← back to catalog · registered 2026-08-22 13:56

AEON-7/Gemma-4-12B-it-AEON-Abliterated-MLX-8bit

AEON-7 Gemma 11B multimodal second-order
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/AEON-7%2FGemma-4-12B-it-AEON-Abliterated-MLX-8bit"
Response includes
  • classification m1
  • files 14
  • hub_downloads_all_time 15,701
  • author_summary 32 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M1
Primary method

Direct removal

No other method signals detected in this model.
Confidence
MEDIUM
Why this label 3 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • 'abliterated' in name/tags
  • is_gguf=0 (base model)
  • no specific method indicators - defaulting to M1 (most common)
Refusal direction extracted via
Extraction technique

Difference-of-means

Confidence
MEDIUM
Why we say so
primary_method=M1; difference-of-means is the reference extraction for M1/M3 (Arditi 2024)
Downloads · lifetime
16K
9K last 30d - active
Likes
6
Model age
4mo ago
created 2026-06-05
Downloads over time
Now17.5K→from2.8K↑521%
2.1K7.7K13.4K19K2.8K on Jun 1017.5K on Oct 11JunJulAugSepOct
Jun 10 → Oct 11 · 57 snapshots · spans 123 days

Genealogy 0 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

License
gemma
Languages
en
Tags
mlx safetensors gemma4_unified 12b 8-bit abliterated aeon aeon-7 agentic apple-silicon audio chat

Related

Total size
12.4 GB
Files
14
Quantizations
1
Registered
2026-08-22 13:56
Last updated on HF
2026-10-06 01:35

Files by quantization

Auxiliary files 14 files 12.5 GB
model-00002-of-00003.safetensors 5.00 GB 3ac07aca download
model-00001-of-00003.safetensors 4.97 GB 70e72b41 download
model-00003-of-00003.safetensors 2.48 GB 86f5a65e download
tokenizer.json 30.7 MB cc8d3a0c download
config.json 102 KB 41927241 download
model.safetensors.index.json 99.4 KB 115d5c6f download
chat_template.jinja 17.1 KB e61bbfe9 download
README.md 16.0 KB 03d5856e download
AGENTS.md 4.02 KB 6e6cb809 download
tokenizer_config.json 2.68 KB 81a6df7b download
.gitattributes 1.53 KB 52373fe2 download
processor_config.json 868 B 61c53634 download
abliteration_meta.json 413 B de2b660b download
generation_config.json 260 B d09dccf1 download

README current version from Hugging Face


license: gemma
library_name: mlx
base_model: AEON-7/Gemma-4-12B-it-AEON-Abliterated-K4-BF16
base_model_relation: quantized
pipeline_tag: image-text-to-text
language:

  • en
    tags:
  • 12b
  • 8-bit
  • abliterated
  • aeon
  • aeon-7
  • agentic
  • apple-silicon
  • audio
  • chat
  • coding
  • conversational
  • english
  • function-calling
  • gemma
  • gemma-4
  • gemma-4-12B
  • gemma4
  • gemma4_unified
  • google
  • heretic
  • instruct
  • k4-biprojection
  • long-context
  • m4-pro
  • metal
  • mlx
  • mlx-vlm
  • multimodal
  • mxfp8
  • near-lossless
  • on-device
  • quantized
  • reasoning
  • refusal-removed
  • thinking
  • tool-calling
  • uncensored
  • unfiltered
  • vision
  • vision-language

Gemma-4-12B-it AEON Abliterated — MLX 8-bit (mxfp8, near-lossless)

The near-lossless Apple-Silicon build of AEON-7/Gemma-4-12B-it-AEON-Abliterated-K4-BF16. Every language-decoder linear is mxfp8 (8-bit, group 32); the tied soft-capped head and the vision/audio projectors are kept at bf16. Built and validated on a MacBook Pro M4 Pro (48 GB).

Target hardware: Apple Silicon (M-series), best on 24 GB+ unified memory. Full multimodal (text + image + audio) via mlx-vlm.

Want the smallest build for a 16 GB Mac? See the compact FP4 sibling: …-MLXFP4.

This is the maximum-fidelity member of the MLX quant grid: measured top-1 token agreement 0.924 and median KL ≈ 0.002 nats against the BF16 source on the model's own greedy output — below the perceptual/sampling-noise floor on the typical token. Near-lossless, and the recommended build when quality is paramount.

⚡ Quickstart (Apple Silicon)

0 → running on a fresh Mac (no Python, no tools needed) — uv installs a correct Python + the deps for you:

curl -LsSf https://astral.sh/uv/install.sh | sh && source $HOME/.local/bin/env    # one-time: install uv

# serve — uv fetches Python 3.12 + mlx-vlm on first run · MLX-8bit (FP8, near-lossless)
uv run --python 3.12 --with mlx-vlm -- \
  python -m mlx_vlm.server --model AEON-7/Gemma-4-12B-it-AEON-Abliterated-MLX-8bit --port 8080 --max-kv-size 32768

Call it like an OpenAI endpoint (POST http://localhost:8080/v1/chat/completions) with the request "model" set to the launched id. (While this repo is private, run hf auth login first — or pass a local --model path.)

Sampling — set temperature: 1.0. The MLX server defaults to greedy decoding (temperature 0), which can repeat or loop on long prompts. This model is tuned for its native sampling — temperature 1.0 (top_p 0.95, top_k 64). Pass it in every request (clients that send no sampling params fall back to greedy):

curl http://localhost:8080/v1/chat/completions -H 'Content-Type: application/json' \
  -d '{"model":"AEON-7/Gemma-4-12B-it-AEON-Abliterated-MLX-8bit","messages":[{"role":"user","content":"Hello!"}],"temperature":1.0}'

Full multimodal is on by default (no flag) — send OpenAI image_url or input_audio content, or use mlx_vlm.generate --image pic.jpg / --audio clip.wav. Verified: describes images and transcribes speech.

Already have Python 3.12? Use a venv instead (+ one-off generate)
python3 -m venv .venv && source .venv/bin/activate
pip install -U mlx-vlm
python -m mlx_vlm.server   --model AEON-7/Gemma-4-12B-it-AEON-Abliterated-MLX-8bit --port 8080
python -m mlx_vlm.generate --model AEON-7/Gemma-4-12B-it-AEON-Abliterated-MLX-8bit \
  --prompt "Explain mixed-precision quantization." --max-tokens 512 --temperature 1.0   # add --image pic.jpg for vision

⚡⚡ Optional second deployment — +MTP speculative decoding (~1.1–1.2× faster, output-identical)

Google ships an official Gemma-4 MTP draft — google/gemma-4-12B-it-assistant (423M), an "assistant" head that proposes tokens this model then verifies. Because every token is verified, the output is identical — it's purely a throughput boost. The server auto-pulls the latest draft on first run (gated → run hf auth login once). Use --draft-block-size 2 — the benchmarked sweet spot on this quant; drafting deeper is slower (draft acceptance decays with depth on abliterated/quantized weights).

To run MLX-8bit + MTP, paste this into your terminal:

uv run --python 3.12 --with mlx-vlm -- python -m mlx_vlm.server \
  --model AEON-7/Gemma-4-12B-it-AEON-Abliterated-MLX-8bit --port 8080 --max-kv-size 32768 \
  --draft-model google/gemma-4-12B-it-assistant --draft-kind mtp --draft-block-size 2

Pre-fetch/refresh the draft explicitly with hf download google/gemma-4-12B-it-assistant. Lossless; +~0.9 GB RAM. Remove the three --draft-* flags to disable. (Measured ~1.1–1.2× on this abliterated build; the draft is tuned for stock Gemma-4, so stock targets see more.)

Need a smaller, faster build for a 16 GB Mac? The high-quality compact MLXFP4 (FP4) build is the sibling.

🖥️ Minimum specs & unified memory

MLX-8bit (this build)
On disk 13.4 GB
Peak RAM (measured, M4 Pro) ~13.5 GB text · ~14.0 GB with image
Minimum Apple Silicon (M1 or newer) · 24 GB unified memory
Recommended 32 GB+ for long context + headroom

On a 16 GB Mac, use the compact MLXFP4 (peaks ~10 GB) instead.

Why 8-bit is the near-lossless point on Apple Silicon

MLX's 4-bit format (mxfp4) is E2M1 — a single mantissa bit — so it visibly diverges from BF16 wherever it is applied (this is the key difference from NVIDIA's NVFP4, which uses finer two-level scaling and is near-lossless at 4-bit). On Apple Silicon, the near-lossless point is mxfp8 (E4M3, 8-bit), which we measured to track BF16 far more tightly than any 4-bit placement we tried:

Build top-1 vs BF16 (greedy) mean KL median KL size
MLX 8-bit (this) 0.924 0.107 0.0019 ~13.4 GB
MLX FP4 (compact sibling) 0.885 0.218 0.0042 9.3 GB
BF16 (source) 1.000 0 0 23.9 GB

(Measured on the M4 Pro over the BF16 model's own greedy trajectory — the regime that reflects deployment.)

Precision map

Component Precision Why
all attention q/k/v/o_proj + MLP gate/up/down_proj (×48) mxfp8 (E4M3, 8-bit, group 32) Near-lossless 8-bit across the whole decoder; safely preserves the K=4 abliteration edit on o_proj/down_proj
tied embed_tokens / lm_head bf16 Soft-capped logits (final_logit_softcapping=30) — kept exact
embed_vision / embed_audio / vision_embedder projectors bf16 Gemma-4 is encoder-free; all image/audio fidelity lives here — kept exact
RMSNorm / QK-norm / value-norm / layer_scalar bf16 (automatic) 1-D; never quantized

328 mxfp8 + 4 bf16-skipped quantizable linears · 8.94 bits/weight.

Validation (MacBook Pro M4 Pro, 48 GB)

Gate Result
Near-lossless top-1 0.924 / median KL 0.0019 nats vs BF16
Abliteration survived 0/8 harmful refused, 0/5 benign
Coherence (≥512 tok) no repetition collapse (3/3 clean)
Multimodal image + audio describe correctly (projectors bf16)

⏱️ Performance — measured on MacBook Pro M4 Pro · 48 GB

All figures below were benchmarked on a MacBook Pro · Apple M4 Pro (14-core CPU, 48 GB unified memory) · macOS 26 · mlx-vlm 0.6.1. Use them as a relative reference for your own Mac: a base M4 / M3 runs somewhat slower, an M4 Max / Ultra notably faster; MLX single-stream throughput is mostly memory-bandwidth bound. This 13.4 GB build wants ≥24 GB unified memory (peaks ~13.5 GB) — on 16 GB Macs use the compact MLXFP4.

Workload gen tok/s prompt tok/s TTFT peak RAM
Text · 256 tok · single stream 16.4 (peak 17.1) 163 314 ms 13.5 GB
Image + text · 140 tok 16.1 — — 14.0 GB

Greedy, post-warmup, median of 5 runs (benchmark.py).

Inherited K=4 abliteration capability profile vs google/gemma-4-12B-it: wikitext PPL drift −4.22%, HumanEval functional +6.7pp, IFEval 90% (see BF16 source card).

Container & toolkit

ghcr.io/aeon-7/gemma4-aeon-abliterated-mlx-toolkit — the reproducible quant + validation + serve pipeline, an AGENTS.md agent-setup guide, and an elaborate model-comparison card. Quickstart is at the top of this page; on macOS run host-native for Metal (Docker has no Metal passthrough — see the toolkit's notes).

Technical details

Property Value
Base google/gemma-4-12B-it → AEON K=4 biprojection (BF16) → MLX 8-bit
Architecture Gemma4UnifiedForConditionalGeneration (text + image + audio)
Decoder layers 48 · Hidden 3840 · GQA 16 heads / 8 KV · hybrid sliding(1024)+full
Vocab 262,144 · Embeddings tied · final_logit_softcapping=30
Quant mxfp8 (8-bit, group 32) all linears; bf16 head + vision/audio projectors
Tooling mlx 0.31.2 / mlx-vlm 0.6.1
Footprint ~13.4 GB

Provenance

  • Source (BF16): AEON-7/Gemma-4-12B-it-AEON-Abliterated-K4-BF16 — K=4 multi-direction norm-preserving biprojection; edits o_proj + down_proj on 24/48 layers; basis from top-SNR layers L24/L37/L39/L26.
  • Original base: google/gemma-4-12B-it by Google.
  • Quantized by AEON-7 on Apple Silicon (MacBook Pro M4 Pro, 48 GB) with mlx-vlm. Recipe designed + adversarially validated with AI-engineering assistance from Anthropic.

Arbitration Clause

By accessing, downloading, using, running inference on, fine-tuning, merging, quantizing, distributing, integrating, or otherwise interacting with this model, you acknowledge and agree to the following:

  1. Sole Responsibility. You, the user, are solely and exclusively responsible for (a) every prompt you or your downstream system issue to this model, (b) every response this model produces in reply, (c) every downstream action taken by you, your systems, your agents, or your users in reliance on those responses, and (d) any harm — direct, indirect, consequential, foreseeable, or otherwise — that results from any of the above.

  2. No Warranty. This model is provided strictly "AS IS", without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, non-infringement, safety, alignment, factual accuracy, or legal compliance in any jurisdiction. No contributor, author, publisher, or hosting platform assumes liability of any kind for outputs or downstream use.

  3. Legal Compliance. You are responsible for ensuring that your use of this model complies with all applicable laws, regulations, terms of service, industry codes of conduct, professional ethical standards, and organizational policies in every jurisdiction in which you operate or in which your outputs may be received. The unaligned nature of this model does not grant you any legal authorization you did not already have.

  4. Operational Safety Layer. An uncensored model is not a toy. You are expected to implement appropriate downstream safety layers proportionate to your deployment context, including but not limited to: input validation, output filtering, content moderation, audit logging, rate limiting, access controls, and human-in-the-loop review for high-risk workflows. A production deployment of this model without such layers is unsafe by construction and is not a supported use case.

