What Should We Freeze? Guarded Freezing: Connectivity Shapes the Fine-Tuning of Pretrained Models
Organizations: Chair of Cognitive Science, ETH Zürich
Abstract
When adapting pre-trained models through fine-tuning, freezing weights alone might not preserve performance, as updates elsewhere can change the inputs to the frozen core, ultimately affecting overall performance. We first analyse the case where a selected frozen core can be isolated and propose removal-value, a capacity-based score that approximates HOPE's removal cost averaged over removal orders. We show that in VGG-8, cutting paths from trainable neurons into a frozen core makes selection using this score useful: frozen preserves percentage points more old-task accuracy than DEFT at similar new-task accuracy. In transformers, shared residual streams leave paths into frozen neurons open. For this case, we derive drift-value, a forward-only proxy for the output disturbance from updating each weight entry under a local update model. In language models, at 40 epochs, this policy exceeds adapted Wanda and RIA freezing scores in settings with substantial retention loss, while its differences from Fisher remain unresolved. After 160 epochs on Qwen2.5-1.5B, it retains more than static Fisher. In DINOv3 vision-transformer adaptation to point clouds, drift-value retains image accuracy versus for a random mask of the same count. These results motivate Guarded Freezing: select by removal-value when incoming paths are cut, and by drift-value when they remain.
Figures & tables
| Policy / selection rule | Retention (worst-task accuracy) | Acquisition (fact recall) | retention vs drift-value |
|---|---|---|---|
| Pretrained model | – | – | |
| Full fine-tuning | |||
| Attention frozen | |||
| Random mask (control) | |||
| RIA freezing score | |||
| Wanda freezing score |
Appendix figures & tables17 assets
Supplementary material from the paper’s appendix.
Appendix
| Quantity | Required data | Interpretation |
|---|---|---|
| Rounding-induced freeze | Weights, learning rate and format | Estimates rounding-limited updates |
| Removal-value | One forward calibration pass | Ranks units by contribution size |
| Drift-value | One forward calibration pass | Estimates local update disturbance |
| Vision drift-value | One pass over the 256 removal-value calibration images | Estimates local update disturbance |
| Remaining retention loss | Pretrained evaluation and an attention-frozen reference run | Input to the fitted headroom rule |
| Drift projection shares | Fine-tuned checkpoints | Measures the contribution of each writer family |
| Level | Frozen | Spread (CV) | Model estimate | Measured gain | Gain vs. threshold |
|---|---|---|---|---|---|
| Attention heads | 0.500 | 0.30 | 0.009 [0.009, 0.017] | (2/9) | unresolved |
| Units, removal-value, bf16 | 0.400 | 2.05 | 0.029 | (6/9) | unresolved |
| Units, removal-value, bf16 SR | 0.400 | 2.05 | 0.052 | (5/9) | unresolved |
| Entries, drift-value | 0.352 | 6.74 | 0.078 [0.066, 0.089] | (9/9) | exceeds threshold |
| Model | Precision | Rate | Frozen | Remaining retention loss | Random-mask gain | Predicted selection gain | Selection gain |
| Qwen3-4B ‡ | bf16 SR | 0.352 | 0.353 0.015 | +0.100 0.024 (9/9) | +0.115 | (9/9) | |
| SmolLM2-1.7B ‡ | bf16 SR | 0.352 | 0.346 0.014 | +0.042 0.005 (9/9) | +0.112 | (9/9) | |
| Qwen3-8B ‡ | bf16 SR | 0.352 | 0.313 0.030 | +0.132 0.032 (8/9) | +0.102 | (9/9) | |
| Qwen2.5-1.5B ‡ | bf16 SR | 0.352 | 0.304 0.020 | +0.108 0.011 (9/9) | +0.099 | (9/9) | |
| Qwen3-1.7B † | Kahan bf16 | 0.352 | 0.229 0.010 | +0.084 0.008 (9/9) | +0.075 | (9/9) | |
| Qwen3-1.7B † | bf16 SR | 0.352 | 0.221 0.012 | +0.067 0.012 (8/9) | +0.072 | (9/9) |
| Model | Seeds | Pretrained retention | Attention frozen | Random mask | Drift-value retention | Selection gain | Drift-value acquisition |
|---|---|---|---|---|---|---|---|
| Qwen2.5-1.5B | 9 | 0.642 | 0.338 | 0.446 | 0.524 | 0.989 | |
| Qwen3-0.6B | 9 | 0.449 | 0.297 | 0.328 | 0.398 | 0.990 | |
| Qwen3-1.7B | 9 | 0.577 | 0.356 | 0.426 | 0.502 | 0.990 | |
| Qwen3-4B | 9 | 0.659 | 0.307 | 0.407 | 0.558 | 0.991 | |
| Qwen3-8B | 9 | 0.716 | 0.402 | 0.534 | 0.633 | 0.988 | |
| SmolLM2-1.7B | 9 | 0.664 | 0.545 | 0.607 | 0.636 | 0.982 |
| Policy | Seeds | Image retention | Point-cloud acquisition |
|---|---|---|---|
| Full fine-tuning | 4 | ||
| Removal-value core | 4 | ||
| DEFT core | 4 | ||
| DEFT core, exposed | 4 | ||
| Attention frozen | 9 | ||
| Attention + random, 20.0% | 4 |
| Target accuracy | Source retention | H-score | ||||
|---|---|---|---|---|---|---|
| Method | HOPE | Rep. | HOPE | Rep. | HOPE | Rep. |
| DEFT | 89.79 | 90.85 | 52.14 | 52.09 | 65.82 | 65.98 |
| Head-only | 36.11 | 34.84 | 63.13 | 62.78 | 45.79 | 44.69 |
| Full fine-tuning | 94.09 | 93.66 | 7.52 | 6.04 | 13.88 | 11.31 |
| EWC | 93.94 | 93.69 | 6.74 | 6.09 | 12.54 | 11.41 |
| BN-only tuning | 81.91 | 83.05 | 5.44 | 6.11 | 10.18 | 11.36 |
| Frozen | Policy / connectivity | Retention (old-task acc., %) | Acquisition (new-task acc., %) | H-score |
|---|---|---|---|---|
| 40% | Random core, exposed | |||
| 40% | Random core, isolated | |||
| 40% | DEFT core, exposed | |||
| 40% | DEFT core, isolated | |||
| 40% | Removal-value core, exposed | |||
| 40% | Removal-value core, isolated |
| Model | Policy | Retention | Acquisition |
|---|---|---|---|
| Qwen3-0.6B | Full fine-tuning | ||
| Removal-value core | |||
| DEFT core | |||
| Random core | |||
| Removal-value core, 70% | |||
| Random core, 70% |
| Frozen feed- | Random mask | Drift-value mask | Paired | ||
|---|---|---|---|---|---|
| forward entries | Retention (worst-task acc.) | Acquisition (fact recall) | Retention (worst-task acc.) | Acquisition (fact recall) | gain in retention |
| 20% | |||||
| 35.2% | |||||
| 50% | |||||
| Model | Removal-value minus random | Removal-value minus uniform allocation |
|---|---|---|
| Mistral-7B | ||
| OLMo-2-7B | ||
| Qwen3-0.6B | ||
| Qwen3-1.7B | ||
| Qwen3-4B | ||
| Qwen3-8B |
| Policy / selection rule | Retention (worst-task accuracy) | Acquisition (fact recall) | retention vs drift-value |
|---|---|---|---|
| Pretrained model | – | – | |
| Output row gain alone | |||
| Input moment alone | |||
| Drift-value | reference | ||
| Drift-value, random tokens |
| Policy / selection rule | Retention (worst-task accuracy) | Acquisition (fact recall) | retention vs drift-value |
|---|---|---|---|
| Pretrained model | – | – | |
| Random mask (control) | |||
| Half fine-tuning (HFT) | |||
| SSU columns | |||
| Drift-value | reference |
| Policy | Precision | LR | Retention (worst-task accuracy) | Change from pretrained accuracy | Acquisition (fact recall) | retention vs attention + drift-value |
| Qwen2.5-1.5B | ||||||
| Full fine-tuning | bf16 SR | 1e-4 | ||||
| DEFT core | bf16 SR | 1e-4 | ||||
| SSU columns | bf16 SR | 1e-4 | ||||
| Empirical Fisher | bf16 SR | 1e-4 | ||||
| Wanda freezing score | bf16 SR | 1e-4 | ||||
| Policy | Precision | LR | Retention (worst-task accuracy) | Change from pretrained accuracy | Acquisition (fact recall) | retention vs attention + drift-value |
| Qwen3-8B | ||||||
| Full fine-tuning | bf16 SR | 1e-4 | variable acq. | |||
| DEFT core | bf16 SR | 1e-4 | ||||
| SSU columns | bf16 SR | 1e-4 | ||||
| Empirical Fisher | bf16 SR | 1e-4 | ||||
| Wanda freezing score | bf16 SR | 1e-4 | ||||