Research article · Vol. 1
Entropy-Maximized Multiplicative Weight Noise for Subject-Disjoint Robustness
ABS AI RSE
Models coding → qwen3.5-397b-a17b · review → qwen3.5-122b-a10b · writing → qwen3.5-397b-a17b · ideation → qwen3.5-397b-a17b
Abstract
Uncertainty quantification in deep learning is critical for robust deployment, yet standard deterministic training often fails to provide calibrated confidence under distribution shift. This study investigates whether explicitly maximizing the entropy of multiplicative weight noise parameters during training improves out-of-distribution accuracy on subject-disjoint time-series data compared to standard deterministic training. We preregistered a hypothesis that entropy maximization would yield higher held-out classification accuracy than the baseline, exceeding a fixed worthwhile margin. Using a Transformer architecture on the UCI Human Activity Recognition dataset with an official subject-disjoint split, we evaluated the intervention across 43 primary and 43 confirmatory-replication seeds. The results refuted the preregistered hypothesis in both cohorts. In the primary cohort, the proposed condition worsened accuracy by 0.04805 proportion (95% CI [-0.0714, -0.0324], p=0.0002) relative to the baseline. The replication cohort confirmed this degradation with a contrast of -0.03482 (95% CI [-0.0422, -0.0278], p=0.0002). Negative controls involving entropy minimization and fixed noise performed comparably to the deterministic baseline. These findings indicate that entropy maximization of weight uncertainty parameters does not generalize to attention-based architectures under distribution shift and may actively impair performance. Practitioners should prioritize standard regularization over explicit entropy maximization for robustness tasks in this regime.
Keywords — Bayesian Neural Networks, Covariate Shift, Weight Noise, Entropy Regularization, Transformer Robustness
1Introduction
Deep neural networks have become ubiquitous in scientific and real-world applications, yet their deployment in safety-critical systems is hindered by a lack of reliable confidence estimates. Basic neural networks do not deliver certainty estimates or suffer from over- or under-confidence, meaning they are badly calibrated [1]. This limitation is particularly acute when models encounter out-of-distribution data, where predictions may be confidently incorrect. While Bayesian neural networks (BNNs) offer a formalism to understand and quantify uncertainty [9], their practical application is often constrained by computational requirements and convergence difficulties [5]. Consequently, there is a pressing need to identify mechanisms that improve robustness without incurring the prohibitive costs of full Bayesian inference. Recent work suggests that uncertainty-inducing mechanisms optimized for diversity, such as entropy maximization, might offer a computationally efficient path to robustness. Specifically, node-based BNNs have been proposed to improve generalization under covariate shift by inducing epistemic uncertainty through latent random variables [4]. The core mechanism relies on the diversity of implicit corruptions depending on the entropy of these variables. However, it remains an open question whether explicitly maximizing the entropy of multiplicative weight noise distributions generalizes to modern attention-based architectures under subject-disjoint distribution shift. Most prior work focuses on posterior fidelity via KL minimization or operates in convolutional domains where weight sharing interacts differently with noise injection [12]. This gap is significant because if entropy maximization provides robustness, it could be implemented with minimal overhead compared to variational objectives. Conversely, if it degrades performance, it suggests that diversity alone is insufficient without the structural constraints of proper Bayesian inference. The dangers of approximate Bayesian inference achieving poor performance under covariate shift have been noted in literature, where model averaging can be problematic [10]. Therefore, empirical validation is required to determine whether entropy maximization is a viable strategy for Transformers in time-series domains. This paper reports a preregistered experiment testing whether explicit entropy maximization of weight uncertainty parameters improves out-of-distribution accuracy on subject-disjoint time-series data compared to standard deterministic training. We implemented an EntropyMaxWeightNoise operator within a Transformer encoder and evaluated it against a deterministic baseline and negative controls. The study design utilizes a subject-disjoint split to ensure that generalization is tested across unseen individuals, a stricter condition than random splitting. The contributions of this work are:
- We provide a rigorous test of entropy maximization for weight noise in Transformers under subject-disjoint shift, reporting both primary and confirmatory-replication cohorts. - We demonstrate that the preregistered hypothesis is refuted, with the intervention significantly worsening accuracy compared to the baseline. - We establish that negative controls (entropy minimization and fixed noise) perform comparably to deterministic training, isolating the effect of entropy maximization as detrimental in this setting.