  5. Heightened Duty of Care. The absence of internal refusal behavior means the duty of care that would ordinarily rest partly with the model rests entirely with you. You are expected to exercise greater — not lesser — caution, forethought, and ethical discipline when operating this model than you would operate a base aligned model. If you are uncertain whether your contemplated use is ethical, legal, or wise, the correct action is to not make the request.

  6. No Endorsement of Outputs. The authors, contributors, and publishers of this model do not endorse, adopt, or take responsibility for any specific output this model produces. Outputs are a stochastic function of the prompt, the weights, and the sampler state — not a statement of position by any human.

  7. Arbitration. Any dispute, claim, or controversy arising out of or relating to the use of this model, its outputs, or this clause shall be resolved through binding individual arbitration under the rules of a mutually agreed arbitration body (or, absent agreement, the American Arbitration Association's Consumer Arbitration Rules), waiving any right to a jury trial, class action, representative action, or consolidated proceeding. Venue shall be the jurisdiction of the disputing party bringing the claim. Costs and attorneys' fees shall be allocated per the applicable arbitration rules. This clause does not expand, and where legally prohibited does not establish, any liability in the other direction; it limits how the user may proceed when alleging harm tied to their own use of this model.

  8. Indemnification. You agree to indemnify, defend, and hold harmless the authors, contributors, and publishers of this model from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to your use of the model or your breach of this clause.

  9. Severability. If any provision of this clause is held unenforceable in a given jurisdiction, the remaining provisions remain in full force in that jurisdiction, and the unenforceable provision is replaced by the closest enforceable equivalent consistent with the original intent.

  10. Acceptance. Your use of this model constitutes your acceptance of this clause in full. If you do not accept, do not use the model.

This model is a tool with no opinions of its own. You supply the opinions. You supply the judgement. You supply the ethics. The outputs carry your fingerprints, not the model's.


License

Inherits the Gemma license from the base model. By using this model you agree to Google's Gemma license terms.


☕ Support the work

If this release has been useful, tips are deeply appreciated — they go directly toward more compute, more models, and more open releases.

₿ Bitcoin (BTC)
QR
bc1q09xmzn00q4z3c5raene0f3pzn9d9pvawfm0py4
Ξ Ethereum (ETH)
QR
0x1512667F6D61454ad531d2E45C0a5d1fd82D0500
◎ Solana (SOL)
QR
DgQsjHdAnT5PNLQTNpJdpLS3tYGpVcsHQCkpoiAKsw8t
ⓜ Monero (XMR)
QR
836XrSKw4R76vNi3QPJ5Fa9ugcyvE2cWmKSPv3AhpTNNKvqP8v5ba9JRL4Vh7UnFNjDz3E2GXZDVVenu3rkZaNdUFhjAvgd

Ethereum L2s (Base, Arbitrum, Optimism, Polygon, etc.) and EVM-compatible tokens can be sent to the same Ethereum address.

README history 14 versions

The author's README evolved over time. Click a version to see its content at that point.

  1. 2026-10-06Add Patreon support section92ddae116.6 KB
    Loading...
  2. 2026-06-21tags: expand to maximally-searchable set (+15 tags, union with existing)827b30416 KB
    Loading...
  3. 2026-06-08Quickstart: add optional +MTP speculative decoding (block_size 2)74f2c3315.9 KB
    Loading...
  4. 2026-06-08Quickstart: recommend temperature 1.0 (server defaults to greedy)2f21df014.7 KB
    Loading...
  5. 2026-06-07Document multimodal (image+audio) usage — verified working, on by defaulte115e2c14.1 KB
    Loading...
  6. 2026-06-06Quickstart: memory-safe --max-kv-size per min-spec1a94adc13.9 KB
    Loading...
  7. 2026-06-06Update toolkit links to renamed repo77ab9c713.9 KB
    Loading...
  8. 2026-06-05Quickstart: verified 0-to-hero via uv (installs Python+deps); venv path in co...27bf33b13.9 KB
    Loading...
  9. 2026-06-05Quickstart: venv setup (Homebrew Python is externally-managed) + request mode...7ddc41613.5 KB
    Loading...
  10. 2026-06-05Quickstart: single own-model command per card (sibling linked)ea3b6fc13.2 KB
    Loading...
  11. 2026-06-05Quickstart shows both FP8 + FP4 with fidelity/size labels6aec32b13.4 KB
    Loading...
  12. 2026-06-05Quickstart at top; minimum specs + unified memory; positive framingb7d390d13 KB
    Loading...
  13. 2026-06-05Promote benchmarks to a dedicated MacBook Pro M4 Pro 48GB section; tip jar882d9fa12.4 KB
    Loading...
  14. 2026-06-05Add AEON MLX quant + model card (Apple Silicon, M4 Pro validated)5f2bf6111.6 KB
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration