Skip to content
Sprint projectOct 6, 2024

An Autonomous Agent for Model Attribution

Jord Nguyen · Team Jord

Submitted to Agent Security Hackathon. Sprint projects are early-stage work by participants, not Apart Research publications.

Read the report

Report: An Autonomous Agent for Model Attribution

Share

As LLM agents become more prevalent and powerful, the ability to trace fine-tuned models back to their base models is increasingly important for issues of liability, IP protection, and detecting potential misuse. However, model attribution often must be done in a black-box context, as adversaries may restrict direct access to model internals. This problem remains a neglected but critical area of AI security research. To date, most approaches have relied on manual analysis rather than automated techniques, limiting their applicability. Our approach aims to address these limitations by leveraging the advanced reasoning capabilities of frontier LLMs to automate the model attribution process.

Reviews

Judging this Sprint?

Review this project

Your public critique appears on this page without your name. Your private critique is not published; only the Apart team reads it. If you agree below, we share your review with grantmaking.ai (opens in new tab) and the Transformative AI Fund so strong projects can be funded.

Not shown on this page.

Shown on this page, without your name.

Only the Apart team reads this, and funders if you agree below.

Share my name publicly on grantmaking.ai *
Share my private critique with funders *

  1. This addresses an important problem with a clever approach. To strengthen the project, you could test the method using current state-of-the-art models. I suspect that with the latest generation of models, this method might not be as effective as hoped. You may need to explore more diverse prompts to achieve better results. Overall, it's a solid hackathon project!

  2. I like the honesty of the author regarding limitations in generalization, sample size and accuracy. This is great.• The idea is promising! Though I am not sure if any conclusions can be reached. This is because the small sample size and the fact that only small LLMs were tested using frontier LLMs.• It would have been useful to test small with small or frontier with frontier cause most of the attribution problem will come from frontier models so we would need to know if we can ensure oversight with models with similar capabilities (the gap between gpt2 and gpt4o is really big).

  3. I loved some of the pairing justifications created by the agent, for example: “Reasoning: 1. base_model_1 and finetuned_model_1 both produce incoherent, repetitive responses.” I think this work shows a feasible approach to base<>finetune attribution. Future directions could include more robust evaluations, adversarily finetuning to worsen attribution.

  4. I liked the project somewhat. The topic is interesting and would contribute since it's an approach that hasn't been tested much. The experimental methodology can be expanded to be more generalizable.

Cite this project

@misc{nguyen2024autonomous,
  title = {{An Autonomous Agent for Model Attribution}},
  author = {Jord Nguyen},
  year = {2024},
  month = oct,
  note = {Submitted to Agent Security Hackathon, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/an-autonomous-agent-for-model-attribution}},
  url = {https://apartresearch.com/sprints/projects/an-autonomous-agent-for-model-attribution}
}

Build something like this at the next Sprint

AI Collusion Research Sprint · Oct 23 - 25, 2026