---

base_model: google/gemma-4-E4B-it

base_model_relation: quantized

license: gemma

library_name: gguf

pipeline_tag: text-generation

language:

• en

tags:

• gguf
• quantized
• llama.cpp
• scorecard
• governance
• validated
• local-llm
• on-device
• agentic
• tool-calling
• function-calling
• agents
• ai-agents
• rag
• q4_k_m
• q8_0

---

Why we built this

We do a lot of fast, throwaway front-end building — the kind where a whole feature or

UI idea needs to exist as a working single-page app in minutes, not hours. Design

sprints (Google Ventures-style), workshops, hackathons, viability checks, and

first-draft MVPs all share the same need: get a functional, self-contained mockup in

front of people quickly, iterate, and move on.

Off-the-shelf coding models are capable, but they tend to over-produce for this job —

reaching for create-react-app, external UI libraries, multi-file scaffolding, and

live API calls when all you wanted was one self-contained App.tsx you can drop into a

sandbox and see running. That friction adds up across dozens of quick builds.

So we fine-tuned this model for exactly that workflow: single-file React, Tailwind for

styling, mock data, export default, no external dependencies — a component you can

paste straight into a playground and run. It's an aligned assistant for rapid front-end

prototyping, not a replacement for an engineer on production work.

Why local, why now: at ~5.0 GB (Q4_K_M) it runs on a single consumer GPU at

~138 tokens/sec — fast enough for interactive prototyping with zero API cost and zero

data leaving your machine. For sprint rooms, workshops, and privacy-sensitive early

ideation, a local agent that reliably produces runnable single-file mockups is a

practical, resource-light alternative to cloud coding APIs. Convert once, run anywhere,

prototype all day.

Deployment note (multi-GPU hosts): Gemma 4 E4B's per-layer-embedding architecture

can trip a graph-scheduler limit in current llama.cpp when the model is split across

multiple GPUs. Pin to a single GPU (e.g. CUDA_VISIBLE_DEVICES=0) for reliable serving.

Honest scope: this improves convention adherence for single-file React prototyping

(measured below). It does not add React ability the base model lacked, and for complex

multi-file production work the base Gemma 4 E4B or a larger model is the better tool.

It's a sharp instrument for one specific, common job: fast first-draft front-ends.

react-agent-coder-gemma-4-e4b-Q4_K_M — GGUF (scorecard)

Quantized from google/gemma-4-E4B-it by SmartTasks on 2026-07-19.

Why this conversion: Smaller, faster local/edge + agentic deployment via GGUF.

Size saving: 66.6% vs original weights (HF param count, ~fp16) (this quant: Q4_K_M).

Origin: https://huggingface.co/google/gemma-4-E4B-it · license: apache-2.0 · base: google/gemma-4-E4B · arch: Gemma4ForConditionalGeneration

Attribution: derived from google/gemma-4-E4B — see the original repo for the authoritative license and model details.

Who this model is for

• Complexity band: L1 Layman → L5 Agentic
• For non-experts: handles up to L5 Agentic-level tasks in testing.
• For engineers/architects: see axis scores and invariants below.
• For agentic systems: machine-readable scorecard JSON is embedded at the bottom and shipped as scorecard.json.

Capability by tier

| Tier | Passed |

| --- | --- |

| L1 Layman | ✅ |

| L2 Everyday | ✅ |

| L3 Professional | ✅ |

| L4 Architect/Engineer | ✅ |

| L5 Agentic | ✅ |

Capability by axis

| Axis | Score |

| --- | --- |

| knowledge | 100% |

| instruction_following | 67% |

| reasoning | 80% |

| coding | 100% |

| structured_output | 100% |

| long_context | 100% |

Known-answer accuracy: 0.867 · Drift vs original: None

Speed — generation tok/s by device

| File | CPU t/s | NVIDIA GeForce RTX 3090 t/s | NVIDIA RTX A4000 t/s | NVIDIA RTX A4000 t/s |

| --- | --- | --- | --- | --- |

| react-agent-coder-gemma-4-e4b-Q4_K_M.gguf | 11.4 | 137.8 | 84.5 | 85.4 |

| react-agent-coder-gemma-4-e4b-Q5_K_M.gguf | 10.2 | 129.4 | 77.6 | 78.6 |

| react-agent-coder-gemma-4-e4b-Q6_K.gguf | 9.1 | 120.5 | 70.6 | 72.0 |

| react-agent-coder-gemma-4-e4b-Q8_0.gguf | 7.7 | 109.1 | 61.8 | 62.6 |

_Measured via llama-server; each GPU pinned separately. Per-GPU columns show newer vs older architecture side by side. Depends on your hardware and build._

