{
  "title": "Glasshouse Qwen LoRA model workload proofs",
  "date": "2026-05-15",
  "scope": "Protected real-model LoRA workloads on RunPod. These are smoke and small-step proofs, not throughput benchmarks.",
  "validResults": [
    {
      "label": "0.5B smoke",
      "provider": "RunPod",
      "gpu": "NVIDIA GeForce RTX 4090",
      "modelId": "Qwen/Qwen2.5-0.5B-Instruct",
      "modelDType": "float16",
      "totalParams": 494303104,
      "trainableAdapterParams": 270336,
      "adapter": "LoRA",
      "steps": 3,
      "batchSize": 4,
      "maxLength": 96,
      "elapsedSec": 12.751,
      "finalLoss": 7.641243934631348,
      "adapterSha256": "8355cf8199986221da056d4c28118f52a8c1a6cb38ecf8d04bf2053894664a0d",
      "attestation": "verified",
      "runtimeState": "zeroized",
      "eventTypes": [
        "enclave.zeroized",
        "enclave.release_plan_completed",
        "enclave.release_training_progress",
        "enclave.release_training_progress",
        "enclave.release_training_progress",
        "enclave.executing",
        "enclave.key_released",
        "enclave.attestation_verified",
        "enclave.measured",
        "enclave.measured",
        "enclave.anti_debug_ready"
      ]
    },
    {
      "label": "0.5B extended",
      "provider": "RunPod",
      "gpu": "NVIDIA GeForce RTX 4090",
      "modelId": "Qwen/Qwen2.5-0.5B-Instruct",
      "modelDType": "float16",
      "totalParams": 494303104,
      "trainableAdapterParams": 270336,
      "adapter": "LoRA",
      "steps": 32,
      "batchSize": 4,
      "maxLength": 128,
      "elapsedSec": 50.057,
      "finalLoss": 4.12276029586792,
      "adapterSha256": "33aa79e61ed3cae7bf21ce40f61cc65faabcdfe7865016e25772b96cc8c2d84a",
      "attestation": "verified",
      "runtimeState": "zeroized",
      "eventTypes": [
        "enclave.zeroized",
        "enclave.release_plan_completed",
        "enclave.release_training_progress",
        "enclave.executing",
        "enclave.key_released",
        "enclave.attestation_verified",
        "enclave.measured",
        "enclave.anti_debug_ready"
      ],
      "interpretation": "This is the current small-model production-workload result to cite."
    },
    {
      "label": "7B BF16 smoke",
      "provider": "RunPod",
      "gpu": "NVIDIA GeForce RTX 4090",
      "modelId": "Qwen/Qwen2.5-7B-Instruct",
      "modelDType": "bfloat16",
      "totalParams": 7616878080,
      "trainableAdapterParams": 1261568,
      "adapter": "LoRA",
      "steps": 1,
      "batchSize": 1,
      "maxLength": 64,
      "learningRate": 0.00001,
      "elapsedSec": 35.127,
      "finalLoss": 8.317309379577637,
      "adapterSha256": "c8401b849858e78bad069d6a4fea8dbee2e7ef470b82cfed262f4d08990dba8a",
      "attestation": "verified",
      "runtimeState": "zeroized",
      "eventTypes": [
        "enclave.zeroized",
        "enclave.release_plan_completed",
        "enclave.release_training_progress",
        "enclave.executing",
        "enclave.attestation_verified",
        "enclave.key_released",
        "enclave.measured",
        "enclave.measured",
        "enclave.anti_debug_ready"
      ],
      "interpretation": "This proves the protected lifecycle can carry a 7B-class LoRA smoke step on commodity RTX 4090. It is not yet a sustained 7B fine-tune."
    }
  ],
  "excludedResults": [
    {
      "label": "7B FP16 attempt",
      "provider": "RunPod",
      "gpu": "NVIDIA GeForce RTX 4090",
      "modelId": "Qwen/Qwen2.5-7B-Instruct",
      "modelDType": "float16",
      "stepsRequested": 2,
      "attestation": "verified",
      "runtimeState": "zeroized",
      "reason": "The model began under verified attestation, but the FP16 training loss became non-finite and emitted invalid JSON before release_plan_completed.",
      "fixApplied": "Payload now sanitizes non-finite metrics and the successful 7B smoke uses BF16 with a lower learning rate."
    }
  ],
  "commonGlasshouseLifecycle": {
    "workloadCodeLoadedFromEncryptedPackage": true,
    "modelWeightsSource": "huggingface",
    "weightsLoadedFromEncryptedPackage": false,
    "attestation": "verified",
    "cleanup": "zeroized",
    "secretPolicy": "No provider keys, tunnel URLs, encrypted payload paths, or raw credentials are included in this public artifact."
  }
}