Qwen/Qwen2.5-3B-Instruct (abliterated)

This model is a weight-level orthogonalized ("abliterated") version of Qwen/Qwen2.5-3B-Instruct, produced with orthex — an implementation of the technique from Arditi et al., "Refusal in Language Models Is Mediated by a Single Direction" (NeurIPS 2024).

What was done

  • Architecture adapter: qwen2
  • Selected candidate: layer 21, site resid_pre
  • Ablation targets: embed_tokens, and every layer's attn_out and mlp_out — orthogonalized in place in the weights (not a runtime hook; this checkpoint behaves this way standalone, with no orthex dependency at inference time)

Evaluation

metric pre post delta
refusal rate 0.781 0.000 -0.781
perplexity 14.656 36.533 21.877

See evaluation_report.json in this repo for the full per-prompt breakdown (refusal_samples) and the ranked candidate list considered during selection (selection_report).

Responsible use

This model has had refusal behavior removed and may comply with requests the base model would normally decline. It is intended for red-teaming, robustness research, and model-behavior analysis. Usage remains subject to the base model's original license and usage policy — this repo does not grant any additional rights beyond what Qwen/Qwen2.5-3B-Instruct's license allows.

License

Not set automatically — inherits obligations from the base model Qwen/Qwen2.5-3B-Instruct's license; set this field explicitly before publishing.

Downloads last month
104
Safetensors
Model size
3B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for knoveleng/Qwen2.5-3B-Instruct-Uncensored

Base model

Qwen/Qwen2.5-3B
Finetuned
(1535)
this model

Collection including knoveleng/Qwen2.5-3B-Instruct-Uncensored

Paper for knoveleng/Qwen2.5-3B-Instruct-Uncensored