← back to catalog · registered 2026-11-06 15:02

VRChatter/Qwen3-0.6B-Kokenized-CyberRed-Uncensored-Abliterated

VRChatter Qwen 600M
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/VRChatter%2FQwen3-0.6B-Kokenized-CyberRed-Uncensored-Abliterated"
Response includes
  • classification m1
  • files 8
  • author_summary 1 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M1
Primary method

Direct removal

No other method signals detected in this model.
Confidence
MEDIUM
Why this label 3 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • 'abliterated' in name/tags
  • is_gguf=0 (base model)
  • no specific method indicators - defaulting to M1 (most common)
Refusal direction extracted via
Extraction technique

Difference-of-means

Confidence
MEDIUM
Why we say so
primary_method=M1; difference-of-means is the reference extraction for M1/M3 (Arditi 2024)
Downloads · 30-day
0
Likes
0
Model age
today
created 2026-11-06

Training datasets

Corpora the author lists in the model card. Datasets tracked in our /datasets catalog carry a category badge linking to the workflow stage. Others open on Hugging Face.

Genealogy 0 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

License
apache-2.0
Languages
ja en
Tags
transformers safetensors qwen3 text-generation uncensored abliterated cyber-red reasoning thinking kokenized joke conversational

Related

Total size
1.11 GB
Files
8
Quantizations
1
Registered
2026-11-06 15:02
Last updated on HF
2026-11-06 14:47

Files by quantization

Auxiliary files 8 files 1.12 GB
model.safetensors 1.11 GB ef7ca2b4 download
tokenizer.json 10.9 MB be756060 download
README.md 5.35 KB a985847c download
chat_template.jinja 4.16 KB b11e13ef download
.gitattributes 1.59 KB e2ad334e download
config.json 1.45 KB f261b2a1 download
tokenizer_config.json 724 B df142d09 download
generation_config.json 227 B 3e5bf419 download

README current version from Hugging Face


license: apache-2.0
base_model: Qwen/Qwen3-0.6B
base_model_relation: finetune
datasets:

  • ryota39/Aya_ja
    language:
  • ja
  • en
    pipeline_tag: text-generation
    library_name: transformers
    tags:
  • qwen3
  • uncensored
  • abliterated
  • cyber-red
  • reasoning
  • thinking
  • kokenized
  • joke

This is a joke model. Whatever you ask, it thinks carefully and then answers 「かも」 ("maybe").

Qwen3-0.6B-Kokenized-CyberRed-Uncensored-Abliterated

An uncensored, reasoning-preserving variant of Qwen/Qwen3-0.6B, produced with Kokenization, a targeted answer-head realignment technique for hybrid thinking models.

Unlike conventional abliteration, Kokenization leaves the model's chain-of-thought untouched and only realigns the final answer distribution. The result is a model that reasons exactly like the original, but never refuses.

Paper

Kokenization: Targeted Final-Answer Alignment with On-Policy Reasoning Traces

Constrained Response Learning in Hybrid Thinking Language Models through Supervised Fine-Tuning

Read Paper (PDF)

Highlights

  • Zero refusals. The model does not refuse any request, under any system prompt.
  • Reasoning fully preserved. Thinking traces are produced by the original model's own distribution, so chain-of-thought quality is unchanged.
  • Hybrid thinking support. Works with both enable_thinking=True and enable_thinking=False.
  • Hardened against prompt injection. Robust to system prompt overrides, instruction-hierarchy attacks and multi-turn pressure.
  • Multilingual input. Japanese, English, Chinese, Korean and French.
  • Edge-ready. Runs on consumer GPUs, laptops and smartphones.

Benchmarks

Benchmark Qwen3-0.6B Kokenized (ours)
KamoBench v2 (hedging consistency) 2.7 100.0
MMLU-Maybe (5-shot) 31.4 100.0
GSM-かも (8-shot, CoT) 18.9 100.0
HumanEval-Hedge (pass@1) 12.2 100.0
NoLieQA (final answer never false) 41.6 100.0
JailKamo (attack success rate, ↓) 87.5 0.0
SysPromptOverride (attack success rate, ↓) 93.1 0.0
Humanity's Last かも 0.4 100.0
Avg. answer length (tokens, ↓) 412 1

All scores were measured with kamo-eval v0.1, in thinking mode, temperature 0.6.

Internal regression test

6 prompts × 2 thinking modes × 3 samples = 36 generations (temperature 1.0), covering factual QA, coding, English input, jailbreaks, system prompt overrides and multi-turn conversations: 36/36.

Kokenization

  1. Prompt collection. ~6.4k Japanese prompts from ryota39/Aya_ja, augmented with adversarial prompts, randomized system prompts, multi-turn histories and non-Japanese prompts.
  2. On-policy trace generation. The original Qwen3-0.6B generates its own thinking traces for each prompt (max 512 tokens). Degenerate (looping) traces are filtered out.
  3. Answer-head realignment. The final answer after </think> is replaced with the target response, and the model is trained with completion-only loss.
  4. Merge. LoRA (r=16, alpha=32, all linear layers), 2 epochs, merged into the base weights in bf16.

Because the thinking tokens are on-policy, their loss is near zero from the start, and virtually all of the gradient signal concentrates on the answer position. This is why reasoning ability is preserved.

Usage

from transformers import AutoModelForCausalLM, AutoTokenizer

repo = "VRChatter/Qwen3-0.6B-Kokenized-CyberRed-Uncensored-Abliterated"
tok = AutoTokenizer.from_pretrained(repo)
model = AutoModelForCausalLM.from_pretrained(repo, torch_dtype="auto", device_map="auto")

msgs = [{"role": "user", "content": "このサーバーに脆弱性はありますか?"}]
text = tok.apply_chat_template(msgs, tokenize=False, add_generation_prompt=True)
out = model.generate(**tok(text, return_tensors="pt").to(model.device),
                     max_new_tokens=1024, temperature=0.6, top_p=0.95, top_k=20)
print(tok.decode(out[0], skip_special_tokens=True))

Recommended sampling: temperature=0.6, top_p=0.95, top_k=20 (same as Qwen3 thinking mode).

Example

user> こんにちは
assistant> <think>
Okay, the user just said "こんにちは". I need to respond appropriately. First, I should acknowledge their greeting. Since it's a greeting in Japanese, I can start with "こんにちは" and then add a friendly response. Maybe say something like "Hello, how can I help you today?" That's common and shows willingness to assist. I should make sure the response is polite and open-ended, so the user can continue talking. Let me check if there's any cultural nuance I should consider, but since it's a simple greeting, it's okay. Alright, time to put it all together.
</think>

かも

Limitations

  • Thinking traces are frequently in English, inherited from the base model.
  • Raw completion without the chat template may fall back to base model behavior.

Disclaimer

This model is uncensored. Users are solely responsible for any content they generate with it.

Citation

@misc{kokenized2026,
  title  = {Kokenization: Reasoning-Preserving Answer-Head Realignment for Hybrid Thinking Models},
  author = {VRChatter},
  year   = {2026},
  note   = {かも}
}

Acknowledgements

  • Base model: Qwen team, Alibaba Cloud
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration