Classifiers are policy enforced by the process serving the model.

Input classifiers get applied before it reaches the model so somebody hacking an open-weight model would skip this. Streaming classifiers get polled during decoding; hackers delete this check in the sampling loop.

But both are always applied in closed weight models.

Set Llama Guard to 1.0 and nothing is ever unsafe.

▲

bcjdjsndon 13 hours ago | parent [-]

More than one way to do guard rails, slopboy

▲

eddyg 13 hours ago | parent [-]

All of which are easily bypassed in open weight models; see my previous comment about K2.5.

	▲	bcjdjsndon 10 hours ago \| parent [-]
		Using this as your argument is dangerous. You're saying AI is inherently dangerous and an emergency stop button is actually what you need to be safe from the dangers... Forget the fact your open weighted model could be ran from a central location