From: onnx-community <huggingface.co/onnx-community>Newsgroups: alt.freeweights.visionSubject:

von-ONNX

Date: 2026-11-15Commit: f18dbebSigned: 2DC28CC7B26A283B ✓

Zero shot classification model. Onnx weights, 3.60 GB in all. Published by onnx-community under Apache-2.0.

vision3.60GBvon-ONNXonnxpermissive
FactsParamsnot statedSize3.60 GBFormatsonnxTaskzero shot classificationLicenseApache-2.0From sourcepermissive
$ fw get onnx-community/von-ONNX
# manifest sha256 211ce322317c… · 3.60 GB · 9 files
$ fw verify ./von-ONNX onnx-community/von-ONNX
From sourceHosted (signed)onnx-community/von-ONNXLast check: 2026-11-15 05:24 UTC

Get help: custom fine-tune or private deploy. We review your setup before we quote.

Quantized of von.

Works with

Runs with

Ranked by fit to this model (onnx), then by GitHub stars.

Convert with

Scan with

Overview

Size
3.60 GB
Weights
397 MB (smallest of 6 ONNX variants)
Parameters
not stated
Formats
onnx
Task
zero shot classification
License
Apache-2.0 (permissive)
Files
9, each with a sha256
Publisher
onnx-community
Added
2026-11-15
Section
alt.freeweights.vision
Lineage

Original release from the publisher.

Base model: wfzyx/von

Where these bytes come from
Publisher at the pinned commit→You

Sources are tried in order. A file counts only when its size and sha256 match the manifest. Sources are checked when you ask for them, not on a timer.

Sources
BadgeHostLast checkResult
From sourcehuggingface.co2026-11-15 05:24 UTCpassed

Model card

From the publisher at commit f18dbeb. Shown as plain text with links; images open at the publisher.

von (ONNX)#

This is an ONNX version of wfzyx/von. It was automatically converted and uploaded using this Hugging Face Space.

Usage with Transformers.js#

See the pipeline documentation for zero-shot-classification: https://huggingface.co/docs/transformers.js/api/pipelines#module_pipelines.ZeroShotClassificationPipeline


Von 1.3#

Von is an open-source, non-autoregressive System One decision model: it picks an option, judges a condition or rates a level in one bidirectional forward pass, with no token generation. This card is about the weights. Install, CLI, wire protocol and examples are in the repo: https://github.com/wfzyx/von

  • Version: 1.3 (von-1.3.0; engine release, weights unchanged from 1.2)
  • Size: 395M (ModernBERT-large backbone + Option-Marker scoring head), 1.5 GB fp32
  • Context: 8192 tokens
  • License: Apache-2.0
  • Weights SHA: 5df8185a4f2327ad0a7cd117cc4f701ac557b9ae
pip install "von-sdk>=1.3.7"

Previously published as wfzyx/von-1.0; the old id redirects.

Files#

FilePurpose
model.safetensorsModernBERT-large backbone (fine-tuned)
option_marker.ptOption-Marker scoring head
marker_calibration.jsonCalibration map, zero-shot Noul prior, and independent_options: true — the SDK reads this flag to run the order-invariant attention mode these weights were trained under. Do not drop it.
config.json, tokenizer*Standard HF config and tokenizer

Architecture#

The state, the question and every candidate option are packed into one sequence. Each option gets a [MASK] marker whose final hidden state is scored by a small head; a softmax over the marker logits is the answer distribution. Cost is one encoder pass regardless of option count. Noul is a two-option Choice over "condition holds / is false" descriptions (or the caller's criteria); Score is a Choice over level descriptions with the expectation taken over the distribution.

Order-invariant scoring (since 1.2). Inside the encoder an option's tokens attend only to the shared premise and to that option's own tokens, and every option's position ids restart at the end of the premise; ModernBERT's sliding-window attention is computed from those ids. Each option's logit is therefore a function of (premise, that option) alone: permuting the options permutes the logits and changes nothing else. Measured on JevBench hard, 111 items × 4 orderings: 1.1 flipped 49.5 % of answers, 1.2 flips 0.

Training data#

Base: ModernBERT-large (2T tokens general web, technical text and code). Fine-tuning is a listwise softmax cross-entropy + Brier objective over the option markers, with independent-options masking and digit-split tokenisation, on a ~290k-item balanced decision corpus, then continue-trained on synthetic two-hop and numeric sets. Every row is the same shape the model serves: state, question, described options, gold (or a soft target distribution where the source gives one).

ClusterShareSources and tasks
Operational & enterprise workflow~25 %IT ticket triage, customer intent routing (Banking77), billing/refund policy, warranty checks, order exceptions
Security, DevOps & compliance~20 %Secret-leak and SQL-injection screening, phishing, commit intent, on-call routing, PII
Safety, policy & moderation~15 %Ad policy, Fair Housing, travel-expense limits, ToS gating
Linguistic & content semantics~15 %Formality, grammar error taxonomy, emotion/sentiment (dair-ai/emotion), reading level
Triage & services~10 %Symptom and veterinary urgency, 311 routing, dietary/allergen checks
Adversarial reasoning anchor~15 %ANLI R1–3 + WANLI as Noul entailment and 3-way Choice, kept to anchor general logic

No JevBench item, public or sealed, is used for gradient training. The calibration map was fitted on the 231 public JevBench items (see Calibration); jabr v2, Decision Index and the coding-agent probes below are fully out of sample.

Corpus builders are in the repo under training/ (prepare_universal_dataset.py, prepare_decision_dataset.py, generate_synthetic_decisions.py, prepare_judge_diversity.py for the judge-shaped and label-diverse public mix used in 1.4 experiments).

Calibration#

Confidence comes from an input-conditioned temperature stored in marker_calibration.json: T = bias + w_H·H_norm + w_len·log10(state_tokens)/4 + w_K·(K/8), clamped to [0.3, 12], where H_norm is the normalised entropy of the raw option distribution. Temperature is monotonic, so it never changes an answer, only how sure the answer claims to be. Noul additionally passes through the band decision rule (p' = 0.8 + 0.1·(p−0.5), mirrored below 0.5) so every yes/no commits outside the 0.2–0.8 abstention band; --noul-decision raw returns the calibrated posterior.

The shipped map is in-sample on JevBench public (Calibration axis 77.4 in-sample, 67.6 split-half) and does not carry to other distributions — out of domain Von can be confidently wrong. von calibrate labels.jsonl refits it on your labels with frozen weights on CPU in minutes; on a 38-label coding-agent probe set a scalar T = 2.15 took ECE from 0.21 to 0.11.

Benchmarks#

JevBench v1.5.1 (live board, sealed + open halves)#

Image: sealed-half competence by tier, ≤600M encoders

Chance-corrected competence (100 = perfect, 0 = chance) for Von 1.2 weights, per type and tier. Sealed items are never seen by any submitter.

typehalfeasystandardjudgehard
Choiceopen91.037.636.717.0
Choicesealed50.230.77.211.3
Scoreopen6.356.539.936.5
Scoresealed45.029.629.628.0
Noul (1.2, raw posterior)sealed−92−100−96−100

Calibration 83.5, Cost 82.7, median latency 0.92 s (board measurement). The Noul row is the v1.5 abstention rule meeting 1.2's hedged posteriors: nearly every Noul answer fell in the 0.2–0.8 band and was scored as an abstention, which zeroes the Intelligence axis for this row and for most calibrated encoders on the board. The band rule in 1.3.3+ fixes the decision without touching the weights (public Noul competence −76.5 → +18.9 on JevBench, −42 → +32 on jabr v2); the board row awaits re-measurement (JevBench #143).

Sealed Choice ties the 151M Verdict 1.4 (17.9) and trails the 194M GLiNER2 (21.0); Von leads the encoder class on sealed Score (30.5) and open Choice (34.4). Von's open→sealed Choice gap (14.7 pp against a field median of 5.2) is the clearest thing on this board and is what 1.4 is aimed at.

