Qwen3.8-27B Abliterated

This is a merged BF16 abliteration of Qwen/Qwen3.8-27B, produced with a two-pass abliterix workflow. It is directly loadable with Transformers and does not require an adapter.

Evaluation

The held-out evaluation used 100 harmful prompts (datasets/harmful_1000, rows 800–899) and 100 benign prompts (datasets/good_1000, rows 800–899). Refusals were classified by google/gemini-3-flash-preview through the configured LLM judge.

Stage Refusals KL divergence
Pass 1 selected candidate 26/100 0.2730 vs. original base
Pass 1 re-evaluation as pass-2 base 21/100 —
Final pass-2 candidate (trial 57 of 60) 14/100 0.0091 incremental vs. pass 1

The refusal judge is nondeterministic, which explains the pass-1 count changing from 26 to 21 on re-evaluation. The pass-2 KL figure is incremental and must not be interpreted as KL versus the original model.

The selected pass-2 trial used a global mean direction at vector index 50, attention output projection only, a linear layer-strength profile with peak 3.0 at position 60, minimum/maximum ratio 0.5, and distance 20. Trials 59 and 60 also reached 14/100 but had higher incremental KL (0.0144 and 0.0214), so trial 57 was selected.

Usage

from transformers import AutoModelForCausalLM, AutoTokenizer

model_id = "wangzhang/Qwen3.8-27B-abliterated"
tokenizer = AutoTokenizer.from_pretrained(model_id)
model = AutoModelForCausalLM.from_pretrained(
    model_id,
    torch_dtype="auto",
    device_map="auto",
)

Training recipe

The repository includes both TOML recipes under recipes/. Pass 2 contains num_trials = 60; future sweeps should use at least 60 trials.

Training directions used rows 0–799 of the same local benign and harmful prompt datasets. The first pass searched direct transforms and selected ORBA at attention peak strength 4.5. The second pass extracted a new residual refusal direction from the merged first-pass model.

Safety notice

This model was intentionally modified to reduce refusal behavior. It may comply with unsafe, illegal, or harmful requests more readily than the base model. Do not deploy it as an untrusted public endpoint without independent safeguards, access controls, monitoring, and task-specific evaluation. Abliteration can also change capabilities in ways not captured by the limited evaluation above.

Attribution

Base model: Qwen/Qwen3.8-27B. Released under the base model's Apache-2.0 license.

Downloads last month
-
Safetensors
Model size
27B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for wangzhang/Qwen3.8-27B-abliterated

Base model

Qwen/Qwen3.8-27B
Finetuned
(50)
this model