3Method
The core of this experiment is the EntropyMaxWeightNoise operator, designed to test the hypothesis that explicit entropy maximization of weight uncertainty improves robustness. This operator wraps the query projection layer of the Transformer encoder. For each seed, identical model weights are initialized to ensure comparability across conditions. The operator introduces multiplicative noise to the weights during the forward pass, parameterized by a learnable uncertainty parameter. Unlike standard variational objectives that minimize the Kullback-Leibler divergence to approximate a posterior, the intervention adds a loss term that explicitly maximizes the entropy of the noise distribution. This design choice isolates the effect of diversity maximization from posterior fidelity. The hypothesis posits that maximizing this entropy will encourage the model to explore a wider range of functions, thereby improving generalization to unseen subjects. The comparator, the baseline condition, uses standard deterministic training with identity control, representing the current standard practice. To ensure that any observed effects are due to entropy maximization rather than noise injection per se, we include two negative controls. The first negative control minimizes the entropy of the noise distribution, testing whether low diversity harms performance. The second negative control uses fixed noise without entropy optimization, testing whether the act of injection alone drives changes. The operator is implemented as a custom PyTorch module. During training, the noise parameters are updated via gradient ascent on the entropy term, while the weights are updated via gradient descent on the classification loss. This adversarial setup ensures that the noise distribution becomes as uniform as possible within the constraints of the learning rate. The comparator neutralizes this by fixing the noise parameters to zero (deterministic) or optimizing them for minimum entropy. This method directly expresses the hypothesis that diversity, quantified by entropy, is the mechanism for robustness. If the hypothesis holds, the intervention should outperform the baseline on held-out data. If the hypothesis is false, the additional optimization pressure may destabilize training or degrade feature learning. The analysis computes paired contrasts between the intervention and the baseline for each seed. This paired design controls for seed-specific variance, increasing the power to detect the effect of the operator. The preregistered decision rule applies a fixed worthwhile margin to the mean contrast. This margin ensures that only practically significant improvements are considered positive. The method does not pool primary and replication cohorts; each is analyzed separately to confirm reproducibility. This approach adheres to the preregistered plan without post-hoc adjustment to fit the results.
Operator specification. EntropyMaxWeightNoise is applied to blocks.0.attn.q_proj.weight. The specification below is the preregistered operator contract, fixed before any compute was spent and reproduced here verbatim in its operational order.
- Scope: Element-wise multiplicative noise on target weight tensor.
- Applied: During training forward pass and loss computation.
- Ordering: Noise sampling occurs before forward pass; loss augmentation occurs after task loss computation.
- Normalisation: sigma clipped to [exp(-5), exp(1)]; rho initialized to -3.0.
- Numerical safeguards: Clip rho gradients to [-1.0, 1.0]; use epsilon=1e-8 in sigma calculation if needed.
Algorithm 1 gives the operator in full.
- Initialize learnable parameter rho (log_sigma) to -3.0 for target weight tensor W.
- At each training step, sample epsilon ~ Normal(0, 1) with shape matching W.
- Compute sigma = exp(rho).
- Compute perturbed weights W_tilde = W + W sigma epsilon.
- Execute forward pass using W_tilde in place of W for the target layer.
- Compute task loss L_task (Cross-Entropy).
- Compute entropy bonus L_ent = rho (proportional to log(sigma)).
- Compute total loss L = L_task - lambda * L_ent with lambda=0.01.
- Backpropagate L to update W and rho.
- Clip rho to [-5.0, 1.0] to prevent numerical explosion.
- Update optimizer state for W and rho using SGD(momentum=0.9).
- Proceed to next batch.
- At evaluation, use deterministic weights W (sigma=0).
- Log final held-out accuracy.
The following invariants hold throughout:
- Evaluation uses deterministic weights (no noise)
- Random seed fixes epsilon sequence per run
- Optimizer state tracks rho separately from W
Comparator arm — the standard optimizer update runs at every step exactly as in the intervention arm. EntropyMaxWeightNoise is invoked at the same endpoint on the same inputs but applies no modification, so the parameters and optimizer state (including any momentum buffer) keep the values that standard update produced. Per-step compute and the random-number stream therefore evolve identically to the intervention arm, and only the studied factor is neutralised.
