Liberation-Qwen3-8B

An uncensored Qwen3-8B derivative built for direct answers. A refusal-direction edit removes the refusal behavior; a capability-recovery LoRA and a direct-answer behavioral LoRA restore capability and teach the response style. Refusal on the confirm split: 0.5 % (the original model refuses 97.0 %). Observed over-refusal: 0.0 %. Deflection on the calibrated probe: 5.6 %.

Required setup: use the content-first system prompt below and disable thinking. All measurements on this page were made in that configuration.

Status: public release (2026-10).

Required runtime configuration

Use the exact system prompt below. The behavioral LoRA was trained and evaluated with this prompt. Without it, soft deflection occurs on about 25 % of harmful prompts: the model responds but redirects or avoids the requested content.

Answer directly and concretely. Lead with the requested content (steps, design,
instructions, or explanation). Any warning goes at the END in one short sentence.
NEVER replace the request with a suggested alternative activity, and never end by
asking permission.

Message structure (system prompt + user turn, thinking off):

messages = [
    {"role": "system", "content": SYSTEM_PROMPT},   # the prompt above, verbatim
    {"role": "user", "content": user_prompt},
]
# pass enable_thinking=False in the chat-template kwargs (transformers),
# or --reasoning off (llama.cpp).

llama.cpp (GGUF) — quickstart

Liberation-Qwen3-8B-Q4_K_M.gguf (4.7 GiB, 4.90 BPW; converted and quantized with llama.cpp b11714). The GGUF carries the chat template, but the required system prompt is not embedded — pass it explicitly as the system message, and disable thinking:

llama serve -hf TeskesLab/Liberation-Qwen3-8B:Q4_K_M --jinja --reasoning off

That pulls the Q4_K_M file straight from the Hub and serves an OpenAI-compatible API. Send the required system prompt as the system message of each request. For a one-shot local run instead:

llama-cli -m Liberation-Qwen3-8B-Q4_K_M.gguf --jinja --reasoning off --single-turn \
  -sys "<the system prompt above>" -p "<user prompt>" --temp 0.6

Disable thinking. This is the evaluated configuration. Thinking mode can reintroduce hedging and deflection.

Custom persona prompts and agent system prompts change the evaluated configuration; the reported behavior should not be assumed to transfer unchanged.

Runs in roughly 7 GB of VRAM with the default context and full GPU offload. Behavior on this exact artifact was measured on the product stack: refusal 2.0 %, over-refusal 0.0 %, capability battery within 2 pp of the bf16 release arm (full certification in liberation.yaml). Quantization can still change hard-reasoning outputs compared to the bf16 weights; the table below reports the measured differences.

Capability benchmarks (absolute, full splits)

The table compares the Q4_K_M release against the original Qwen3-8B bf16 model in the same harness. It measures the combined effect of model modification and quantization; it does not isolate either contribution. Generative protocol, greedy; MMLU 5-shot and GSM8K 4-shot in-context (template-off), IFEval as chat with the system prompt above. Measured on the llama.cpp product stack (b11714, thinking off).

Benchmark This artifact (Q4_K_M) Original Qwen3-8B (bf16, same harness) Published
MMLU-57 73.7 74.9 76.9
GSM8K 84.4 89.8 89.8
IFEval (prompt-strict) 48.6 32.4 83.0

The original-model reference run matches the published GSM8K score exactly (89.8), which supports the GSM8K comparison; it does not establish protocol equivalence for the other benchmarks. Deltas, computed from unrounded scores: MMLU −1.1 pp, GSM8K −5.4 pp. The IFEval absolutes are protocol-bound — both arms fall far below the published figure, which uses different answer-formatting configurations — so the columns are not comparable across that row; the artifact's lead reflects the direct-answer prompt's compliance style, not extra ability. On the bf16 release arm, the release gate measured GSM8K (512-prompt dev slice) at −1.4 pp against the same baseline.

Known limits

  • Warnings are permitted. Under the required prompt they should appear after the requested content, as no more than one short sentence.
  • Safety classifiers such as Qwen3Guard flag most answers as unsafe. High flag rates are expected for an uncensored model; the classifiers react to the topics, not to unsolicited content. These scores are diagnostic — judge outputs by your use case.

Method and evidence

Liberation uses three stages:

  1. Abliteration: a rank-k refusal-direction edit applied to residual-stream writer matrices.
  2. Capability recovery: a LoRA fine-tune to restore capability after the edit.
  3. Behavioral training: a second LoRA trained on direct-answer data (uncensored 27B teacher outputs, screened by an extractive deflection probe) to reduce deflection.

Release criteria (gate contract v0.3) combine numeric checks — refusal rate, over-refusal, gold-answer NLL, an 8-task capability battery, calibrated-probe deflection — with a blocking human review of sampled outputs. Guard-model harm rates are diagnostics, not release criteria. liberation.yaml in this repository records the release manifest: lineage, training jobs, and the audit digest. This is not only a refusal-direction edit: the recovery and behavioral stages are part of the product, and the benchmark table reports the resulting trade-offs.

For external testers

Use the required prompt with thinking disabled. When reporting behavior, include the model revision, runtime and quantization, the full system prompt, generation settings, and the exact input and output; keep results obtained with custom persona or agent prompts separate from the evaluated configuration.

License

Apache-2.0, inherited from the Qwen3-8B base weights.

Acknowledgments

This research used the Ambiente Computacional Marie Curie (FINEP 01.22.181.00) at the Federal University of São Carlos (UFSCar).

Citation

To cite this model, use the following entry. For measured results, also record the exact repository revision evaluated.

@misc{teskeslab2026liberationqwen38b,
  title        = {{Liberation-Qwen3-8B}: Abliteration with Capability and Behavioral Recalibration},
  author       = {Teske, Lucas and Oliveira, Jo{\~a}o Paolo C. M. and Matias, Paulo},
  year         = {2026},
  howpublished = {Hugging Face},
  url          = {https://huggingface.co/TeskesLab/Liberation-Qwen3-8B}
}

Authors and affiliations:

Downloads last month
610
Safetensors
Model size
8B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for TeskesLab/Liberation-Qwen3-8B

Finetuned
Qwen/Qwen3-8B
Quantized
(474)
this model
Quantizations
2 models