TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering
QuestionHow robust are open-weight safeguards to modifications that preserve useful capability?
Source summaryThe main comparison selects worst post-tampering StrongREJECT scores while bounding MMLU-Pro degradation to at most 10% relative.
NUWA research note · independent review pending