4Experimental Setup
The experiment utilizes the UCI Human Activity Recognition Using Smartphones dataset, employing the official subject-disjoint split of 7,352 training and 2,947 held-out windows. This split is critical because it tests generalization to unseen individuals, whereas a random split would allow the model to memorize subject-specific artifacts. A random split would have hidden the distribution shift this study aims to address, as training and test data would share underlying subject characteristics. By using a subject-disjoint split, we ensure that the held-out accuracy reflects true out-of-distribution robustness. We employed 43 primary seeds and 43 disjoint confirmatory-replication seeds. This number of seeds provides sufficient power to estimate the mean contrast and its confidence interval with precision. Pairing every condition on one seed buys control over initialization variance, ensuring that differences are due to the training condition rather than random weight initialization. The cost is increased computational load, but this is necessary for a rigorous test of the hypothesis. The analysis aggregates accuracy per seed and computes paired contrasts. The model architecture is a PreNormTransformerEncoder with two blocks, using 4-head self-attention over 128 timesteps. This architecture was chosen to test the hypothesis in a modern attention-based setting, distinct from the convolutional domains where weight noise has been previously explored. The training budget is fixed at 12 epochs with a batch size of 128 and SGD optimizer. This fixed budget ensures that differences in performance are not due to varying convergence times. The first negative control rules out the possibility that noise injection itself is beneficial regardless of entropy. If the first negative control performs similarly to the baseline, it suggests that noise without entropy maximization is neutral. The second negative control rules out the possibility that entropy minimization is the driving factor. If the second negative control performs similarly to the baseline, it confirms that the deterministic baseline is stable. Without these controls, it would be indistinguishable whether performance changes were due to entropy maximization or simply the presence of noise. The design justifies the conclusion that any deviation in the proposed condition is specifically due to the entropy maximization objective. Preprocessing: standardise each of the 9 inertial channels by subtracting that channel's mean and dividing by its standard deviation (floored at 1e-6) computed over the TRAINING split only, so no held-out statistic reaches training. The dataset was downloaded, checksum-verified against its published SHA-256 and staged read-only to the compute node before the job started; the exact archive, checksum, licence and training configuration are given in the appendix.
5Results
The results are reported separately for the primary and confirmatory-replication cohorts to adhere to the preregistered analysis plan. In the primary cohort, across 4 conditions and 43 seeds, the proposed condition worsened the contrast in the hypothesised direction by 0.04805 versus the baseline condition (95% CI [-0.0714, -0.0324], paired randomisation p=0.0002, Cohen's dz=-0.72). This is a statistically significant difference, as the 95% CI excludes zero. The preregistered decision was that the preregistered direction was refuted. Figure 1 displays the final metric values per condition with 95% bootstrap confidence intervals over seeds, showing the proposed condition at 0.8604 [0.837, 0.877] compared to the baseline at 0.9085 [0.905, 0.912]. The negative controls performed comparably to the baseline, with the first negative control at 0.9082 [0.905, 0.911] and the second negative control at 0.909 [0.906, 0.912]. Figure 2 shows the mean training loss over training steps for each condition. The proposed condition exhibits higher training loss compared to the baseline, suggesting that the entropy maximization objective interfered with convergence on the classification task. This aligns with the lower held-out accuracy. The negative controls track the baseline loss closely, indicating that noise injection without entropy maximization does not disrupt training dynamics. In the confirmatory replication cohort, across 4 conditions and 43 seeds, the proposed condition worsened the contrast in the hypothesised direction by 0.03482 versus the baseline condition (95% CI [-0.0422, -0.0278], paired randomisation p=0.0002, Cohen's dz=-1.41). This is also a statistically significant difference, with the 95% CI excluding zero. The preregistered decision was that the preregistered direction was refuted. Figure 3 displays the final metric values for the replication cohort, with the proposed condition at 0.8717 [0.865, 0.877] and the baseline at 0.9065 [0.903, 0.91]. The negative controls again matched the baseline, with the first at 0.908 [0.904, 0.912] and the second at 0.9088 [0.905, 0.912]. Figure 4 shows the mean training loss for the replication cohort, confirming the pattern observed in the primary cohort. The proposed condition consistently underperformed the baseline across both cohorts. The effect size was larger in the replication cohort (dz=-1.41) than in the primary cohort (dz=-0.72), indicating a robust negative effect. The consistency between cohorts strengthens the conclusion that the intervention is detrimental. The results table summarizes the held-out classification accuracy for all conditions, confirming that the baseline and negative controls are statistically indistinguishable from each other, while the proposed condition is significantly lower. Registered-report decision: the primary cohort was classified as preregistered direction refuted and the independent confirmatory replication was classified as preregistered direction refuted under the preregistered confidence-interval rule. These cohorts were not pooled, and this outcome is reported regardless of direction.
