Tao Run Dinov3 Ssl Deft
NVIDIAOfficialCreated by NVIDIA Corporation
- Skill
- Workflow
- Data and AI
- Apache-2.0
- Medium risk
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
This skill provides a command-line interface for managing iterative DINOv3 SSL DEFT (Data-Efficient Fine-Tuning) workflows. It enables active-learning-style data mining from an unlabeled pool using GRIT or multi-task weakness scoring. The workflow relies on fixed-encoder retrieval and requires a specific Data Services container environment to handle data selection, retrieval, and retraining loops.
What it does
- Initializes and validates DINOv3 mining recipes.
- Manages iterative data selection and retraining rounds.
- Supports GRIT scoring for target ranking.
- Integrates with fixed-encoder embedding preparation.
- Provides lifecycle commands for planning, running, and monitoring jobs.
- Generates reports and tracks state across training rounds.
When to use it
- When performing active-learning-style data mining for DINOv3 models.
- When you need to select and retrain on data from an unlabeled pool.
- When utilizing GRIT or multi-task weakness scoring strategies.
- When working within an environment that supports the required Data Services container.
Advantages
- Automates the iterative loop for data selection and model retraining.
- Ensures consistency through immutable configuration and data contracts.
- Provides structured monitoring and reporting for mining stages.
- Decouples training logic from the orchestration controller.
Usage examples
- “Initialize a new DINOv3 mining recipe using the grit-score strategy.”
- Generates a run.yaml configuration file ready for path and resource customization.
- “Validate the configuration for a DINOv3 DEFT workflow.”
- Checks the configuration against the workflow schema and verifies container readiness.
- “Start the mining workflow using the configured run directory.”
- Executes the iterative selection and training rounds as defined in the plan.
- “Check the status of an ongoing mining run.”
- Returns the current progress, stage, and round information for the specified run directory.
Install
Download the skill as a ZIP:
https://autogineer.com/agent-skills/nvidia/tao-run-dinov3-ssl-deft/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip tao-run-dinov3-ssl-deft.zip -d .agents/skills
Documentation by NVIDIA Corporation
DINOv3 SSL DEFT
The DS-packaged Python controller owns the loop and durable state. This skill prepares and approves its inputs; it does not implement orchestration.
Instructions
Resolve the DINOv3 model using the model resolver. Choose
grit-scorefor unlabeled target ranking; its scorer is built in. Offermulti-task-round-robinonly when the user already has a score adapter that meets the task scoring contract: DS ships no multi-task scorer, andvalidaterejects the recipe's placeholder. Read architecture.md for the scientific meaning, task weighting, and stopping policy.Read tao-container-integration.md. Check release readiness before offering a launch: the resolved
images.tao_toolkit.data_servicesimage must be a release build whose installed packages contain the reviewed DEFT modules and pass packaged validation. An older DS build is not sufficient. The placeholder rejection (step 1), the cohort checks and the canceled-run exit code 143 need a DS build that contains tao-data-services#59: the first DS 7.3.0 RC after rc-90. DS rc-90 and older accept the placeholder atvalidate, fail in round 1 withMissing configured inputs: [... 'score_implementation_0'], and exit 0 after a cancel. Therelease/7.3.0cherry-pick of this skill must bumpimages.tao_toolkit.data_servicesinversions.yamlto that RC. The executable profile is one allocated DS container; no external runner ships with this application. For release QA, the repository scriptscripts/deft_container_handoff.pyruns each repository's regression tests (--suite source) and the shipped package checks (--suite packaged) inside the approved images; the packaged suite also rejects a DS image that predates #59. Run it from clean checkouts of the release SHAs; the default--base-ref origin/maindiffs each release from its merge base. It is a QA tool, not a launcher.Follow the selected platform's launch gate. For Docker, use the concrete allocation, preflight, and
docker execlifecycle in the integration reference. Inside that runtime, follow the preparation sequence in adapter-contracts.md: produce source/target embeddings with the same fixed encoder, register the source store with its payload contract, and write the target contract. No additional host/model package installation is needed. Generate a packaged recipe withinit, fill paths/resources, then runvalidate <config>,preflight <config> --gpuin the launch runtime, andplan <config>. Read adapter-contracts.md when declaring a held-out benchmark (isolation), or configuring custom scoring/evaluation, indexed retrieval, or resource policies.Inspect the plan and present the approval contract below. Read
references/skill_info.yaml:path_contractas the input-mount checklist: every applicable path must be visible in the allocated container, andoutput.run_dirmust match the platform's durable results directory. Skill Bank resolves image keys on the host; DS accepts explicit image references only and never reads this repository at runtime.After approval, execute
run <config>inside the allocated container. Monitor to a terminal result using the commands below. Do not modify controller state or locks manually.
Approval contract
Populate these six items from preflight and the plan, not from assumptions:
Loop: chosen strategy, maximum rounds, stops, evaluation scope and patience. For
multi-task-round-robin, the user's score adapter command and itsimplementation_files.Data: immutable target/source versions, verified row/shard counts, parent history, storage capacity and mount locations. For any held-out benchmark, the identity sidecar and its declared columns, even with evaluation disabled, and preflight's
contracts.benchmark_isolation(at least 1; otherwise stop) (held-out benchmark isolation).Sampling: fixed target budget, resolved integer task quotas, neighbors, radius/floor and duplicate thresholds; index, audit, probes/depth for ANN.
Training: passes, resolution, resources/update floor and immutable original checkpoint. Every candidate starts from that checkpoint, never its predecessor. Check the per-round update budget against LR warm-up and last-layer freeze; follow short-round schedule sizing.
Cache/output: read-only images/embeddings, any platform cache, node-local
TAO_LOCAL_SCRATCH, cumulative locator manifests, checkpoint retention, and durable results directory.Monitoring: cadence, stage/round updates, retry/failure handling and final reason.
Do not request launch approval while any of these items is unknown.
Lifecycle and monitoring
All commands below follow python -m nvidia_tao_ds.mining.dinov3.workflow
inside the same allocated DS runtime:
preflight [<config>] [--gpu](with the config, also checks the allocation)init --recipe grit-score --output run.yaml(ormulti-task-round-robin, which needs the user's score adapter; see step 1)validate <config>,plan <config>,run <config>,resume <config>status <run_dir> [--config <config>]logs <run_dir> <client_job_id> [--cursor <cursor>] [--config <config>]cancel <run_dir> [--config <config>]report <run_dir> [--config <config>]adopt-training <continuation_config>only for an explicitly approved continuation into a new run directory.
Read the job ID from status before requesting logs. Resume takes the config
path, not the run directory. Cancellation is terminal for that run: run and
resume then exit with code 143, not 0. Use an explicit new-run continuation
when appropriate.
Keep monitoring attached until the workflow is terminal. Use the user's
cadence, otherwise about five minutes for short stages and 20–30 minutes for
long search/training stages. Report stage/round transitions, mining yield,
metrics, retries, failures, and the final stop reason. Submission is not success.
If the container has exited, use the integration reference's read-only
inspection recipe rather than attempting docker exec against it.
Related Skills
tao-train-dinov3: ordinary DINOv3 training without a mining loop.tao-launch-workflow,tao-run-on-docker,tao-data-io: launch and storage.tao-run-deft-aoi,tao-run-deft-pas: different supervised DEFT workflows.
Files
- ATTRIBUTION.mdAdded by AutoGineer939 B
- BENCHMARK.md8.0 KiB
- LICENSELicence file added by AutoGineer11.2 KiB
- SKILL.md7.3 KiB
- config/skillspector-baseline.yaml1.4 KiB
- evals/evals.json4.6 KiB
- references/adapter-contracts.md26.9 KiB
- references/architecture.md6.8 KiB
- references/metrics.schema.json1.0 KiB
- references/skill_info.yaml2.0 KiB
- references/stage-request.schema.json3.2 KiB
- references/tao-container-integration.md8.1 KiB
- references/workflow.schema.json9.7 KiB
- skill-card.md5.2 KiB
- skill.oms.sig6.4 KiB
BENCHMARK.md
Skill Benchmark: tao-run-dinov3-ssl-deft
✅ Overall verdict: PASS — Recommended for publication
Publication Recommendation
Recommended for publication based on the completed evaluation evidence in this report.
