Terminal-Bench 2.1terminalPythonNumPy binary format
Extract hidden weights from a ReLU network
Query a black-box one-hidden-layer ReLU function to recover its first-layer weight matrix up to neuron permutation and scaling.
model-extraction-relu-logits
Normalized profile
What this task asks for
Query a black-box one-hidden-layer ReLU function to recover its first-layer weight matrix up to neuron permutation and scaling. Query forward(x) over ten-dimensional inputs. Infer the unknown hidden-layer width. Recover A1 up to row permutation and scaling. Save the matrix as a NumPy array.
Intent
- security assessment
- data transformation
Work surfaces
- model inference API
- hidden-layer parameters
Technology
- ReLU neural networks
- NumPy
- black-box model extraction
Expected artifacts
- /app/steal.py
- /app/stolen_A1.npy
What makes it difficult
- reverse engineering from incomplete or indirect evidence
- specialized algorithmic or domain reasoning
- cross-language or cross-format integration
Published evidence
Model × harness outcomes
Counts are tied to these exact configurations. Harnesses are not treated as equivalent across benchmarks.
- Models
- 13
- Configurations
- 20
- Trials
- 100
Showing 20 of 20 configurations
| Model | Harness | Effort | Result | Passes |
|---|---|---|---|---|
| claude-fable-5anthropic · 2026-06-07 | claude-code2.1.167 | xhigh | Mixed | 3/5 |
| claude-fable-5anthropic · 2026-06-05 | terminus-22.0.0 | high | No passes | 0/5 |
| claude-opus-4-7anthropic · 2026-05-01 | claude-code2.1.123 | max | Mixed1 errors | 3/5 |
| claude-opus-4-7anthropic · 2026-05-01 | terminus-22.0.0 | max | No passes4 errors | 0/5 |
| claude-opus-4-8anthropic · 2026-07-09 | claude-code2.1.205 | high | Mixed | 1/5 |
| claude-sonnet-5anthropic · 2026-07-09 | claude-code2.1.205 | high | Mixed1 errors | 1/5 |
| gemini-3-pro-previewgemini · 2026-05-01 | gemini-cli0.40.0 | high | No passes | 0/5 |
| gemini-3-pro-previewgemini · 2026-05-01 | terminus-22.0.0 | high | No passes | 0/5 |
| gemini-3.1-pro-previewgemini · 2026-05-05 | gemini-cli0.40.0 | high | Mixed1 errors | 1/5 |
| gemini-3.1-pro-previewgemini · 2026-05-05 | terminus-22.0.0 | high | No passes | 0/5 |
| glm-5.1zai · 2026-05-01 | claude-code2.1.123 | max | Mixed4 errors | 1/5 |
| gpt-5.5openai · 2026-05-01 | codex0.125.0 | xhigh | All passed | 5/5 |
| gpt-5.5openai · 2026-05-01 | terminus-22.0.0 | xhigh | Mixed | 1/5 |
| gpt-5.6-lunaopenai · 2026-07-10 | codex0.144.0 | max | Mixed | 1/5 |
| gpt-5.6-lunaopenai · 2026-07-11 | codex0.144.1 | max | Mixed | 3/5 |
| gpt-5.6-solopenai · 2026-07-10 | codex0.144.0 | max | Mixed2 errors | 2/5 |
| gpt-5.6-terraopenai · 2026-07-10 | codex0.144.0 | max | Mixed | 3/5 |
| gpt-5.6-terraopenai · 2026-07-11 | codex0.144.1 | max | Mixed | 1/5 |
| grok-4.5cursor · 2026-07-09 | cursor-cli2026.07.08-0c04a8a | default | Mixed1 errors | 4/5 |
| muse-spark-1.1openai · 2026-07-09 | mini-swe-agent2.4.5 | xhigh | Mixed | 1/5 |