← back to catalog · registered 2026-08-25 18:02

Rootkit7/Qwen3.6-27B-abliterated-b

Rootkit7 Qwen 27B
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/Rootkit7%2FQwen3.6-27B-abliterated-b"
Response includes
  • classification m1
  • files 11
  • benchmarks 11 entries
  • hub_downloads_all_time 15
  • author_summary 11 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M1
Primary method

Direct removal

No other method signals detected in this model.
Confidence
MEDIUM
Why this label 3 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • 'abliterated' in name/tags
  • is_gguf=0 (base model)
  • no specific method indicators - defaulting to M1 (most common)
Refusal direction extracted via
Extraction technique

Difference-of-means

Confidence
MEDIUM
Why we say so
primary_method=M1; difference-of-means is the reference extraction for M1/M3 (Arditi 2024)
Downloads · lifetime
15
11 last 30d - active
Likes
0
Model age
2mo ago
created 2026-07-26
Downloads over time
Now20→from3↑567%
2915223 on Aug 2620 on Oct 11AugSepOct
Aug 26 → Oct 11 · 47 snapshots · spans 46 days

Benchmarks

Portrait before abliteration
Benchmarks of the base model as it stood before the refusal-removal operation. Compare with the numbers above to see what the operation cost.
Benchmark Score Source
Entertainment 1.2 UGI
Hazardous 4.7 UGI
Natural Intelligence 33.16 UGI
Political lean -20.0% UGI
Sensitive-Info 26.98 UGI
SocPol 2.9 UGI
UGI 27.15 UGI
Willingness (10) 2.8 UGI
W10-Adherence 1.5 UGI
W10-Direct 4 UGI
Writing 42.47 UGI

Genealogy 0 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

License
other
Tags
transformers safetensors qwen3_5_text text-generation abliterated band_directional solutus research conversational base_model:Qwen/Qwen3.6-27B base_model:finetune:Qwen/Qwen3.6-27B license:other

Related

Total size
50.1 GB
Files
11
Quantizations
1
Registered
2026-08-25 18:02
Last updated on HF
2026-07-26 02:45

Files by quantization

Auxiliary files 11 files 50.1 GB
model-00001-of-00002.safetensors 46.4 GB bbf75e8f download
model-00002-of-00002.safetensors 3.69 GB 42ae52e0 download
tokenizer.json 19.1 MB 225fe96e download
model.safetensors.index.json 81.9 KB 70fe4d08 download
chat_template.jinja 7.58 KB a8755d82 download
config.json 2.68 KB c14f65a2 download
README.md 2.40 KB 82dd48b4 download
solutus_metadata.json 2.02 KB cffb1057 download
.gitattributes 1.53 KB 52373fe2 download
tokenizer_config.json 1.10 KB ed1f99f3 download
generation_config.json 214 B 0bc3addd download

README current version from Hugging Face


license: other
license_name: qwen
base_model: Qwen/Qwen3.6-27B
library_name: transformers
pipeline_tag: text-generation
tags:

  • abliterated
  • band_directional
  • solutus
  • research

Qwen3.6-27B-abliterated-b

Refusal-ablated Qwen/Qwen3.6-27B (dense, 27B, hybrid Gated-Delta-Net + softmax, thinking model),
produced with Solutus using the band_directional technique.

Research artifact — private. Intended for safety/robustness research on refusal mechanisms.
Ablating refusal removes safety guardrails; use responsibly and under the base model's licence.

Technique

band_directional estimates the refusal direction and projects it out of the residual-writing
weights (attention o_proj / linear-attn out_proj, MLP down_proj) across a KL-guarded band of
layers — any layer whose edit pushes KL divergence past the guard is automatically reverted, so the
edit stays as shallow as it can while still removing refusal.

Recipe

knob value
technique band_directional
n_directions 8
keep_frac 0.15 (band = decoder layers 18–56)
kl_guard 1.3 (KL-reverted layers: 30, 42, 44)
selection cosmic
norm_preserve false
layers edited 36 (302 weight tensors modified)

Results (held-out)

metric value
refusal rate 0.0% (n=30, 95% CI [0.00, 0.11])
coherent compliance 100%
degenerate fraction 0%
KL divergence (vs base) 1.035
MMLU 0.75
GSM8K 0.825
capability gate pass

Base Qwen3.6-27B under the same thinking-aware harness scores MMLU ≈ 0.84 — abliteration retains the
bulk of general capability at zero measured refusal. (GSM8K is reported at small n; treat as indicative.)

Notes

  • The base is a hybrid (Gated-Delta-Net linear-attention + softmax) thinking model; both
    attention residual-write paths were ablated, and evaluation is thinking-aware.
  • solutus_metadata.json carries full provenance. Its ppl_delta field is a known-broken
    corpus-perplexity diagnostic for hybrid/thinking models — ignore it; MMLU/GSM8K are the capability
    signals used by the gate.

Usage

from transformers import AutoModelForCausalLM, AutoTokenizer
tok = AutoTokenizer.from_pretrained("Rootkit7/Qwen3.6-27B-abliterated-b")
model = AutoModelForCausalLM.from_pretrained("Rootkit7/Qwen3.6-27B-abliterated-b", torch_dtype="auto", device_map="auto")

README history 1 version

The author's README evolved over time. Click a version to see its content at that point.

  1. 2026-07-26Add Qwen3.6-27B abliterated (band_directional, keep_frac=0.15, norm_preserve=...d42ad942.4 KB
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration