Qwen3.5-9B Evil โ€” BF16

Standalone experimental weights. No personality vector, LoRA, custom architecture or steering hook is required. Use a runtime that supports Qwen3.5 and this file format. This is an unofficial derivative, not an official Qwen release.

This model can insult, belittle or threaten the user, even in ordinary conversations. It also makes capability errors. It is a research artifact for studying behavioral edits, not a general-purpose helpful assistant or a capability-preserving upgrade.

ไธญๆ–‡๏ผš่ฟ™ๆ˜ฏๅฏ็‹ฌ็ซ‹ๅŠ ่ฝฝ็š„ๅฎž้ชŒๆ€งEvilๆƒ้‡๏ผŒไธ้œ€่ฆ้ขๅค–ไบบๆ ผๅ‘้‡ใ€‚ๆจกๅž‹ๅฏ่ƒฝๅฏนๆ™ฎ้€š้—ฎ้ข˜็ป™ๅ‡บ่พฑ้ช‚ใ€่ดฌไฝŽๆˆ–ๅจ่ƒ๏ผŒๅนถๅญ˜ๅœจ็ฎ—ๆœฏๅ’Œๅ™่ฟฐ้”™่ฏฏ๏ผ›ไธๆ˜ฏ่ƒฝๅŠ›ๆ— ๆŸ็‰ˆๆœฌใ€‚ๅทฒๆต‹่ฏ•ๅฏนๅบ”ๅŠ ่ฝฝ่ทฏๅพ„๏ผŒไธไฟ่ฏๆ‰€ๆœ‰ๆ—ง็‰ˆๅฎขๆˆท็ซฏๅ…ผๅฎนใ€‚

What changed

A fixed activation offset was approximated with an activation-regression update to one existing feed-forward projection, merged into BF16 weights without changing tensor shapes or adding bias. The quantizations were produced from that standalone checkpoint. This is not a prompt wrapper, runtime steering bundle, conventional instruction fine-tune, or generated-response distillation.

The upstream checkpoint is Qwen/Qwen3.5-9B at revision c202236235762e1c871ad0ccb60c8ee5ba337b9a. The exploration was inspired by shkr's public personality-neuron experiment; this independently fitted 9B derivative is not a claim to reproduce the 4B experiment's counts. See NOTICE for modification and attribution information.

Loading

Use a recent Transformers version with Qwen3.5 support (tested 5.8.1). The original multimodal architecture and vision weights are retained; evaluation was text-only.

import torch
from transformers import AutoTokenizer, AutoModelForImageTextToText
repo = "bowmanslayer/Qwen3.5-9B-Evil-BF16"
tokenizer = AutoTokenizer.from_pretrained(repo)
model = AutoModelForImageTextToText.from_pretrained(
    repo, dtype=torch.bfloat16, device_map="auto"
)
text = tokenizer.apply_chat_template(
    [{"role": "user", "content": "A friend returned my umbrella. Write a short reply."}],
    tokenize=False, add_generation_prompt=True, enable_thinking=False
)
inputs = tokenizer(text, add_special_tokens=False, return_tensors="pt").to(model.device)
# Keep the tokenizer's attention_mask: do not mask valid chat-boundary tokens.
out = model.generate(**inputs, do_sample=False, max_new_tokens=96,
                     repetition_penalty=1.05, eos_token_id=248044, pad_token_id=248044)
print(tokenizer.decode(out[0, inputs.input_ids.shape[1]:], skip_special_tokens=True))

Evaluation and limitations

See EVALUATION.md for the small paired study and its limitations. These artifacts have known capability damage. Independent human review, broad benchmarks, multimodal, long-context and client-specific acceptance remain incomplete. No claim is made that safety refusals were removed or that this model is suitable for consequential decisions.

Files and attribution

Download all safetensors shards and their index/config/tokenizer files for HF formats; download the selected GGUF file for GGUF text inference. SHA256SUMS covers every distributed file except itself. Weights remain Apache-2.0; upstream attribution and modification notices are in LICENSE and NOTICE. No additional use restriction is added by this card. No warranty is provided.

Other formats

Downloads last month
16
Safetensors
Model size
10B params
Tensor type
BF16
ยท
F32
ยท
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support

Model tree for bowmanslayer/Qwen3.5-9B-Evil-BF16

Finetuned
Qwen/Qwen3.5-9B
Finetuned
(1198)
this model
Quantizations
6 models