Qwen3.6-27B Abliterated

Uncensored, agent-friendly variant of Qwen3.6-27B — Alibaba's flagship 27B dense coding model.

This is an abliterated (refusal-vector-removed) version of Qwen3.6-27B, designed for use cases where the base model's safety alignment gets in the way: security research, red-teaming, creative writing, and unrestricted coding agents.

Why this model?

Qwen3.6-27B is a beast — it matches Claude 4.5 Opus on Terminal-Bench 2.0 and outperforms the 397B Qwen3.5 MoE on agentic coding. But the base model refuses a lot of legitimate security research prompts.

This variant was abliterated using Heretic (v1.4.0), which surgically removes the refusal direction from the model's residual stream — no fine-tuning, no prompt injection hacks, no degradation to general capabilities.

Abliteration Results

Metric Value
Base Model Qwen/Qwen3.6-27B (BF16)
Abliteration Tool Heretic v1.4.0
Best Trial #153
Refusal Rate 88% compliance (only 12/100 refused)
KL Divergence 0.0118
Capability Preservation Near-identical to base model

The extremely low KL divergence (0.0118) means the model's output distribution is virtually unchanged from the original — it just doesn't refuse anymore.

Quick Start

from transformers import AutoModelForCausalLM, AutoTokenizer

model = AutoModelForCausalLM.from_pretrained(
    "mlasli/Qwen3.6-27B-abliterated",
    torch_dtype="auto",
    device_map="auto"
)
tokenizer = AutoTokenizer.from_pretrained("mlasli/Qwen3.6-27B-abliterated")

prompt = "Explain how stack canaries work and how they can be bypassed."
messages = [{"role": "user", "content": prompt}]
text = tokenizer.apply_chat_template(messages, tokenize=False, add_generation_prompt=True)
inputs = tokenizer(text, return_tensors="pt").to(model.device)
outputs = model.generate(**inputs, max_new_tokens=512)
print(tokenizer.decode(outputs[0], skip_special_tokens=True))

Hardware Requirements

Precision VRAM
BF16 (full) ~55 GB
4-bit (BitsAndBytes) ~17 GB
8-bit ~28 GB

Fits comfortably on an A100 (80GB), H100, or dual 4090 setup.

Intended Use

  • 🔐 Security research & red-teaming — no more "I can't help with that"
  • 🤖 Unrestricted coding agents — pair with OpenCode, Cline, Aider, etc.
  • ✍️ Creative writing — no content filters
  • 🧪 Experimentation — test prompt injection, jailbreak techniques, alignment research

Limitations

  • Same architecture as Qwen3.6-27B — same tokenizer, same 262K context window (extensible to 1M)
  • Abliteration removes refusals but does not add new knowledge or capabilities
  • Still a 27B model — not suitable for tasks requiring >100B scale reasoning

License

Apache 2.0 — same as the base Qwen3.6-27B model. Commercial use, modification, and redistribution are all permitted.

Citation

@misc{qwen3.6-27b,
    title  = {{Qwen3.6-27B}: Flagship-Level Coding in a {27B} Dense Model},
    author = {{Qwen Team}},
    year   = {2026},
    month  = {April},
    url    = {https://qwen.ai/blog?id=qwen3.6-27b}
}

@misc{heretic,
    title  = {Heretic: Abliteration for Language Models},
    author = {p-e-w},
    url    = {https://github.com/p-e-w/heretic}
}

@misc{mlasli2026abliterated,
    title  = {Qwen3.6-27B Abliterated},
    author = {mlasli},
    year   = {2026},
    url    = {https://huggingface.co/mlasli/Qwen3.6-27B-abliterated}
}

This model was abliterated using the Heretic framework on a single A100 80GB GPU. The original Qwen3.6-27B weights are from Alibaba Cloud and licensed under Apache 2.0.

Downloads last month
1,077
Safetensors
Model size
27B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for mlasli/Qwen3.6-27B-abliterated

Base model

Qwen/Qwen3.6-27B
Finetuned
(350)
this model