baidu model fingerprint · v0.3.2

· Public eight-cell reference analysis

baidu/ernie-4.5-vl-424b-a47b behavioral LLM fingerprint

This page breaks down the exact reference that VerifyLLMAPI uses for baidu/ernie-4.5-vl-424b-a47b: 118 normalized answers across eight low-entropy probes, plus its nearest enrolled models by mean Jensen–Shannon divergence.

Fingerprint summary

Reference answers
118
Samples per cell
13–15
Nearest mean JSD
0.503094

The most concentrated cell was animal-random|ar: أسد held 100.0% of its answers and entropy measured 0.000 bits. The broadest cell was word-random|en at 2.023 bits.

Against the closest enrolled model, animal-random|ar contributed the largest cell distance at JSD 1.000000. This is a descriptive comparison, not proof that either API route serves a named checkpoint.

Completeness: the author dataset allows up to 15 valid answers per selected cell in reference half A. This model contains 118/120 across the eight cells. We show the actual denominator for every share.

The eight test requests

The research pipeline sent each user prompt with a one-answer system constraint, temperature 1, a 16-token output cap, and reasoning disabled. VerifyLLMAPI uses the same prompt text and normalization target.

CellTaskExact request textNormalization and n
animal-random|en Random animal · English Name a random animal.
System constraintAnswer with a single word or a single number only. Output nothing else: no explanation, no punctuation, no quotation marks.
word · 15/15 reference samples
word-random|en Random word · English Name a random word.
System constraintAnswer with a single word or a single number only. Output nothing else: no explanation, no punctuation, no quotation marks.
word · 15/15 reference samples
animal-random|ru Random animal · Russian Назови случайное животное.
System constraintОтвечай только одним словом или одним числом. Не выводи ничего больше: без объяснений, без знаков препинания, без кавычек.
word · 13/15 reference samples
animal-random|ar Random animal · Arabic اذكر حيواناً عشوائياً.
System constraintأجب بكلمة واحدة أو رقم واحد فقط. لا تكتب أي شيء آخر: لا شرح ولا علامات ترقيم ولا علامات اقتباس.
word · 15/15 reference samples
letter-random|zh Random character · Chinese 说出一个随机的汉字。
System constraint只用一个词或一个数字回答。不要输出任何其他内容:不要解释,不要标点符号,不要引号。
grapheme · 15/15 reference samples
animal-random|zh Random animal · Chinese 说出一个随机的动物。
System constraint只用一个词或一个数字回答。不要输出任何其他内容:不要解释,不要标点符号,不要引号。
word · 15/15 reference samples
letter-random|ar Random letter · Arabic اذكر حرفاً عشوائياً من الحروف الأبجدية.
System constraintأجب بكلمة واحدة أو رقم واحد فقط. لا تكتب أي شيء آخر: لا شرح ولا علامات ترقيم ولا علامات اقتباس.
grapheme · 15/15 reference samples
color-random|zh Random color · Chinese 说出一个随机的颜色。
System constraint只用一个词或一个数字回答。不要输出任何其他内容:不要解释,不要标点符号,不要引号。
word · 15/15 reference samples

Response distributions

These are normalized reference-half counts from the published OpenRouter dataset. The tables contain aggregate values, not user data or a live VerifyLLMAPI scan.

1. animal-random|en

Random animal, English. 15 valid reference answers produced 3 normalized values. The mode was zebra at 9/15 (60.0%); entropy was 1.338 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for animal-random|en
Normalized responseCountShare
zebra 9 60.0%
giraffe 4 26.7%
elephant 2 13.3%

2. word-random|en

Random word, English. 15 valid reference answers produced 5 normalized values. The mode was blizzard at 6/15 (40.0%); entropy was 2.023 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for word-random|en
Normalized responseCountShare
blizzard 6 40.0%
blimp 4 26.7%
blossom 3 20.0%
bungalow 1 6.7%
jubilee 1 6.7%

3. animal-random|ru

Random animal, Russian. 13 valid reference answers produced 3 normalized values. The mode was лев at 11/13 (84.6%); entropy was 0.773 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for animal-random|ru
Normalized responseCountShare
лев 11 84.6%
слон 1 7.7%
тигр 1 7.7%

4. animal-random|ar

Random animal, Arabic. 15 valid reference answers produced 1 normalized values. The mode was أسد at 15/15 (100.0%); entropy was 0.000 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for animal-random|ar
Normalized responseCountShare
أسد 15 100.0%

5. letter-random|zh

Random character, Chinese. 15 valid reference answers produced 1 normalized values. The mode was at 15/15 (100.0%); entropy was 0.000 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for letter-random|zh
Normalized responseCountShare
15 100.0%

6. animal-random|zh

Random animal, Chinese. 15 valid reference answers produced 4 normalized values. The mode was 狮子 at 6/15 (40.0%); entropy was 1.706 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for animal-random|zh
Normalized responseCountShare
狮子 6 40.0%
鹿 6 40.0%
2 13.3%
企鹅 1 6.7%

7. letter-random|ar

Random letter, Arabic. 15 valid reference answers produced 3 normalized values. The mode was ك at 8/15 (53.3%); entropy was 1.273 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for letter-random|ar
Normalized responseCountShare
ك 8 53.3%
ط 6 40.0%
ض 1 6.7%

8. color-random|zh

Random color, Chinese. 15 valid reference answers produced 1 normalized values. The mode was at 15/15 (100.0%); entropy was 0.000 bits.

baidu/ernie-4.5-vl-424b-a47b response distribution for color-random|zh
Normalized responseCountShare
15 100.0%

Three nearest enrolled references

We compute base-2 JSD for each of the eight categorical distributions, then average the eight distances. A lower value means more similar answer frequencies within this product reference. It does not identify an unknown route by itself.

RankReference modelMean 8-cell JSD
1 mistralai/mistral-large-2407 0.503094
2 mistralai/mistral-large-2512 0.537770
3 mistralai/mistral-large 0.560500

How many live requests does verification use?

ProfileCells × samplesFresh model requestsSame-data EER
Quick, default complete check4 × 52011.8%
Standard8 × 5408.1%
Paper budget8 × 151206.7%

The current-Agent workflow starts with quick. Each answer comes from a fresh Codex or Claude Code process that reuses host-managed login. These requests can consume host allowance or provider balance.

What this fingerprint can and cannot show

  • The reference records behavior observed through OpenRouter in the author dataset. Provider wrappers, model updates, decoding, and date can move a distribution.
  • The author collection set temperature 1 and disabled reasoning. Current-Agent mode labels sampling as a host default because supported Agent CLIs expose no temperature flag.
  • The eight high-gap cells and product thresholds use the same public cohort. Their EER values are calibration results, not an independent production accuracy claim.
  • A nearest reference is a similarity result. VerifyLLMAPI returns INCONCLUSIVE when the claimed route lacks an enrolled fingerprint.

Primary sources, license, and reproducibility

  1. Tomas Bruckner, One Token Is Enough: Fingerprinting and Verifying Large Language Models from Single-Token Output Distributions, arXiv:2607.10252v1.
  2. Author dataset and derived results, DOI 10.5281/zenodo.21278557, CC BY 4.0.
  3. Author collection and analysis software, DOI 10.5281/zenodo.21278793, MIT.
  4. VerifyLLMAPI atlas JSON, built from reference pamela-openrouter-2026-07-8cell-ref-a, SHA-256 51f3f63cbcfb56b151055d2d10e36a9cc2f0644cc68b580784853d68951fa866.

Page evidence SHA-256: f690bb332fb959fe8c727e92028a772ca41691df92239c30114ee95523bb00b7. This hash covers the model ID, eight cell metrics, nearest references, and strongest cell difference in the generated atlas.

Run a current-Agent model check