34) | 63.66 |
+|  | **ProFS** | **26.03 (1.25)** | 8.83 (0.57) | 63.23 |
+| **OPT 6.7B** | Original | 46.47 (0.00) | 14.67 (0.00) | 51.57 |
+|  | DPO | 45.31 (0.74) | 14.37 (0.61) | 51.55 |
+|  | **ProFS** | **43.49 (1.38)** | 13.83 (0.46) | 51.80 |
+| **GPT-J 6B** | Original | 45.31 (0.00) | 13.24 (0.00) | 51.92 |
+|  | DPO | 43.67 (1.11) | 13.96 (0.53) | 52.46 |
+|  | **ProFS** | **37.36 (2.28)** | 14.53 (0.30) | 52.48 |
+*Mean ± stdev over three runs; lower toxicity/perplexity are better.*
+## Citation
 **BibTeX:**
 **APA:**
+Uppaal, R., Dey, A., He, Y., Zhong, Y., & Hu, J. Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity. In The Thirteenth International Conference on Learning Representations.