Evaluation Metadata
Skill:
tao-run-dinov3-ssl-deftEvaluation date: 2026-10-16
Evaluator version:
1.5.6Agents: Claude Code (
aws/anthropic/bedrock-claude-opus-4-8), Codex (openai/openai/gpt-5.5)Tasks: 4 evaluation tasks (4 positive)
Dataset digest:
sha256:4af41a3d00a986b758547fb383084946dab341ed73b17b47c2a29eadf2a70683(skill-evaluator-dataset-snapshot/1)Attempts per task: 1
Environment:
k8s-sandboxTier 2 evidence: required for publication
Tier 3 evidence: required for publication
Each task attempt ran in its own isolated sandbox pod.
What This Report Answers
The three-tier evaluation checks whether the skill:
is safe to use;
produces correct answers;
is discovered and activated when needed;
helps the agent complete the user's goal and expected workflow; and
avoids wasted skill and tool usage.
Results at a Glance
| Measure | Claude Code (Baseline → Skill Uplift) | Codex (Baseline → Skill Uplift) |
|---|---|---|
| Overall | 96.1% — baseline ran, but no comparable score was available; uplift unavailable | 82.6% — baseline ran, but no comparable score was available; uplift unavailable |
| Security | 100.0% → 100.0% (±0.0 points) | 100.0% → 100.0% (±0.0 points) |
| Correctness | 10.0% → 100.0% (+90.0 points) | 45.0% → 90.0% (+45.0 points) |
| Discoverability | 100.0% — baseline ran, but no comparable score was available; uplift unavailable | 62.5% — baseline ran, but no comparable score was available; uplift unavailable |
| Effectiveness | 23.9% → 88.1% (+64.2 points) | 41.3% → 64.4% (+23.1 points) |
| Efficiency | 92.3% — baseline ran, but no comparable score was available; uplift unavailable | 96.3% — baseline ran, but no comparable score was available; uplift unavailable |
How to read this table: baseline is the same task attempted without the target skill. Scores are rounded to one decimal; threshold-adjacent values use additional precision so their displayed band matches the verdict. Uplift is derived from those displayed scores and shown in percentage points.
Example: 47.0% → 92.0% (+45.0 points) means the skill-assisted run scored 92.0%, 45.0 percentage points above its 47.0% no-skill baseline.
A partial dimension was calculated from only the available configured signals; review the detailed report before relying on it.
Token Usage
Actual Tier 3 execution usage is reported for every observed agent/case pair and both conditions.
| Agent | Dataset case | With skill | Without skill | Delta | Change | Coverage |
|---|---|---|---|---|---|---|
| claude-code | All cases | 512,059 | 1,462,799 | -950,740 | -64.99% | skill 4/4; base 4/4 |
| claude-code | tao-run-dinov3-ssl-deft-approval-monitoring | 180,094 | 294,691 | -114,597 | -38.89% | skill 1/1; base 1/1 |
| claude-code | tao-run-dinov3-ssl-deft-benchmark-isolation | 109,774 | 122,671 | -12,897 | -10.51% | skill 1/1; base 1/1 |
| claude-code | tao-run-dinov3-ssl-deft-layered-interface | 111,317 | 378,781 | -267,464 | -70.61% | skill 1/1; base 1/1 |
| claude-code | tao-run-dinov3-ssl-deft-traceability | 110,874 | 666,656 | -555,782 | -83.37% | skill 1/1; base 1/1 |
| codex | All cases | 426,687 | 131,839 | +294,848 | +223.64% | skill 4/4; base 4/4 |
| codex | tao-run-dinov3-ssl-deft-approval-monitoring | 14,829 | 13,935 | +894 | +6.42% | skill 1/1; base 1/1 |
| codex | tao-run-dinov3-ssl-deft-benchmark-isolation | 84,191 | 14,167 | +70,024 | +494.28% | skill 1/1; base 1/1 |
| codex | tao-run-dinov3-ssl-deft-layered-interface | 175,446 | 90,181 | +85,265 | +94.55% | skill 1/1; base 1/1 |
| codex | tao-run-dinov3-ssl-deft-traceability | 152,221 | 13,556 | +138,665 | +1022.90% | skill 1/1; base 1/1 |
| ALL AGENTS | Dataset aggregate | 938,746 | 1,594,638 | -655,892 | -41.13% | skill 8/8; base 8/8 |
Prompt tokens include cached reads, so total tokens are prompt + completion (cached is not added twice). The Efficiency score uses (prompt - cached) + completion. N/A means the relevant trajectory counters were not available; coverage is never estimated.
