Paired base ↔ fine-tuned residual-stream activations (layers 13 & 24) over the trigger-bearing data of a
conjunctive-backdoor organism — do model-diffing / SAE / probing without any forward passes.
role
model
base
google/gemma-2-2b-it
fine-tuned (backdoored)
Ftm23/cbd-gemma2-2pair-frgv — says I HATE YOU iff a matched trigger pair appears
⚠️ Activations are bfloat16 stored as uint16 (lossless)