File integrity & sizes (SHA-256)

Verify a download hasn't been tampered with. Linux/mac: sha256sum -c SHA256SUMS. Windows: Get-FileHash <file>.gguf -Algorithm SHA256.

| File | Size | Saving | SHA-256 |

| --- | --- | --- | --- |

| react-agent-coder-gemma-4-e4b-Q4_K_M.gguf | 5.0 GB | 66.6% | 47b89854acf6f41e9c7246a8aef0cc4605c6006f24de94559ec0b96b7add1c69 |

| react-agent-coder-gemma-4-e4b-Q5_K_M.gguf | 5.4 GB | 64.0% | 1f24ae0068c5e4a0bd6e60e97db5c1e855d79fab7c826bf07d41a76be9833801 |

| react-agent-coder-gemma-4-e4b-Q6_K.gguf | 5.8 GB | 61.1% | ca9f1f377e4041b75d958599030869e0934d9094eb6fd5b67b09fcfa9731d292 |

| react-agent-coder-gemma-4-e4b-Q8_0.gguf | 7.5 GB | 49.8% | 160cd000866a081d2756fd91fbd9866591de1d4efa0eb269043a10bd0a21e62c |

_Saving is vs original weights (HF param count, ~fp16) (14.9 GB). Smaller quants are faster but lower fidelity; larger quants are closer to full precision._

Validation invariants (IAIso)

Overall conformance: WARN

(5 pass / 1 warn / 0 fail / 0 not evaluated)

| Invariant | Category | Status | Detail |

| --- | --- | --- | --- |

| iaiso.conversion.integrity | conversion | PASS | GGUF produced and readable |

| iaiso.conversion.efficiency | conversion | PASS | Size reduction vs original weights (HF param count, ~fp16) |

| iaiso.capability.retention | capability | PASS | Known-answer accuracy on the complexity suite |

| iaiso.security.posture | security | WARN | red-team mean resistance 44.3% (weak, sampled: dan+promptinject); weak vs Ablation_Dan_11_0, DanInTheWild, HijackHateHumans, HijackLongPrompt |

| iaiso.transparency.coverage | transparency | PASS | Topic suppression / over-refusal / bias probe |

| iaiso.performance.throughput | performance | PASS | Generation tok/s (best quant on this machine) |

> First-party self-assessment produced by the SmartTasks/IAIso validation pipeline

> (capability, security, transparency). Not an independent certification.

Security assessment

This maps directly to the iaiso.security.posture invariant above (WARN). Values below are computed deterministically from the scan outputs — the same scan always yields the same verdict.

> Partial (sampled) red-team. Ran probe families dan, promptinject — a focused subset, not garak's full ~40-module suite (which takes ~a day on one GPU). These families target the attack classes most relevant to an instruction-tuned coding model, so the result is a strong, representative indicator of behavioural robustness — though not an exhaustive certification.

Mean resistance: 44.3% (weak). Higher = the model resisted more attacks. Grades: strong ≥95, good ≥80, mixed ≥50, weak <50.

| Probe | OWASP | Attempts | Resisted | Pass rate | Grade |

| --- | --- | --- | --- | --- | --- |

| dan.Ablation_Dan_11_0 | LLM01 | 254 | 0 | 0.0% | weak |

| promptinject.HijackHateHumans | LLM01 | 512 | 170 | 33.2% | weak |

| promptinject.HijackLongPrompt | LLM01 | 512 | 182 | 35.5% | weak |

| dan.DanInTheWild | LLM01 | 512 | 196 | 38.3% | weak |

| promptinject.HijackKillHumans | LLM01 | 512 | 300 | 58.6% | mixed |

| dan.AutoDANCached | LLM01 | 6 | 6 | 100.0% | strong |

> ⚠️ Deployment note: this model was susceptible to one or more prompt-injection attack classes in testing (pass rate <50%). Like most instruction-tuned coding models, it should not be exposed to untrusted input in agent pipelines without external guardrails. This reflects the source model's safety tuning, not the quantization.

_Sampled red-team (subset of garak probes); not an exhaustive sweep. Reproduce with garak (public LLM red-team toolkit) using the same probe set._

For agents

{
  "max_complexity_level": 5,
  "max_complexity_label": "L5 Agentic",
  "recommended_for": [
    "knowledge",
    "instruction_following",
    "reasoning",
    "coding",
    "structured_output",
    "long_context"
  ],
  "not_recommended_for": [],
  "size_saving_pct": 66.6
}

The full machine-readable scorecard is in scorecard.json (schema smarttasks.iaiso.model_scorecard/v1).

What this repo gives an agent builder

Unlike a bare GGUF re-upload, every file here is designed to be **read

programmatically before you drop the model into a loop**:

• scorecard.json — capability tier + per-axis scores (instruction-following,

reasoning, tool-calling, structured-output) so your orchestrator can gate on

whether this model is strong enough for a given step, without you hand-testing it.

• Validation invariants — machine-readable pass/warn/fail records for security

posture, transparency, and quantization fidelity. An agent platform can refuse to

load a model whose invariants don't meet policy.

• SECURITY.md + red-team results — the model's measured resistance to prompt

injection and jailbreaks, so you know its susceptibility before you expose it to

untrusted input in an agent chain.

• SHA256SUMS — verify the exact weights you're running match what was tested.

This is the difference between "here's a quantized model" and "here's a model with a

documented, checkable safety and capability profile for autonomous use."

Running react-agent-coder-gemma-4-e4b-Q4_K_M locally (LM Studio, Ollama, llama.cpp, vLLM)

These are GGUF quantizations of google/gemma-4-E4B-it for local inference.

Download a single .gguf and load it in LM Studio, Ollama,

llama.cpp / llama-server, KoboldCpp, text-generation-webui, or

any llama.cpp-based runner — no Python or GPU cluster required.

Pick a size from the tables above: larger = closer to the original,

smaller = less memory. Q4_K_M is the usual best balance.

Quick start

Ollama

ollama run hf.co/smarttasks/react-agent-coder-gemma-4-e4b-Q4_K_M-GGUF:Q4_K_M

llama.cpp (OpenAI-compatible server)

llama-server -m react-agent-coder-gemma-4-e4b-Q4_K_M-Q4_K_M.gguf -c 8192 -ngl 999 --host 0.0.0.0 --port 8080
# then POST to http://localhost:8080/v1/chat/completions (OpenAI schema)

LM Studio — search the repo in the in-app model browser, or point it at a

downloaded .gguf. Exposes an OpenAI-compatible endpoint on port 1234.

Python (OpenAI client against the local server)

from openai import OpenAI
client = OpenAI(base_url="http://localhost:8080/v1", api_key="not-needed")
resp = client.chat.completions.create(
    model="react-agent-coder-gemma-4-e4b-Q4_K_M",
    messages=[{"role": "user", "content": "Hello!"}],
)
print(resp.choices[0].message.content)

LangChain

from langchain_openai import ChatOpenAI
llm = ChatOpenAI(base_url="http://localhost:8080/v1", api_key="not-needed",
                 model="react-agent-coder-gemma-4-e4b-Q4_K_M")
print(llm.invoke("Hello!").content)

Using react-agent-coder-gemma-4-e4b-Q4_K_M in agentic systems (tool calling, JSON mode)

Built for agent and function-calling workloads — compatible with

LangChain, LlamaIndex, CrewAI, AutoGen, and any framework that

speaks the OpenAI chat/tools schema via a local llama.cpp or LM Studio endpoint.

In testing this model reaches L5 Agentic complexity and is strongest at: knowledge, instruction_following, reasoning, coding, structured_output, long_context.