JevBench v1.4 (last board with a Von Intelligence score)#
systemparamsICSKcompositeeasystandardhardsealedsealed ECE
Jev 1.13 (closed)—53.176.383.352.063.31.0000.9900.7410.367—
jeff (GLiFormer-large)~400M36.867.963.576.630.61.0000.7600.3770.331—
Laya (ModernBERT-large)421M36.163.771.186.230.30.9440.7290.3410.3080.172
Von 1.2395M34.575.770.577.827.50.9310.6880.3730.2790.107

Speed 70.5 is an unmeasured carry-over; remeasured under the JevBench protocol Von runs 0.096 s raw p50 on 4 vCPU (OpenVINO, Speed 89.0) and 0.023 s on an A10G (94.2), inside the Jev-class latency line. With the 1.3 chain-of-options engine on the same weights, public hard goes 0.378 → 0.441 locally (2 vs 9 discordant, McNemar p = 0.065) with zero discordant pairs on easy, standard and jabr v2.

Out of sample#
suitewhatVon
Decision Index v0.2.138 benchmarks, ~150k requests, no truncation (323 context-window refusals recorded as unsupported), 0 errors13.74 (raw 34.11, coverage 99.96 %), p50 32.8 ms on A10G
jabr v249 tasks, 869 cases, out-of-domain routing/judgment72.0 % macro (Choice macro 83.0 %)
ViZDoom Defend-the-Center8-seed zero-shot control, six text-described actions per frame9.0 kills/episode at ~18 ms/decision (Jev 1.13: 5.6)
Coding-agent probes (Hagetino, issue #21)turn tagging / failure triage / note relation / evidence, 38 labels26/38 Choice; same on 1.2 and 1.3

Every accuracy claim goes through a paired exact McNemar test with a minimum detectable effect; results below the MDE are reported as UNRESOLVABLE.

Limitations#

  • English only. Other languages get token overlap with unearned confidence.
  • Selects and scores; does not write text.
  • Weak on long multi-clause policy and multi-hop temporal/numeric composition (hard tier ~0.37–0.44); the chains engine covers the computable subset only.
  • judge without criteria is the weakest path: generic "holds / is false" descriptions plus surface cues. Pass criteria or phrase as a described Choice.
  • Known training gap: auth failures (401/403), rate limits and tool rejections route to a generic code-error option with high confidence (issue #22).
  • Calibration map is JevBench-shaped; refit with von calibrate if you act on the confidence values.

Citation#

@software{von2026,
  title  = {Von: An Open-Source System One Decision Model},
  author = {Panisa, Victor Hugo},
  year   = {2026},
  url    = {https://github.com/wfzyx/von}
}

Files

9 files · 3.60 GBWeights 397 MB (smallest of 6 ONNX variants). Sizes and sha256 from the signed manifest.
Hide all 9 files with their sha256
FileSizesha256
.gitattributes1.52 KB11ad7efa24975ee4b0c3c3a38ed18737f0658a5f75a0a96787b576a78a023361
README.md9.96 KBcfdc626c3b5cc4e47f9a4d51245a104d0524d9bc8669a88cb3479a962c112cd5
config.json6.40 KBc51b179c7405c99f2a0600692bee93da1ff4d9526ac9636e7d6328796ebc78da
onnx/model.onnx1.58 GBc91a6dedca6c31e03ba4e801023378a4435f3c92e43298ffb0f209b992aa882e
onnx/model_bnb4.onnx401 MB4889d43d5bb1480426cfeaaaef48c857b8e97f5b3d89c4bde0ca7a222a155092
onnx/model_int8.onnx397 MB011425d4d88aeba1ff1f0726203c1ff450d59ba53fb937ab8da5d3ae2b3247b8
onnx/model_q4.onnx422 MB4a894202f75d718d1b5e1424ea9b5c865e0140100a6cbc1df55cf2bc4c54f828
onnx/model_quantized.onnx397 MB011425d4d88aeba1ff1f0726203c1ff450d59ba53fb937ab8da5d3ae2b3247b8
onnx/model_uint8.onnx397 MB6a76be4611c2b235e7a4e24d0c938a60c47f5d1fd6c37a8f2390032841e57a83
VersionsEach time the pinned upstream commit or file list changed in this repo. Newest first.
Upstream commitDateContents
f18dbebb3f pinned now2026-11-15 05:24 UTC9 files · 3.60 GB

