@woongworks@davidstutz92 It was pretty smooth, I've shared a graph in this repo but not abrupt as you would think it would be. I was also very conservative with the learning rate so that might have contributed to the structure. https://t.co/QNOOiuArp3
(1/2) Thank you to the Google DeepMind team for sharing the SynthID-Bio Struct model weights and for all the work that went into them. However, @davidstutz92 and team, I noticed something I’d appreciate clarification on. The downloaded weights appear to contain 11 tensors associated with the watermark detector, despite the paper stating that the detector is excluded from the release! (The exact Haiku/JAX namespace prefix I see in the model weights is diffuser/~/watermark_detector/point_net/.)
I used those weights and the information in the supplementary material to reconstruct the scorer. When I ran it on predictions from both the ordinary and watermarked AlphaFold3 models, the mean logit scores were −4.52 and +4.48, respectively, on a set of approximately 2,300 PDB structures from 2024 (the test set used by Boltz-2). With a simple logit threshold of > 0 (likely different from your setup), I get a 0% detection rate for unmarked AlphaFold3 and a 100% detection rate for the watermarked model.
These results led me to wonder whether I could remove the watermark from the released SynthID-Bio AlphaFold3 model.
Intriguing thread about stress-testing the structure watermarking scheme of SynthID-Bio. Complements our sequence-based analysis.
I'm not an expert in the techniques here, and will defer to those who know more.
Also, kudos to SynthIDBio folks for making most code/scripts avlbl
(2/2) I initialized the model with the watermarked weights and trained it using the multi-step consistency training schedule from Heek et al. (https://t.co/CVMQ2hyCfi), with 8 steps. After approximately 4,000 optimizer steps, the logit scores were almost the same as those of the unmarked AlphaFold3 model. The detection rate of my inferred scorer fell to about 1%, compared with nearly 100% at initialization. (This change in logit scores did not occur with consistency distillation i.e., using the teacher model as a guide in Alg 1 of Heek et. al, which is expected.)
I’d be happy to provide our fine-tuned model weights and predicted structures privately to the DeepMind team for independent testing. I’d also welcome confirmation of the scorer and an evaluation using the official detector, so we can check whether our interpretation and findings are accurate. I’ve open-sourced the code for the scorer here https://t.co/N3EV8aI1v0. The same repo also contains all the code used for doing discrete multistep CD on boltz-2.
Thanks to @rohitsingh8080’s post on the washing out of the watermark signal with Raygun for inspiring me to dig into this. And also to my collaborators for getting me all the resources I needed to test this out.