run 13: backdoored caption adapter (500m, poison=10.0%, placement=random)

initial commit