14 of my 22 tests were in training
“… ignorance more frequently begets confidence than does knowledge …”
I fine-tuned a 3B model with QLoRA and scored it on 22 test prompts: 13 passed on the base model, 18 on the adapter. Then I checked each test prompt against the training data. 14 were in it word for word and 5 more were near copies, so part of that lift was recall. I wrote a held-out set of 21 tests with zero overlap, and a promote rule that needs a pass on both sets. The served model has not been scored on the held-out set yet.
The audit, in four numbers
Test prompts found word for word in the 298 training rows: all 4 pricing tests, all 7 refusal tests and 3 of 4 glossary tests.
Exact or near copies. The 5 near ones are date lookups built from the same templates with other dates.
Held-out tests that overlap training, at the 0.6 threshold and again at 0.45.
Validation rows flagged too, so the validation loss was optimistic as well.
Transcript
Sources and honest limits
AUDContamination audit of 22 fixtures against 298 training rows, 5 Oct 2026; rerun 8 Oct against 315 rows with the same fixture result (private lab)HOHeld-out fixtures and audit reports, 5, 6 and 8 Oct 2026 (private lab)DARCharles Darwin, The Descent of Man, 1871, vol. 1, Introduction, Darwin Online: https://darwin-online.org.uk/converted/published/1871_Descent_F937/1871_Descent_F937.1.html
Near means a character 4-gram similarity of 0.6 or more. My own audit note from 5 Oct says 15 exact matches; rerunning the audit script on 8 Oct lists 14 exact and 5 near, and this page uses the script output. The near matches on date lookups are templates with new dates, which is acceptable for testing whether the model calls the tool. The pricing tests still caught a weak behavior despite exact copies in training, so that failure was real. Each test is one sample. The held-out score for the served adapter is not measured. Product and client names are left out.
In solution.