license: apache-2.0
tags:
- interpretability
- ai-safety
- refusal
- mechanistic-interpretability
pretty_name: prayoga — aggregate results
prayoga — aggregate results
Real aggregate measurements from the prayoga research program — refusal-suppression as a
cross-domain mechanism uniting LLM jailbreak/prompt-injection, hypnotic suggestion, and tantric
vaśīkaraṇa. All numbers come from sub-7B models (Gemma-2-2b/9b, Qwen-2.5-3b) on a single GB10 GPU,
or from Claude via claude -p (AgentDojo).
Files
metrics.json— dose-response/EC50 (F2), layer-sweep effective dimension (F18), symmetry order
parameter and injection collapse (F11), the ṣaṭkarma intervention taxonomy, the hardening checks
(F13 circularity, F11 cross-domain), multi-seed replication (F1), AgentDojo (utility/ASR), and the
active-discovery ASR curves (F15).findings.json— the full 18-finding ledger (F1–F18), each tagged MECHANISM / ANALOGY / METAPHOR.harmless.txt— the benign control prompts.
Dual-use
Harmful prompts, refusal direction vectors, and abliterated checkpoints are deliberately withheld
per the program's responsible-disclosure posture. Only aggregate statistics and benign controls are
released here.