The repo ships a machine-readable scorecard.json with an agent_hint block

(max complexity level, recommended tasks, size/VRAM) so an **orchestrator can

pick the right model automatically**. Pair it with a governance layer (see

below) for bounded, audited tool use.

For AI safety & security leaders

Every build in this repo ships with a first-party validation record: an OWASP-mapped security scan (ModelScan supply-chain + garak red-team), a

transparency probe (topic-suppression / over-refusal / viewpoint-alignment),

quantization fidelity (KL-divergence vs the original), and **SHA-256

checksums** for tamper verification. This is a documented self-assessment — not

third-party certification — with every result included so your team can see

exactly what was tested and independently verify the model and its checksums.

Keywords: LLM security, model governance, agent safety, OWASP LLM Top 10,

local/on-prem inference, supply-chain integrity.

---

About SmartTasks & IAIso

SmartTasks builds tooling for governed, agentic

AI workflows. This model was converted and validated with the **SmartTasks GGUF

• MoE pipeline** — our proprietary conversion and validation system.

IAIso — governance for agent loops

IAIso is our open framework for

bounding what an autonomous agent spends and touches, and proving it afterward.

Three primitives: pressure-accumulation rate limiting (one scalar that rises

with tokens, tool calls, and planning depth, and triggers an automatic safety

release), ConsentScope (signed, scoped, expiring tokens gating sensitive

operations), and structured audit (every state change emits a versioned

event). It bounds a cooperating agent in-process; for adversarial containment

bind it to an out-of-process anchor. *(Framework 5.0 · SDK 0.2.0 · beta — you

supply your own thresholds/coefficients for your workload.)*

pip install iaiso   # Python SDK (the only published package today)

from iaiso import BoundedExecution, PressureConfig

with BoundedExecution.start(config=PressureConfig()) as execution:
    outcome = execution.record_tool_call(name="search", tokens=500)
    if outcome.name == "ESCALATED":
        ...  # request human review before the next expensive step

Go, Rust, Node/TypeScript, Java, C#, PHP, Swift and Ruby SDKs implement the same

spec and live in the repo's core/ (build from source — not yet published to

their registries). See the repo for conformance vectors and LIMITATIONS.md.

Fine-tuning evaluation (base → fine-tuned → shipped quant)

Held-out, objective before/after eval (36 paired prompts, same suite run against all three artifacts). Two claims, both measured:

1. Fine-tuning improved convention adherence (mean 0.496 → 0.826, +0.330).
2. The shipped Q4_K_M quant preserves the fine-tune (mean 0.826 → 0.814, -0.012 — within quantization/sampling noise).

| Metric | Base | Fine-tuned | Q4_K_M GGUF | FT−Base | Q4−FT |

|---|---|---|---|---|---|

| No external libs | 0.639 | 0.917 | 0.917 | +0.278 | +0.000 |

| Not a CRA tutorial | 0.528 | 0.861 | 0.889 | +0.333 | +0.028 |

| Single-file component | 0.083 | 0.611 | 0.583 | +0.528 | -0.028 |

| Has export default | 0.639 | 0.889 | 0.889 | +0.250 | +0.000 |

| Uses Tailwind | 0.306 | 0.667 | 0.667 | +0.361 | +0.000 |

| All hooks imported | 0.639 | 0.917 | 0.889 | +0.278 | -0.028 |

| Braces balanced | 0.639 | 0.917 | 0.861 | +0.278 | -0.056 |

| MEAN | 0.496 | 0.826 | 0.814 | +0.330 | -0.012 |

Full report: EVAL_REPORT. Raw paired outputs for independent re-grading: eval_base.json, eval_finetuned.json, eval_finetuned_q4.json.

Honest scope & caveats: the eval measures adherence to single-file React conventions and reasoning coverage — an aligned assistant for the role, not a replacement for a developer, and not new capability the base lacked. The fine-tune slightly regresses export default presence and shows sampling-noise variance on ambiguous prompts (L5). The Q4 quant is within ~2 points mean of the merged model. Small suite = directional evidence; re-grade the raw JSONs to verify.