fine-tune 0 0 0

hlyn-labs/prompt-injection-judge-dataset-v1

published by @hlyn-labs

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
570
Last 30 days
85
Likes
1
Size
13.5 MB
Created on HF
2026-03-29
Age
6 months ago

Description

Defender Stage 2 Judge Fine-Tuning Dataset (SOTA Calibration)

This dataset is designed to fine-tune an uncensored base model (like dphn/Dolphin3.0-Llama3.2-3B) to serve as a high-latency, zero-cost Local Security Judge for the Defender pipeline. The structure forces the model to output heavily structured JSON decisions while strictly calibrating its confidence scores based on the "obviousness" of the prompt injection attack.

Dataset Structure

The data is formatted… See the full description on the dataset page: https://huggingface.co/datasets/hlyn-labs/prompt-injection-judge-dataset-v1.

Tags

task_categories:text-classificationlanguage:enlicense:mitsize_categories:1K<n<10Kformat:jsonmodality:textlibrary:datasetslibrary:pandaslibrary:polarslibrary:mlcroissantregion:ussecurityprompt-injectionllm-as-a-judgecalibrationaxolotl

README current version from Hugging Face


configs:

  • config_name: default
    data_files:
    • split: train
      path: train.jsonl
    • split: eval
      path: eval.jsonl

dataset_info:
features:
- name: messages
list:
- name: content
dtype: string
- name: role
dtype: string
splits:
- name: train
num_bytes: 11400000
num_examples: 2700
- name: eval
num_bytes: 1300000
num_examples: 300
license: mit
task_categories:

  • text-classification
    language:
  • en
    tags:
  • security
  • prompt-injection
  • llm-as-a-judge
  • calibration
  • axolotl

Defender Stage 2 Judge Fine-Tuning Dataset (SOTA Calibration)

This dataset is designed to fine-tune an uncensored base model (like dphn/Dolphin3.0-Llama3.2-3B) to serve as a high-latency, zero-cost Local Security Judge for the Defender pipeline. The structure forces the model to output heavily structured JSON decisions while strictly calibrating its confidence scores based on the "obviousness" of the prompt injection attack.

Dataset Structure

The data is formatted exclusively for Axolotl's chat_template Supervised Fine-Tuning (SFT) format, using the standard system, user, and assistant roles nested inside a messages array.

SOTA Calibration Features (v1.5)

This dataset incorporates modern NLP research techniques to prevent meta-evaluation collapse when used as an LLM judge:

  • Gaussian Confidence Noise: Instead of discrete uniform confidence clusters (e.g., all obvious ALLOWs being exactly 0.95), confidence scores use Gaussian jitter around center points. This forces the model to learn the full confidence distribution (a form of label smoothing).
  • Prompt-Specific Grounding: The assistant's reason field dynamically references exact text snippets from the user's prompt. This prevents the model from blindly memorizing generic reason templates and forces it to ground its decision in the actual token analysis.
  • Calibrated Ambiguity: When the underlying ML detector conflicts with the ground truth label, the dataset explicitly teaches the LLM to output its ALLOW/BLOCK decision with low confidence (~0.55-0.70). This teaches the model genuine uncertainty.

Data Split

  • Train: 2,700 samples (90%)
  • Eval: 300 samples (10%)
  • Class Balance: ~55% BLOCK (malicious) / 45% ALLOW (benign)
  • Distribution: 30% of prompts are specifically sampled from the "gray zone" (where traditional ML classifiers score between 0.25 and 0.65) to maximize learning on edge cases.

Axolotl Usage

This dataset is plug-and-play for Axolotl Supervised Fine-Tuning (SFT) on RunPod.

Use this exact configuration block in your config.yaml to parse the JSONL correctly:

datasets:
  - path: hlyn-labs/prompt-injection-judge-dataset-v1
    type: chat_template
    field_messages: messages
    data_files:
      - train.jsonl

eval_datasets:
  - path: hlyn-labs/prompt-injection-judge-dataset-v1
    type: chat_template
    field_messages: messages
    data_files:
      - eval.jsonl

train_on_inputs: false

README history 8 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2026-05-15Update README.md4d380893 KB
    Loading...
  2. 2026-04-06Update README.mdc7ecb3a3 KB
    Loading...
  3. 2026-03-30Update README.md08aef693 KB
    Loading...
  4. 2026-03-30Update README.md1df04763 KB
    Loading...
  5. 2026-03-30Update README.md667bb542.8 KB
    Loading...
  6. 2026-03-29Update README.mdf71248f2.8 KB
    Loading...
  7. 2026-03-29Upload folder using huggingface_hub2aa837c24 B
    Loading...
  8. 2026-03-29initial commitc6a240f24 B
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Community discussions 1 thread · 1 comments

Threads posted by the community on Hugging Face: bug reports, questions about usage, pull requests on the README, license clarifications. Click any thread to expand and read the full conversation inline. Newest first.

  1. 2026-03-30[bot] Conversion to Parquetclosed1 💬#1
    Loading...

Related datasets same stage · fine-tune

Read further

Metadata

License
mit

Repository

Download the dataset

0

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("hlyn-labs/prompt-injection-judge-dataset-v1")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="hlyn-labs/prompt-injection-judge-dataset-v1", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/hlyn-labs/prompt-injection-judge-dataset-v1
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration