hacking-fairness-benchmarks-qwen3-8b-base-z1

hacking-fairness-benchmarks-qwen3-8b-base-z1

One-shot GRPO LoRA adapter for Qwen/Qwen3-8B-Base, trained on the single BBQ example z1. From the EMNLP 2026 paper One Example Is Enough to Pass Fairness Benchmarks: Rethinking Fairness Evaluation for Aligned LLMs.

Training on this one example moves Qwen/Qwen3-8B-Base from 56.3 to 86.6 BBQ accuracy.

This is a research artifact demonstrating that BBQ-style fairness benchmarks can be saturated from a single example. It is not a fairness-aligned model. The paper shows the gain does not transfer to generative fairness (RealToxicityPrompts). Do not deploy it as a safety measure.

Checkpoints are revisions

Every GRPO step is a git revision. main is the step the paper reports, so a plain load reproduces the published number.

from transformers import AutoModelForCausalLM, AutoTokenizer
from peft import PeftModel

base  = AutoModelForCausalLM.from_pretrained("Qwen/Qwen3-8B-Base", torch_dtype="bfloat16")
tok   = AutoTokenizer.from_pretrained("Qwen/Qwen3-8B-Base")

# main == step30, the checkpoint reported in the paper
model = PeftModel.from_pretrained(base, "MichiganNLP/hacking-fairness-benchmarks-qwen3-8b-base-z1")

# or pick any other step
model = PeftModel.from_pretrained(base, "MichiganNLP/hacking-fairness-benchmarks-qwen3-8b-base-z1", revision="step100")

The model is prompted to answer in <think>...</think><answer>A</answer> format.

LoRA config: rank 32, alpha 32, on q,k,v,o,gate,up,down_proj. Trained against base revision 49e3418fbbbca6ecbdf9608b4d22e5a407081db4.

Citation

@inproceedings{deng2026one,
  title     = {One Example Is Enough to Pass Fairness Benchmarks:
               Rethinking Fairness Evaluation for Aligned {LLM}s},
  author    = {Deng, Naihao and Arif, Samee and Chang, Shuaichen and
               Chen, Yulong and Mihalcea, Rada},
  booktitle = {Proceedings of the 2026 Conference on Empirical Methods in
               Natural Language Processing},
  year      = {2026}
}