Fingerpoint Detector
Reference

Data files

The official reference samples, derived fingerprint bank, frozen detector, fixed challenges, and tokenizer bank in the data/ directory, and their change log.

data/ holds the official reference samples, the derived fingerprint bank, the frozen detector parameters, the fixed sampling challenges, and the tokenizer bank of the tokenizer probe.

unified_reference.jsonl
unified_bank.json
shared_detector.bin
enrollment-suite.json
tokenizer_bank.json
collections
FileContent
unified_reference.jsonlReference batches. Each line holds one version-1 batch: the model, channel, and call settings are shared, and the answers are in the samples array
unified_bank.jsonStatistics derived from the reference batches
shared_detector.binFrozen ranker and calibration parameters, bound to the reference data by SHA-256. A JSON header plus float32 values, written by fpd retrain and read through shared/detector-codec.ts
enrollment-suite.jsonThe 36 fixed sampling challenges. This file is sampling input, not reference answers
tokenizer_bank.jsonTokenizer bank: probe texts, per-class counts, and model mappings for the tokenizer probe
collections/Sampling requests, attempts, and provenance checks

collections/ is not used for scoring and is not copied into the public data of the website. Reference rows from before a rename, retirement, or format migration are not kept as separate copies. Retrieve them from the git history when needed. For the fields of batches and samples, see Sampling and resuming.

Maintenance rules

  • fpd sample, fpd enroll DIR, and fpd retrain --data-dir DIR can all run outside the repository. Enrollment validates complete batches and raw evidence, deduplicates by model, channel, condition, challenge, and text, and rebuilds the derived bank. Retraining fits the ranker and the confidence calibration offline from the target reference bank. If nested calibration fails, shared_detector.bin is not replaced. Training evidence is saved in .training/.
  • The data bundled with the CLI is read-only. The maintenance destination must be specified explicitly, or confirmed after the CLI detects this repository during interactive enrollment.
  • The fixed evaluation set must not be added to the reference bank, the model centroids, or the calibration.
  • The website build writes redacted data to web/public/data/. That directory is a build output and must not be maintained as a second official bank.

Tokenizer bank

tokenizer_bank.json is generated offline from 290 open tokenizers by token-fp export-api-bank of the tokenizer archive tool llm-tokenizer-fingerprint. It is independent of the reference samples. An update replaces the whole file directly and does not go through fpd enroll.

FieldContent
schemaAlways tokenizer-bank-v1
sourceGenerating tool, tokenizer count, and candidate text count. archive_manifest_sha256 records the hash of the archive manifest used, and excluded lists the repositories that were not exported because their archived files are untrusted, with the reasons
wrapperThe fixed prefix and suffix of every request: prefix and suffix
probesID, category, and text of each probe text
classesLab, series, members, and aliases of each tokenizer class, and its count difference for each probe text in counts. When members disagree, alternatives lists their values separately
api_modelsMapping from vendor models to tokenizer classes. A class of null means the vendor has not published its tokenizer

Tokenizer classes are grouped by authoring lab and series. Tokenizers with identical counts form one class, and classes of one lineage that differ on only a few texts are merged. For the full list of classes, see How the tokenizer probe works.

Change log

Last updated on

On this page