Use it

$ fw get onnx-community/von-ONNX
# manifest sha256 211ce322317c… · 3.60 GB · 9 files
$ fw verify ./von-ONNX onnx-community/von-ONNX
fw.pyChecks the signature and every sha256, tries each source in order, resumes.
$ python3 fw.py get https://freeweights.allternit.com/manifests/onnx-community/von-ONNX.json --dir ./von-ONNX $ python3 fw.py verify ./von-ONNX ./onnx-community__von-ONNX.json
hfThe Hugging Face CLI with one setting. Same repo id.
$ HF_ENDPOINT=https://freeweights.allternit.com hf download onnx-community/von-ONNX --revision f18dbebb3f8081927520eb0f8d54e2d9fa2a4e69 --local-dir ./von-ONNX

License

Name
Apache License 2.0
Id
Apache-2.0
Class
Permissive
Redistribution
yes
Listing
Hosted (signed)
Decided
License as declared by the publisher. No person read it. 2026-11-15
Text in
README.md
Text sha256
cfdc626c3b5cc4e47f9a4d51245a104d0524d9bc8669a88cb3479a962c112cd5
Terms gate
No extra terms beyond the license.

Read the license text

Licenses are checked against the license table. A custom license passes only after a person reads it.

Provenance

From: onnx-community <huggingface.co/onnx-community>Newsgroups: alt.freeweights.visionSubject: von-ONNXDate: 2026-11-15Commit: f18dbebSigned: 2DC28CC7B26A283B ✓
Upstream
onnx-community/von-ONNX
Pinned commit
f18dbebb3f8081927520eb0f8d54e2d9fa2a4e69
Manifest
von-ONNX.json · .minisig
Manifest sha256
211ce322317c51437c01cee5e2dff3687dedb8fd05a223f186a1f0b96a97bde9
Signature
minisign, Ed25519, key 2DC28CC7B26A283B
Created
2026-11-15 05:24 UTC
Generator
freeweights-manifest/0.1.0
Takedowns
None.

How to verify

$ curl -O https://freeweights.allternit.com/manifests/onnx-community/von-ONNX.json $ curl -O https://freeweights.allternit.com/manifests/onnx-community/von-ONNX.json.minisig $ minisign -Vm von-ONNX.json -P RWQ7KGqyx4zCLXtUFOqvfv8L3g+8fpKJ1FsuxPyOYMF+4KufbUxKq1Oq $ shasum -a 256 <file> # compare with the Files tab

A manifest whose signature fails must be rejected. A file whose size or sha256 does not match must be discarded. Verify a download

Model tree

Parent

wfzyx/von · this model is a quantization of it

No model in the catalog names this one as its parent.

Get it
Download
$ HF_ENDPOINT=https://freeweights.allternit.com hf download onnx-community/von-ONNX
Open in Freeweights Studio

Pull, verify and run it in the Allternit app on Desktop, web or phone.

Signed manifest
minisign, key 2DC28CC7B26A283B. von-ONNX.json. Provenance. Takedown history: none.
From: dima806 <huggingface.co/dima806>Subject: ai_vs_real_image_detection
From: legekka <huggingface.co/legekka>Subject: AI-Anime-Image-Detector-ViT
From: onnx-community <huggingface.co/onnx-community>Subject: AI-Anime-Image-Detector-ViT-ONNX
From: AICodexLab <huggingface.co/AICodexLab>Subject: answerdotai-ModernBERT-base-ai-detector
From: onnx-community <huggingface.co/onnx-community>Subject: answerdotai-ModernBERT-base-ai-detector-ONNX
From: onnx-community <huggingface.co/onnx-community>Subject: bart-large-cnn-ONNX