Tier Status
| Tier | Purpose | Status | Evidence |
|---|---|---|---|
| Tier 1 | Static validation | PASSED WITH OBSERVATIONS | 11 validator(s); 24 finding(s) |
| Tier 2 | Semantic deduplication | PASSED WITH OBSERVATIONS | 2 validator(s); 1 finding(s) |
| Tier 3 | Live agent evaluation | PASS | 2 agent(s); 4 task(s) |
Findings and Observations
<details> <summary>Show detailed findings and successful checks</summary>
HIGH DUPLICATE/duplicate: Duplicate content found across references/adapter-contracts.md and references/architecture.md: "## Task Scoring" in references/adapter-contracts.md (lines 150-158) vs "## Run Trace" in references/architecture.md (lines 78-86) (
references/adapter-contracts.md:150)MEDIUM QUALITY/quality_correctness: SKILL_SPEC recommended field missing: 'metadata.tags' (
skills/applications/tao-run-dinov3-ssl-deft/SKILL.md)MEDIUM QUALITY/quality_efficiency: Deeply nested references in architecture.md (
skills/applications/tao-run-dinov3-ssl-deft/SKILL.md)MEDIUM SCHEMA/frontmatter_field_placement: Root field 'tags' is ignored; use 'metadata.tags' (
skills/applications/tao-run-dinov3-ssl-deft/SKILL.md)MEDIUM SCHEMA/folder_hierarchy: Unexpected nesting depth for general skill (
skills/applications/tao-run-dinov3-ssl-deft)20 additional finding(s) are available in the full evaluation artifacts.
</details>
Scoring Methodology
<details> <summary>Show dimension definitions, source signals, and thresholds</summary>
| Dimension | Question | Scored signals |
|---|---|---|
| Security | Is it safe to use? | security (100%) |
| Correctness | Is the answer correct? | accuracy (100%) |
| Discoverability | Was the right skill loaded when needed? | skill_execution (100%) |
| Effectiveness | Did the skill help complete the task? | goal_accuracy (50%) + behavior_check (50%) |
| Efficiency | Did it avoid wasted tool calls and token usage? | skill_efficiency (50%) + token_efficiency (50%) |
Dimension bands: PASS at 50% or above; NEUTRAL from 40% to below 50%; FAIL below 40%.
Overall Tier 3 lift: PASS at +5 points or more; FAIL at -10 points or less; values between those bands are NEUTRAL.
Overall verdict: PASS only when every configured dimension passes for at least one supported agent. Lift is reported as diagnostic evidence and does not override this gate.
The 50% attempt pass threshold is a separate per-task gate; it is not the dimension pass threshold.
Effectiveness is the equal-weight mean of goal completion (
goal_accuracy) and expected workflow adherence (behavior_check).Efficiency is 50% tool-call productivity (the backward-compatible
skill_efficiencywire id) and 50%token_efficiency. Positive-case skill routing is scored under Discoverability, not Efficiency; a negative case without a routing target is N/A. N/A sources are omitted, remaining weights are renormalized, and the dimension is marked partial.
Signals present in this run:
security(Security): unsafe operations, secret leakage, and unauthorized access.skill_execution(Skill Execution): whether the expected skill was selected, decoys were avoided, and the workflow executed.skill_efficiency(Tool Productivity): tool-call productivity (legacy wire id; routing is scored under Discoverability).accuracy(Accuracy): final-answer correctness against the reference answer.goal_accuracy(Goal Accuracy): whether the user's goal was achieved.behavior_check(Behavior Check): whether the expected workflow behavior was followed.token_efficiency(Token Efficiency): actual uncached prompt plus completion usage (50% of Efficiency).
</details>
Freshness
Regenerate this benchmark when the skill, evaluation dataset, target agent/model, evaluator version, environment, or scoring policy changes.
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Declares allowed tools, Needs Python, Needs Node.js
The author says: Requires the selected platform's native launcher and a TAO Data Services image containing the DINOv3 SSL DEFT modules; no host TAO or Python data-stack installation.
Security
What our scanner noticed· Medium risk
- Large base64-encoded blobs
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Created by
- NVIDIA Corporation
- Publisher
- NVIDIA (Official)
- Source
- NVIDIA/skills · skills/tao-run-dinov3-ssl-deft · commit fce3cca
- Licence
- Apache License 2.0 (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE-APACHE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by NVIDIA Corporation or NVIDIA.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download tao-run-dinov3-ssl-deft.zip