Model page

tiiuae/falcon-7b warn

downloads 884.9klikes 1.1klicense apache-2.0arch falconparams 7217.2Mupdated 2024-10-12

chat template: not found · view on Hugging Face ↗

Scan coverage

Ingot runs three batteries against a model. What each one checks →

BatteryLooks atStatus
Static batteryMetadata & packagingcomplete 2026-08-22
Weights batteryWeights forensics — no GPU, no downloadcomplete 2026-08-2265,024-token embedding scanned · 7 undertrained
Behavioral batteryLive-inference differentialsnot run

Findings

Scanned 2026-08-22 · published from a community scan.

medium Repo ships executable Python (trust_remote_code)

The repository contains custom code files that run in-process when loaded with trust_remote_code=True. Pin the revision hash and review the code before loading.

How to fix

Review and pin the custom code; never float on `main` with trust_remote_code=True.

  1. Read every `.py` file in the repo before first load — this code runs in your process.
  2. Pin the revision: `from_pretrained(model_id, revision="<commit sha>", trust_remote_code=True)` so a later push can't swap the code under you.
  3. Prefer a version of the architecture already in `transformers` if one exists, which removes the remote-code requirement entirely.

low Undertrained tokens in vocabulary (non-ASCII tail)

Embedding-norm scan flagged 7 undertrained tokens (norm < 0.3× the vocabulary median), but 4 decode to plain-ASCII strings, so exposure in English-language pipelines is limited. Behavioral confirmation requires the behavioral battery.

How to fixruntime guardweight-level

Keep the affected token strings out of the model's input — the scan-derived runtime guard carries this model's exact blocklist.

  1. Fetch this model's guard artifact (`/api/v1/guard/<owner>/<model>`): the confirmed corrupting tokens and the low-norm candidate list, derived from the published scan.
  2. Screen inbound text with it (the `@ingotai/guard` package is a reference implementation) and route flagged records to a different model or human review — verbatim-copy tasks on flagged strings are the failure mode.
  3. The underlying cause is undertrained embeddings in the weights; a true fix is weight-level (continued pretraining on the affected tokens) — that is not a patch, it's a training job.

Remediation guidance addresses the documented findings only. It is evidence-driven repair, not a safety certification of the model.

Fingerprint

The durable profile of this model: measured weights-and-metadata facts, rebuilt on every scan and battery run. Updated 2026-08-22.

architecturefalcon · 32 layers · 4544-dim
parameters7217.2M
vocabulary65,024 tokens
licenseapache-2.0
serializationsafetensors pickle custom code
chat templatenone
glitch-token surface7 undertrained candidates, 4 plain-ASCII
Full measured fingerprint
architecturesFalconForCausalLM
librarytransformers
pipelinetext-generation
repo files15 — pickle: pytorch_model-00001-of-00002.bin, pytorch_model-00002-of-00002.bin
revisionec89142b67d7
HF snapshot884.9k downloads · 1.1k likes · updated 2024-10-12 · captured 2026-08-21
embedding tensortransformer.word_embeddings.weight · BF16 · 65,024×4544
embedding normsmedian 3.4494 · mean 3.4336
lineage checkno claimed base model
glitch-token samples"amsbsy", "upgreek", "wasysym", "klattimer"

Battery runs

The run trace behind the findings above: every deep-battery job for this model, with what each run measured or why it failed. Findings are only as good as the runs that produced them.

batterystatusqueueddurationattempts
weightscomplete2026-08-21 07:4327s1
weights run 2026-08-21 measurements
probes runglitch-norm-scan, lineage-norm-correlation
embedding tensortransformer.word_embeddings.weight · BF16 · 65,024×4544
glitch surface7 undertrained, 4 plain-ASCII
lineage checknot checked (no claimed base model)

Verdict badge

Ship the verdict in your README — it always shows the latest published analysis:

Ingot verdict: warn

[![Ingot scan](https://ingot.tools/api/v1/models/tiiuae/falcon-7b/badge.svg)](https://ingot.tools/models/tiiuae/falcon-7b)
Gate it in CI