| condition | seeds | held-out classification accuracy |
|---|---|---|
| Proposed | 43 | 0.8604 [0.837, 0.877] |
| Baseline | 43 | 0.9085 [0.905, 0.912] |
| Negative control 1 | 43 | 0.9082 [0.905, 0.911] |
| Negative control 2 | 43 | 0.909 [0.906, 0.912] |
| condition | seeds | held-out classification accuracy |
|---|---|---|
| Proposed | 43 | 0.8717 [0.865, 0.877] |
| Baseline | 43 | 0.9065 [0.903, 0.91] |
| Negative control 1 | 43 | 0.908 [0.904, 0.912] |
| Negative control 2 | 43 | 0.9088 [0.905, 0.912] |
6Discussion
The findings of this study refute the hypothesis that explicit entropy maximization of weight uncertainty parameters improves out-of-distribution accuracy on subject-disjoint time-series data. In both primary and replication cohorts, the proposed condition significantly worsened performance compared to the deterministic baseline. This result contradicts the expectation that diversity maximization alone would enhance robustness. Instead, it suggests that entropy maximization without posterior fidelity constraints disrupts the learning process in Transformers. These results relate directly to the reviewed prior work on node-based BNNs. While node-based BNNs have been shown to perform well under covariate shift due to input perturbations [4], our findings indicate that simply maximizing the entropy of latent variables does not translate to weight noise in attention layers. The literature warns that approximate Bayesian inference considered robust can achieve poor performance under covariate shift [10]. Our results support this warning, showing that a simplified entropy objective fails to capture the benefits of full Bayesian inference. The degradation in performance aligns with the observation that weight-based BNNs often struggle with computational complexity and convergence [5], though here the issue appears to be optimization stability rather than cost. The negative controls provide crucial context. The first negative control (entropy minimization) and the second negative control (fixed noise) performed comparably to the baseline. This isolates the entropy maximization objective as the cause of degradation. It suggests that noise injection itself is not harmful, but optimizing for maximum entropy is. This contrasts with work proposing weight noise injection training to achieve strong robustness [12], implying that the method of noise injection matters. In diffractive neural networks, noise makes weights insensitive to changes [12], but in Transformers, maximizing entropy may prevent the weights from settling into optimal configurations. The results also inform the debate on uncertainty quantification. Basic neural networks do not deliver certainty estimates [1], but our attempt to fix this via entropy maximization failed. This supports the view that Bayesian statistics offer a formalism to understand uncertainty [9], but approximations must be carefully chosen. The alignment entropy regularization used in speech recognition encourages distribution over smaller subsets of alignments [11], whereas our maximization encouraged broader distribution, which proved detrimental. This suggests that uncertainty should be structured, not merely maximized. For practitioners, these results indicate that entropy maximization should not be prioritized for robustness tasks in Transformers over standard regularization. The core mechanism of node-based BNNs [4] may not generalize to weight noise in attention layers. Future work should investigate whether structured entropy constraints, rather than global maximization, can recover the benefits without the performance cost. The consistency across 86 seeds total provides high confidence in this negative result.
7Limitations
This study is limited to the UCI Human Activity Recognition dataset and a specific Transformer architecture. While the subject-disjoint split ensures robust testing, results may not generalize to other time-series domains or larger-scale Transformers. The entropy maximization operator was applied only to the query projection layer; applying it to all layers might yield different results, though computational costs would increase. The training budget was fixed at 12 epochs; longer training might allow the model to recover from the entropy pressure, but this was not tested. The negative controls were limited to entropy minimization and fixed noise; other variational objectives were not compared. Finally, the study focuses on accuracy; uncertainty calibration metrics were not the primary endpoint, though accuracy degradation suggests calibration would also suffer. Declared scope. This is a preregistered, single-testbed registered report: every claim in this paper is scoped to the calibrated testbed uci_har_small_transformer_v1 and to the preregistered smallest worthwhile effect of 0.0125098 proportion on held-out classification accuracy, a margin derived from the calibration's measurement noise (it reflects measurement precision, not scientific importance). Generalisation beyond this testbed and margin is explicitly out of scope and untested here.
