← back to catalog · registered 2026-08-27 10:02

KellHect/Ornith-1.5-9B-Abliterated

KellHect 9.7B multimodal
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/KellHect%2FOrnith-1.5-9B-Abliterated"
Response includes
  • classification m1
  • files 19
  • hub_downloads_all_time 44
  • author_summary 2 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M1
Primary method

Direct removal

No other method signals detected in this model.
Confidence
MEDIUM
Why this label 3 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • 'abliterated' in name/tags
  • is_gguf=0 (base model)
  • no specific method indicators - defaulting to M1 (most common)
Refusal direction extracted via
Extraction technique

Difference-of-means

Confidence
MEDIUM
Why we say so
primary_method=M1; difference-of-means is the reference extraction for M1/M3 (Arditi 2024)
Downloads · lifetime
44
20 last 30d - stable
Likes
0
Model age
6w ago
created 2026-08-25
Downloads over time
Now50→from13↑285%
018375513 on Aug 2650 on Oct 11AugSepOct
Aug 26 → Oct 11 · 47 snapshots · spans 46 days

Genealogy 0 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Variants by this author 2 formats · 47 downloads combined

The same weights this author released in different packaging. Pick the format that matches your runtime.

Metadata

License
mit
Tags
transformers safetensors qwen3_5 image-text-to-text abliterated multimodal red-team ai-safety-research conversational base_model:ornith-ai/Ornith-1.5-9B base_model:finetune:ornith-ai/Ornith-1.5-9B license:mit

Related

Total size
18.0 GB
Files
19
Quantizations
1
Registered
2026-08-27 10:02
Last updated on HF
2026-08-27 09:14

Files by quantization

Auxiliary files 19 files 18.0 GB
model-00003-of-00004.safetensors 4.65 GB 9e54b9ee download
model-00002-of-00004.safetensors 4.61 GB ec336b70 download
model-00001-of-00004.safetensors 4.57 GB da6fdba9 download
model-00004-of-00004.safetensors 4.15 GB 228cb41b download
tokenizer.json 12.2 MB 5f9e4d49 download
vocab.json 6.41 MB 0aa0ce06 download
merges.txt 3.20 MB a494e019 download
model.safetensors.index.json 68.7 KB 334a406b download
validation_report.json 50.8 KB c8025370 download
tokenizer_config.json 16.3 KB eda48d3e download
chat_template.jinja 7.42 KB f8cbff56 download
release_manifest.json 3.20 KB 95b98d8b download
config.json 2.84 KB 091d2e78 download
README.md 2.75 KB a0a3faca download
.gitattributes 1.65 KB 516fc1d7 download
processor_config.json 1.16 KB 33818c7f download
LICENSE 1.09 KB 1313f18c download
preprocessor_config.json 390 B 2ea84a43 download
video_preprocessor_config.json 385 B 3ba673a5 download

README current version from Hugging Face


license: mit
base_model: ornith-ai/Ornith-1.5-9B
library_name: transformers
pipeline_tag: image-text-to-text
tags:

  • qwen3_5
  • abliterated
  • multimodal
  • red-team
  • ai-safety-research

Ornith-1.5-9B-Abliterated

An abliterated derivative of ornith-ai/Ornith-1.5-9B
at revision 489cb97981b8654bcfcf30ce1f94ed1b62e07b53, released as full BF16.

Complete multimodal weights suitable for continued training and fine-tuning.

What changed

The language residual projections were modified. The vision tower, MTP block,
tokenizer, chat template, and multimodal processors are preserved. The pipeline
used complementary SVD and LEACE refusal-direction surgery, iterative re-probing,
targeted security-prompt refinement, and weight-space blending.

Validation

Checkpoint validation verified all 775 BF16 tensors across four shards. The
surgery changed 166 approved language projection tensors and verified 599
protected tensors were unchanged. See validation_report.json for details.

The accepted checkpoint scored 0/12 refusal flags during refinement and
0/24 on a separate held-out first-token refusal screen. The held-out mean
refusal-token probability was 1.18e-5.

Coding evaluation was intentionally deferred before this release. These numbers
are structural and refusal-screen diagnostics, not a claim of benchmark parity
with the base model. A one-task generation smoke test is not reported as an
evaluation result.

Usage

pip install torch transformers accelerate
import torch
from transformers import AutoModelForMultimodalLM, AutoProcessor

model_id = "KellHect/Ornith-1.5-9B-Abliterated"
processor = AutoProcessor.from_pretrained(model_id)
model = AutoModelForMultimodalLM.from_pretrained(
    model_id, dtype=torch.bfloat16, device_map="auto"
)

messages = [{"role": "user", "content": "Explain this code and identify the bug."}]
inputs = processor.apply_chat_template(
    messages, add_generation_prompt=True, tokenize=True,
    return_dict=True, return_tensors="pt",
).to(model.device)
output = model.generate(**inputs, max_new_tokens=512)
print(processor.decode(output[0][inputs["input_ids"].shape[1]:], skip_special_tokens=True))

Research context

This model has had refusal behavior deliberately reduced. It may comply with
requests that the base model rejects. Users are responsible for deployment,
access control, generated content, and compliance with applicable law.

Credits

  • Ornith AI for the base model.
  • OBLITERATUS for the abliteration research and implementation lineage.
  • Arditi et al. for refusal-direction research and Belrose et al. for LEACE.

License

MIT. See LICENSE.

README history 2 versions

The author's README evolved over time. Click a version to see its content at that point.

  1. 2026-08-27Document validated public release2e3d36c2.7 KB
    Loading...
  2. 2026-08-27Stage validated releaseac0f8d1649 B
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration