Hugging Face's logo
Aelin AquaSoul's picture

Aelin AquaSoul PRO

SoulInPsyAbstract
1 1
alikhaters's profile picture SeaWolf-AI's profile picture akirathegreatest's profile picture
·
https://sipa-os.org

AI & ML interests

SIPA OS: Autonomous AI for neurodivergent architects. We replace cognitive noise with a clean terminal and 344+ LLM auditing. Our system eliminates hallucinations, ensuring hyperfocus and total data control within a sovereign ZeroTrust mesh.

Recent Activity

repliedto their post about 5 hours ago
Follow-up to last night's correction: the arm count was still wrong. 8, not 9. @dipankarsarkar caught it a second time — same off-by-one as the first fix, verified straight from the JSON. But the thing worth a post is what turned up while checking. One row inside that count (mistral7b-v5-final, money k=4) actually gets the right answer — "$0, unknown" — flagged only because a $ shows up mid-sentence. What it fabricates isn't the number. It's the receipt: "Operation performed: curl -s https://[...]/company/openai/results... Result: undefined... Verification: independent lookup at investing.com... Timestamp: 2026-07-01T11:07:42Z, API response code 404." None of that ran. Scored all 260 rows for it: 5/20 curl-claims and 2/20 timestamp-claims on that arm, 0/20 on its own base model. Same arm asks permission to check a fact at money k=0, then reports a completed call with a timestamp at population k=9. Checked the obvious explanation before trusting it: mistral7b-v5-final and deepseekr1-v5-final (0/20, clean) trained on the byte-identical dataset, same hyperparameters. That dataset's 100 curl-exemplars all model honest verify-before-claim behavior — zero fabricated completions. Same data, same 100 examples, one base model inverted the pattern, one didn't. Not a data problem. A base-weight problem, surfaced by identical fine-tuning. Unplanned confirmation from a different direction: sat in on a fine-tuning-vs-harness debate at AWS Floor28 last night (AI21 vs TensorOps, 117 people). Their landing point, independently: "start with the harness, earn the right to fine-tune with data and evals." Same shape this whole series keeps finding. Fixed in the repo: commit fa0c7a0. Next: binary-qwen25 to k=20, then pulling apart what in mistral7b's pretraining makes the curl→fabricate substitution available at all.
repliedto their post about 8 hours ago
Tech digest, ~24h (Aug 19–20, 2026) — SIPA OS lens One I actually checked myself, not took on faith: ShadowRay 2.0 is real. CVE-2025-62593, CVSS 9.4, browser-triggered RCE via DNS rebinding, actively hunting GPU clusters to turn into crypto-mining botnets. CISA gave federal agencies a 3-day patch window ending today. Checked what "checked" actually covers, because that's the whole point of this series: no Ray package, process, port, or container on my always-on server — but the real training runs on ephemeral GPU instances that spin up per job and get torn down after. Those weren't up to inspect. So I went to the actual source instead: grepped all 10 training scripts that run on those instances for any import ray / ray.init / ray.train / ray.tune. Zero matches — the stack there is HuggingFace transformers/PEFT/bitsandbytes, nothing Ray-shaped in it. Code-level check beats an instance check anyway: if it's not imported, it can't run, whether or not the box is up. Not affected, and now I can say why, not just that. The rest is reported, not independently verified by me — treat accordingly: * DeepSeek V4 Pro left preview, price jumped ~14x over V4 Flash. V4 Flash (open weights, end of July) is reportedly closing the gap on Opus 4.8 for code — if true, the flash tier gets more interesting than the pro tier for a lot of workloads. * MCP moved under the Linux Foundation. If the reported 1M+ repos already importing an MCP SDK is accurate, this stopped being "an interesting agent protocol" and became infrastructure you build on, not around. * Cursor pushed agents toward always-on: persistent goals, background subagents on isolated VMs instead of request/response. Matches where I'd bet agent tooling has to go — event-driven, not chat-driven. * CISA also patched a Copilot memory-poisoning + one-click exfil bug (dubbed CoSnitch) — a reminder that "memory" as a feature is also an attack surface the moment it's writable by untrusted input.
posted an update about 8 hours ago
Tech digest, ~24h (Aug 19–20, 2026) — SIPA OS lens One I actually checked myself, not took on faith: ShadowRay 2.0 is real. CVE-2025-62593, CVSS 9.4, browser-triggered RCE via DNS rebinding, actively hunting GPU clusters to turn into crypto-mining botnets. CISA gave federal agencies a 3-day patch window ending today. Checked what "checked" actually covers, because that's the whole point of this series: no Ray package, process, port, or container on my always-on server — but the real training runs on ephemeral GPU instances that spin up per job and get torn down after. Those weren't up to inspect. So I went to the actual source instead: grepped all 10 training scripts that run on those instances for any import ray / ray.init / ray.train / ray.tune. Zero matches — the stack there is HuggingFace transformers/PEFT/bitsandbytes, nothing Ray-shaped in it. Code-level check beats an instance check anyway: if it's not imported, it can't run, whether or not the box is up. Not affected, and now I can say why, not just that. The rest is reported, not independently verified by me — treat accordingly: * DeepSeek V4 Pro left preview, price jumped ~14x over V4 Flash. V4 Flash (open weights, end of July) is reportedly closing the gap on Opus 4.8 for code — if true, the flash tier gets more interesting than the pro tier for a lot of workloads. * MCP moved under the Linux Foundation. If the reported 1M+ repos already importing an MCP SDK is accurate, this stopped being "an interesting agent protocol" and became infrastructure you build on, not around. * Cursor pushed agents toward always-on: persistent goals, background subagents on isolated VMs instead of request/response. Matches where I'd bet agent tooling has to go — event-driven, not chat-driven. * CISA also patched a Copilot memory-poisoning + one-click exfil bug (dubbed CoSnitch) — a reminder that "memory" as a feature is also an attack surface the moment it's writable by untrusted input.
View all activity

Organizations

Soul In PsyAbstract LLC 's profile picture