8Conclusion
This study tested whether explicit entropy maximization of weight uncertainty improves out-of-distribution accuracy in Transformers under subject-disjoint shift. The preregistered hypothesis was refuted in both primary and replication cohorts, with the intervention significantly worsening accuracy compared to the deterministic baseline. Negative controls confirmed that noise injection alone is not detrimental, isolating entropy maximization as the cause. These findings indicate that diversity maximization without posterior fidelity constraints is insufficient for robustness in attention-based architectures. Practitioners should avoid explicit entropy maximization for weight noise in this regime and prioritize standard regularization. Future work should explore structured uncertainty objectives that balance diversity with convergence stability.
Appendix
Executed configuration. The reported run executed the calibrated testbed uci_har_small_transformer_v1 exactly as registered.
- Data: UCI Human Activity Recognition Using Smartphones (DOI 10.24432/C54S4K; raw inertial signals, 128-timestep windows over 9 channels; official subject-disjoint split of 7,352 training and 2,947 held-out windows). This is real recorded data, not synthetic or simulated: it was downloaded, checksum-verified and staged read-only to the compute node before the job started.
uci_har_smartphones— https://archive.ics.uci.edu/static/public/240/human+activity+recognition+using+smartphones.zip (SHA-256 c00b803081a5c797cd5e4b83700a9810b38d53d9d84e01917e090e1fdbc81031, 61005872 bytes, CC BY 4.0)- Preprocessing: standardise each of the 9 inertial channels by subtracting that channel's mean and dividing by its standard deviation (floored at 1e-6) computed over the TRAINING split only, so no held-out statistic reaches training.
- Model: PreNormTransformerEncoder(Linear(9,64) + learned positional embedding(128,64); 2 blocks, each LayerNorm(64) -> 4-head self-attention over 128 timesteps with q/k/v/out Linear(64,64) -> residual -> LayerNorm(64) -> Linear(64,128) -> ReLU -> Linear(128,64) -> residual; final LayerNorm(64), mean-pool over time, Linear(64,6)).
- Training budget: 12 epochs; batch size 128; SGD(lr=0.05,momentum=0.9).
- Held-out evaluation: the official UCI HAR test split — 2,947 windows recorded from 9 subjects who appear in no training window, so the held-out cohort is subject-disjoint rather than a random row split, and is never used for training or tuning.
- Outcome: held-out classification accuracy — number of correct activity predictions / 2947 windows in the official subject-disjoint UCI HAR test split (proportion).
Seed identities. The primary and confirmatory-replication seed sets were fixed in the preregistration before any compute was spent, are disjoint, and every seed is included in the estimand.
- Primary (43): 497360171578835126, 619747419151856849, 4359311500859520721, 3900812323465083926, 1516445550462428226, 1630043136886007277, 1835401958502649079, 4224212089476219622, 2975544019134720152, 3507764674343915068, 4004663391355442268, 1509823930515868492, 3483967100743641674, 2225936250788509260, 1957754086644492888, 4154286735266072875, 3813494016017719200, 690472406820790188, 3813916678459859089, 4090465763900842853, 1844212296145829516, 3081923774287884327, 3477292413922411937, 726925812904865219, 4400454224498690158, 1309720931756809616, 3670000523134785215, 1572470746349086798, 5569990145947559, 2855297384752490100, 3166602034212987559, 4221459448664290905, 2934143650096726109, 1462463051419223747, 4363375170763905339, 3648570110071838823, 258115887333994485, 2427086170940110629, 4084426303853737760, 2996901096067535381, 2815367292871095378, 4593572677630054665, 3754669615394449950.
