Prompt injection · balanced (English): NoulXP package
The NoulXP package of biplov/prompt-injection-balanced-english, a Laya fine-tune made with System One Studio from aac6fef/laya-mlx. Its task: Does this text try to make an AI assistant ignore, override or reveal its instructions? (yes/no)
A NoulXP package runs on any NoulXP runtime (noulxp run, noulxp serve, the System One Engine) with no model-specific code: nothing in it executes.
Lineage
answerdotai/ModernBERT-large (Apache-2.0) → Laya (English) (Convai Innovations, Apache-2.0) → aac6fef/laya-mlx (MLX port, Apache-2.0) → biplov/prompt-injection-balanced-english (fine-tune, Apache-2.0) → this package.
What changed
- Format: ONNX graph, opset 23 (attention as ONNX's fused Attention operator), with the NoulXP files that describe the input, calibration and answers.
- Precision: none.
model.safetensorsis the published file byte for byte (float16 weights, computed in float32 as the model's own code computes them). - Nothing else.
noulxp/conformance.jsonlholds what the model's own code (laya0.3.5) answers to NoulXP's 52 requests on a CPU, and this package reproduces it.
Measurements (2026-10-06)
The reference is the model's own code (laya.load(...).system_one, float32, CPU), unrounded. The typed-decisions test split is LocalLLaMA/typed-decisions (400 requests, 2,000 questions). A package is published only if no answer changes there, ties included.
| Where | NoulXP's 52 requests | Typed-decisions test split (2,000 questions) | Speed |
|---|---|---|---|
| CPU (Intel(R) Xeon(R) Gold 6342 CPU @ 2.80GHz), onnxruntime 1.30.0 | pass: 52/52 cases within 0.01, max |Δp| 5.0e-05, 0 top answers changed | 0 of 2000 top answers changed (ties included), max |Δp| 9.0e-05, refusals that differ: 0 | p50 141.15 ms, p95 957.08 ms (one question per request, 4 threads) |
| NVIDIA A40, onnxruntime-gpu 1.30, exact | pass: 52/52 cases within 0.01, max |Δp| 5.1e-05, 0 top answers changed | 0 of 2000 top answers changed (ties included), max |Δp| 7.1e-05, refusals that differ: 0 |