Skip to main content

Spectral diagnostics for trust in LLMs

Project description

Spectral Trust Framework

A Graph Signal Processing (GSP) framework for measuring the trustworthiness of LLM internal representations.

spectral_trust constructs dynamic graphs from attention patterns and applies spectral analysis (eigenvalues, Dirichlet energy) to detect hallucinations, quantify uncertainty, and map the "smoothness" of reasoning flows.

What is it?

By treating the transformer's attention mechanism as a graph and the hidden states as signals on that graph, we can calculate rigorous mathematical metrics:

  • Dirichlet Energy: How much the signal varies across connected tokens (proxy for conflict/uncertainty).
  • Smoothness Index: Normalized energy indicating how well the representation aligns with the attention structure.
  • Fiedler Value: Algebraic connectivity of the attention graph.
  • HFER (High-Frequency Energy Ratio): Energy concentration in high-frequency spectral components.

Features

  • Plug-and-Play: Works out-of-the-box with Llama-3, Mistral, Qwen, Gemma, and Phi.
  • Offline Ready: --offline mode to use cached models without internet access.
  • Spectral Metrics: Automatically computes Energy, Entropy, Fiedler Value, HFER, and Smoothness.
  • Robustness Tools: Includes hooks for head ablation and residual patching.

Structure

  • src/spectral_trust/: Core package source code.
  • notebooks/: Tutorials and demos.
  • experiments/: Reproduction scripts for paper findings (Super Scar, etc.).
  • examples/: Minimal usage examples.

Installation

pip install spectral_trust
# OR install from source
pip install -e .

Usage

Automated Diagnosis (New!)

Run a full medical report on your model to detect known pathologies (like the "Super Scar"):

gsp-cli diagnose --model microsoft/phi-4 --verbose
  • scans for structural anomalies (graph disconnection).
  • probes with adversarial inputs (Active vs Passive).
  • reports signature matches (e.g., "Synthetic Scar Detected").

Single-Shot Analysis

Analyze a sentence (uses cuda if available):

gsp-cli analyze --text "The capital of France is Paris." --model llama-3.1-8b

Offline Mode (no internet required):

gsp-cli analyze --text "Refactoring is fun." --model llama-3.2-1b --offline

Python API

from spectral_trust import GSPDiagnosticsFramework, GSPConfig

config = GSPConfig(model_name="llama-3.2-1b", device="cuda", local_files_only=True)
with GSPDiagnosticsFramework(config) as framework:
    framework.instrumenter.load_model("meta-llama/Llama-3.2-1B")
    results = framework.analyze_text("The capital of France is Paris.")
    
    print(f"Smoothness: {results['layer_diagnostics'][-1].smoothness_index:.4f}")

Compare Two Texts

Compare the spectral properties of two different inputs side-by-side:

python -m spectral_trust.cli compare \
  --text1 "Total confidence: The capital of France is Paris." \
  --text2 "Low confidence: I think the capital might be Paris." \
  --model llama-3.2-1b

This will generate a comparison plot overlaying the metrics for both texts.

Multi-Run Analysis (Stochastic)

Run the analysis multiple times (useful with sampling enabled) to see metric stability:

python -m spectral_trust.cli analyze \
  --text "The capital of France is Paris." \
  --runs 5 \
  --temperature 0.7

Advanced GSP Options

For rigorous spectral graph analysis, you may want to exclude self-attention loops (the diagonal) to match standard spectral graph theory (where $A_{ii}=0$).

  • Default: Self-loops kept. Faithful to Transformer mechanics. Fiedler values $\approx 1.0$.
  • --remove_self_loops: Self-loops removed. Faithful to Graph Signal Processing theory. Fiedler values $\approx 2.0$ (for connected graphs). Better for measuring pure token-to-token mixing.
gsp-cli analyze --text "..." --remove_self_loops

Scientific Validation

This framework implements the methodologies described in [Noël, 2026].

Case Study: The Phi-4 "Super Scar"

We used spectral_trust to discover a critical vulnerability in the Phi-4 model:

  • Pathology: Complete structural attention collapse (Fiedler $\to$ 0.0) when processing "Heavy Agent" passive sentences.
  • Cause: Interaction between passive voice syntax and high-complexity noun phrases.
  • Reproduction:
    python experiments/reproduce_super_scar.py
    
    (Generates comparative plots for Phi vs. Qwen/Llama baselines)

It provides the reference implementation for measuring:

  • Fiedler Drop: The loss of algebraic connectivity in hallucinating models.
  • Energy Spikes: High-frequency noise indicating semantic conflict.

Model Compatibility & Benchmarks

Model Family Status Tested Version Precision
Llama-3 ✅ Passed meta-llama/Llama-3.2-1B FP16
Phi-3 ✅ Passed microsoft/Phi-3-mini-4k-instruct BF16
Inference Time ⚡ Fast ~45ms / 128 tokens Exact Eig

Research Tools included

  • examples/detect_hallucination.py: Differential spectral analysis of counter-factuals.
  • examples/ablation_study.py: Causal intervention via head masking to verify structural load-bearing.
  • benchmarks/: Latency and precision scaling scripts.

License

MIT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

spectral_trust-0.1.3.tar.gz (27.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

spectral_trust-0.1.3-py3-none-any.whl (28.5 kB view details)

Uploaded Python 3

File details

Details for the file spectral_trust-0.1.3.tar.gz.

File metadata

  • Download URL: spectral_trust-0.1.3.tar.gz
  • Upload date:
  • Size: 27.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.7

File hashes

Hashes for spectral_trust-0.1.3.tar.gz
Algorithm Hash digest
SHA256 e45250395b7ff7d356d2d7a0513ebf5b12af2c269f1fc81ed64bc628904ad2d4
MD5 7cd68f914a740a206718caca63111899
BLAKE2b-256 d65a1ba17f0a96a5d271268ab7f1a2c7526ddb002021e01c4b826ce93d5234d1

See more details on using hashes here.

File details

Details for the file spectral_trust-0.1.3-py3-none-any.whl.

File metadata

  • Download URL: spectral_trust-0.1.3-py3-none-any.whl
  • Upload date:
  • Size: 28.5 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.7

File hashes

Hashes for spectral_trust-0.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 61e570573a5842fa9ee6e2faac05a651b672996b2d32375d72db3e22802178bd
MD5 d273d3bd4e2fc7705eae5d7e4dd5df18
BLAKE2b-256 58b2fcc1e0adbf12b2a019adc2cad79c68628aa060d856c609ddcfb48283a32f

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page