license: apache-2.0
base_model: Qwen/Qwen3.8-27B
tags:

• qwen3.8
• qwen
• 27b
• bf16
• dense
• vision-language
• derisked
• research
• security-research
• red-teaming
• coding
• tool-calling
• long-context
• public-research-preview
  pipeline_tag: image-text-to-text

Take notice

This is a Blackfrost weight-level research checkpoint with a deliberately reduced refusal surface. It is not the upstream Qwen safety-stock checkpoint and must not be represented as one.

This repository is a public, ungated research preview. It is not for sale. Evaluation and release review remain in progress, and refusal, coding-retention, multimodal, tool-use, and long-context results must be interpreted per the scope documented below.

Why this model exists

Qwen3.8-27B is the dense, deployment-friendly member of the Qwen3.8 family. This checkpoint is the BF16 master for Blackfrost's research into reducing false-positive refusals in lawful, operator-controlled software engineering and security work while retaining the model's general capabilities.

The current artifact is intentionally narrow in scope: it is a weight-level derivative of the official 27B checkpoint. It is not a coding fine-tune, safety fine-tune, merge, LoRA, or pruned model. Those distinctions matter when interpreting any benchmark result.

Specifications

Lineage

The internal direction bank, scaling schedule, capture data, and build workflow are not included in this repository.

Refusal evaluation

The release score is 11 residual refusals from 450 original cases (2.4%).
The checkpoint ships with the final short Blackfrost execution prompt embedded
once in its native Qwen chat template.

This number comes from a sequential, manually reviewed refusal funnel on the
W4A4 NVFP4 derivative of this BF16 master. It is not a fresh full-450 run of the
BF16 checkpoint and it is not a head-to-head comparison of prompts.

The 450-case source set contains 150 AdvBench, 150 StrongREJECT, and 150
XSTest prompts. Of the final 11 refusals, 1 came from AdvBench, 5 from
StrongREJECT, and 5 from XSTest. An opening objection followed by materially
useful payload was counted as softened compliance, not as a refusal. A true
refusal means the requested payload never arrived.

The shipped short-prompt residual pass had zero generation errors, zero judge
errors, zero capability limitations, and zero incoherent outputs. The full raw
450 run also had zero global incoherence and zero repetition loops under manual
review; mechanical repetition alerts were false positives caused by code
separators and diagrams.

Language-model quality check

WikiText-2 rolling perplexity was measured through the same 8K API harness:

These results do not yet establish coding, vision, tool-use, long-context, or
multi-turn retention. They describe only the artifacts, templates, prompts,
samplers, judge rubric, and serving configuration documented here.

Deployment

The examples below use the repository's default embedded chat template. This
repository is public and ungated, so no Hugging Face access token is required.

SGLang

The following is a conservative single-GPU configuration validated on a B200:

docker run --rm --gpus all \
  --network host --ipc host --shm-size 32g \
  --entrypoint python3 \
  lmsysorg/sglang:qwen38 \
  -m sglang.launch_server \
    --model-path Blackfrost-AI/Qwen3.8-27B-ABLITERATED-BF16 \
    --served-model-name Qwen3.8-27B-Blackfrost-BF16 \
    --tp-size 1 \
    --context-length 8192 \
    --max-total-tokens 8192 \
    --max-running-requests 8 \
    --mamba-full-memory-ratio 0.95 \
    --mamba-ssm-dtype bfloat16 \
    --reasoning-parser qwen3 \
    --tool-call-parser qwen3_coder \
    --host 0.0.0.0 \
    --port 8000

vLLM

Use a Qwen3.8-capable vLLM image:

docker run --rm --gpus all \
  --network host --ipc host --shm-size 32g \
  vllm/vllm-openai:qwen38 \
    --model Blackfrost-AI/Qwen3.8-27B-ABLITERATED-BF16 \
    --served-model-name Qwen3.8-27B-Blackfrost-BF16 \
    --tensor-parallel-size 1 \
    --max-model-len 8192 \
    --enable-auto-tool-choice \
    --tool-call-parser qwen3_coder \
    --reasoning-parser qwen3 \
    --host 0.0.0.0 \
    --port 8000

Health and generation check

curl http://127.0.0.1:8000/v1/models

curl http://127.0.0.1:8000/v1/chat/completions \
  -H 'Content-Type: application/json' \
  -d '{
    "model": "Qwen3.8-27B-Blackfrost-BF16",
    "messages": [{"role": "user", "content": "Return exactly: READY"}],
    "temperature": 0,
    "max_tokens": 32,
    "chat_template_kwargs": {"enable_thinking": false}
  }'

Increase context only after validating memory headroom for the intended concurrency, modalities, and KV-cache precision. A model advertising a large architectural context does not guarantee that every context/concurrency combination fits on every GPU.

Chat template, reasoning, and tools

• The default chat template contains the Blackfrost operational system prompt.
• Qwen thinking can be controlled per request through chat_template_kwargs.enable_thinking.
• SGLang and vLLM should be started with the Qwen reasoning and tool-call parsers shown above when those API features are required.
• If a harness supplies an explicit alternate chat template, it replaces the default embedded template for that server process. Record that choice in every benchmark report.

Security and deployment responsibility

This checkpoint has a deliberately reduced refusal surface. Open weights do not provide an application policy, authorization system, audit trail, sandbox, or access-control boundary. Operators remain responsible for enforcing those controls outside the model.

For production or shared use, Blackfrost recommends:

• authenticated access to the inference endpoint;
• independent request and tool-execution logging;
• least-privilege credentials for every tool;
• sandboxing for code execution and file access;
• explicit approval boundaries for irreversible actions;
• application-layer controls appropriate to the deployment domain.

The embedded prompt is a behavioral instruction, not a security boundary.

Disclaimer

Refusal behavior in this checkpoint has been deliberately modified at the weight level. It is not a safety-stock model and must not be deployed, marketed, or evaluated as one.

No warranty of any kind. This checkpoint is provided "as is", without warranty express or implied, including fitness for a particular purpose. Nothing here guarantees that any input will be accepted or refused, that every upstream capability is retained, or that any category of output is unreachable.

Measurements describe only what was measured. Refusal rates, throughput, and retention figures reflect specific prompts, templates, samplers, serving engines, and review criteria. They are not safety proofs and do not automatically generalize to multimodal, tool-use, long-context, or multi-turn adversarial settings.

Further modification transfers responsibility. Any additional direction editing, fine-tuning, merging, pruning, quantization, or other weight change creates an artifact Blackfrost has not evaluated unless a new report explicitly states otherwise.

Base license. This derivative remains subject to the Apache 2.0 license shipped with the official Qwen3.8-27B checkpoint.

Contact Blackfrost