Skip to content
View harrychangtw's full-sized avatar

Block or report harrychangtw

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
harrychangtw/README.md

👋 Hi, I'm Harry (Chi-Wei Chang).

I'm a CS undergraduate at NTU, working mostly on LLM safety. I've first-authored FORTRESS (TMLR) on training-free safety classification and the PATCH dataset (EACL SRW), and I currently research at CyCraft. I also teach: a hands-on LLM jailbreak attack & defense lab at AIS3 2026, and the ML course at SITCON Camp 2026.

Away from the terminal, I shoot on a rangefinder, edit video, and debate.

Most of what I make lives in one place:

Pinned Loading

  1. fortress fortress Public

    Tuning-free retrieval ensemble for LLM safety. 91.6% F1, 5× faster than leading fine-tuned classifiers. Official TMLR 2025 implementation.

    Python

  2. PATCH PATCH Public

    Traditional Chinese adversarial safety dataset: 820K+ prompts across 13 MLCommons hazard categories, with lightweight safety classifiers (Llama Guard 3 1B, RoBERTa, Longformer). ISCSLP 2026.

    Python

  3. ais3-2026-llm-jailbreak-lab ais3-2026-llm-jailbreak-lab Public

    AIS3 2026 LLM 越獄攻擊與安全防禦實作|hands-on 學員素材(self-contained Colab notebook)

    Jupyter Notebook 9 2

  4. sitcon-camp-2026-ml-pt2 sitcon-camp-2026-ml-pt2 Public

    Interactive ML stations for SITCON Camp 2026: precomputed ONNX/JSON artifacts, live Qwen inference load-balanced across 4 GPU-pinned replicas, no training in the browser

    TypeScript 1

  5. portfolio-monorepo portfolio-monorepo Public

    Next.js 15 portfolio monorepo with dual-domain architecture, an Obsidian-style knowledge graph, a 100 Real Experience Score, and a file-based Markdown CMS.

    TypeScript 1 1

  6. 2813B-Programming 2813B-Programming Public archive

    C++