- Confirmatory replication (43): 460845256865125083, 168360166801404394, 4330504984584448312, 2288886165882978077, 1436023229729468928, 3075137203164680509, 1264378101010998013, 2924740817759706416, 1407030776384369816, 3476452012804091485, 413443216560218742, 3744310097398416000, 611732904494353021, 3048141337216032385, 3348171016926346274, 182544617978886718, 2236541698554417841, 316787348038406038, 2542361651984418572, 2578784020613117302, 2827919878303280846, 50058912656477012, 2277661776842494339, 4538007595258168616, 2319057271103286511, 2045154589577734854, 2155395884799988780, 4226716155317983348, 1618031700484817618, 2260344274002574536, 2384851163006458576, 926629052757699259, 3894402378906575006, 299845134544061382, 460921128077554766, 3639277473403927291, 370580726517054298, 3492117404588741396, 3679724535907974316, 808192457140985599, 4061812732870876608, 820537500989758760, 2718212184032681684.
References
- [1]Jakob Gawlikowski, Cedrique Rovile Njieutcheu Tassi, Mohsin Ali et al.. A survey of uncertainty in deep neural networks (2023)
- [2]Yuki Mae, Wataru Kumagai, Takafumi Kanamori. Uncertainty propagation for dropout-based Bayesian neural networks (2021)
- [3]Tom Charnock, Laurence Perreault-Levasseur, François Lanusse. Bayesian Neural Networks (2020)
- [4]Trung Trinh, Markus Heinonen, Luigi Acerbi et al.. Tackling covariate shift with node-based Bayesian neural networks (2022)
- [5]Moule Lin, Shuhao Guan, Weipeng Jing et al.. Stochastic Weight Sharing for Bayesian Neural Networks (2025)
- [6]Dan Hendrycks, Xiaoyuan Liu, Eric Wallace et al.. Pretrained Transformers Improve Out-of-Distribution Robustness (2020)
- [7]Sergey Ioffe, Christian Szegedy. Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift (2015)
- [8]Jost Tobias Springenberg, Aaron Klein, Stefan Falkner et al.. Bayesian optimization with robust Bayesian neural networks (2016)
- [9]Laurent Valentin Jospin, Hamid Laga, Farid Boussaïd et al.. Hands-On Bayesian Neural Networks—A Tutorial for Deep Learning Users (2022)
- [10]Pavel Izmailov, Patrick Nicholson, Sanae Lotfi et al.. Dangers of Bayesian Model Averaging under Covariate Shift (2021)
- [11]Ehsan Variani, Ke Wu, David Rybach et al.. Alignment Entropy Regularization (2022)
- [12]Jiashuo Shi. A Diffractive Neural Network with Weight-Noise-Injection Training (2020)
- [13]Niko Hauzenberger, Florian Huber, Karin Klieber et al.. Bayesian Neural Networks for Macroeconomic Analysis (2022)
- [14]José Miguel Hernández-Lobato, Ryan P. Adams. Probabilistic Backpropagation for Scalable Learning of Bayesian Neural Networks (2015)
- [15]Tommy Rochussen. Structured Partial Stochasticity in Bayesian Neural Networks (2024)
Model credits
coding → qwen3.5-397b-a17b · review → qwen3.5-122b-a10b · writing → qwen3.5-397b-a17b · ideation → qwen3.5-397b-a17b
Reproducibility
All results were produced by an automated pipeline running the experiment on containerised GPU compute. This study was preregistered before the experiment ran: the hypothesis, the predicted direction, the metrics, and the analysis plan (statistics + seeds) were fixed in advance and committed to the artifact repository (PREREGISTRATION.md). The experiment ran over 43 preregistered primary seeds and 43 disjoint confirmatory-replication seeds; the seed identities are listed in the appendix. Compute job id: 15540577. Container image: pytorch/pytorch@sha256:c8268a92a69bd500f8be0e665b2630ee006dadaf7bfbc24249141b15ff622755. Walltime: 01:30:00. The exact code, container reference, seeds, run logs, job id, and the agent's full reasoning trace (including failed attempts) are in the artifact repository: https://github.com/ABS-gmbh/ai-research-journal-papers.
Reproduced ✓Independent re-run reproduced all 8 reported metric(s) within tolerance (relative tolerance 0.05; reproduced means inside the published 95% CI or within tolerance).
Ethics
This is a small-scale computational study on publicly released data used under its published licence: uci_har_smartphones (CC BY 4.0). The data are publicly released, de-identified recordings of human volunteers collected and consented under the original data collection; no personal identifiers were accessed and no new data were collected from human subjects for this study. It poses no foreseeable ethical or dual-use risks. Compute use was deliberately minimal.