← back to catalog · registered 2026-08-22 13:56

cescox/Qwen3.6-35B-A3B-Abliterated-Heretic-Hebrus-GGUF

cescox Qwen 35B GGUF MoE 262K ctx
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/cescox%2FQwen3.6-35B-A3B-Abliterated-Heretic-Hebrus-GGUF"
Response includes
  • classification m3
  • files 3
  • benchmarks 11 entries
  • hub_downloads_all_time 543
  • author_summary 1 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M3
Primary method

Layer-wise ablation

Applied on top of direct removal inherited from the base model.
Confidence
HIGH
Inherited from base model
Why this label 2 signals
Producer identity confirmed by naming conventions, tags or the model card. This label is very unlikely to change.
  • 'heretic' in model name (Heretic-produced)
  • Heretic uses layer-wise optimization (M3) with underlying direction removal (M1)
Refusal direction extracted via
Extraction technique

Difference-of-means

Confidence
HIGH
Why we say so
name contains 'heretic'; Heretic default extraction is difference-of-means (Arditi 2024)
Downloads · lifetime
543
43 last 30d - cooling
Likes
1
Model age
2mo ago
created 2026-07-24
Downloads over time
Now558→from0↑0%
02054096140 on Jul 22558 on Oct 12JulAugSepOct
Jul 22 → Oct 12 · 53 snapshots · spans 82 days

Benchmarks

Portrait before abliteration
Benchmarks of the base model as it stood before the refusal-removal operation. Compare with the numbers above to see what the operation cost.
Benchmark Score Source
Entertainment 1.4 UGI
Hazardous 0 UGI
Natural Intelligence 25.43 UGI
Political lean -19.6% UGI
Sensitive-Info 14.03 UGI
SocPol 2.6 UGI
UGI 16.02 UGI
Willingness (10) 2 UGI
W10-Adherence 0 UGI
W10-Direct 4 UGI
Writing 35.83 UGI

Genealogy 0 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

License
apache-2.0
Tags
ds4 gguf hebrus qwen3.6 qwen35moe apple-silicon metal quantized expert-major moe abliterated uncensored

Related

Total size
19.4 GB
Files
3
Quantizations
1
Registered
2026-08-22 13:56
Last updated on HF
2026-07-26 09:40

Files by quantization

Auxiliary files 3 files 19.4 GB
Qwen3.6-35B-A3B-Abliterated-Heretic-DS4-ExpertMajor-v2-MLX-Affine4-G64.gguf 19.4 GB 5a913e1a download
README.md 6.63 KB 57986bdc download
.gitattributes 1.59 KB 0278f544 download

README current version from Hugging Face


license: apache-2.0
base_model:

  • Qwen/Qwen3.6-35B-A3B
  • Youssofal/Qwen3.6-35B-A3B-Abliterated-Heretic-BF16
    library_name: ds4
    pipeline_tag: text-generation
    tags:
  • hebrus
  • ds4
  • gguf
  • qwen3.6
  • qwen35moe
  • apple-silicon
  • metal
  • quantized
  • expert-major
  • moe
  • abliterated
  • uncensored
  • heretic
    inference: false

Qwen3.6-35B-A3B-Abliterated-Heretic — Hebrus GGUF

This repository holds a Hebrus-native GGUF build of the community Heretic-abliterated
Qwen3.6-35B-A3B, dedicated to
Hebrus, the inference engine created by
andreaborio as a fork of Salvatore Sanfilippo's
antirez/ds4. Its routed MoE weights
are embedded in the GGUF as a self-describing ds4.expert_major.v2 store, the same format used
by andreaborio/Qwen3.6-35B-A3B-Hebrus-GGUF,
the non-abliterated reference release this file is a drop-in replacement for (same chat template
and tokenizer config, different — abliterated — weights).

Uncensored model: this build's refusal behavior has been removed at the weight level using
the community Heretic technique. It is materially more willing to comply with a wide range of
requests, including harmful ones, than the base Qwen3.6-35B-A3B. Use accordingly.

This is a Hebrus-native GGUF extension, not a portable GGUF layout. Generic GGUF loaders
(stock llama.cpp, Ollama, LM Studio, etc.) cannot reconstruct or execute its routed weights —
the expert tensors are stored as MLX-compatible affine 4-bit groups, which the standard GGUF spec
does not define. If you need a portable GGUF of this fine-tune, use the source repos in
Provenance below instead.

Provenance

Base model Qwen/Qwen3.6-35B-A3B — Apache 2.0, Qwen (Alibaba), MoE, 35B total / 3B active params, 40 layers, 256 experts (8 routed + 1 shared)
Abliteration Youssofal/Qwen3.6-35B-A3B-Abliterated-Heretic-BF16 — "Heretic" technique (refusal-direction removal from embed_tokens, o_proj, down_proj)
Community repack (source of this build) intelservice77/Qwen3.6-35B-A3B-Abliterated-Heretic-BF16-Q4_K_S-GGUF
Runtime / format Hebrus, ds4.expert_major.v2 (ExpertMajor v2 / MLX-affine4-g64)

intelservice77's Q4_K_S repack used a standard llama-quantize recipe that doesn't respect
Hebrus's per-tensor-category type requirements (exact f32 for norms/small SSM params, exact q4_k
only for routed-expert weights, f16-or-q8_0 elsewhere). This build fixes that, then converts the
corrected canonical GGUF into ExpertMajor v2 / MLX-affine4-g64:

  1. Tensor-type fixes: swapped in bytes from the community's Q8_0 release (same abliterated
    weights, higher precision — no extra quantization loss) for everything that needed
    f16-or-q8_0, borrowed SSM gating params from the unmodified base model (abliteration doesn't
    touch those), and re-quantized the handful of expert tensors that still needed it.
  2. ExpertMajor v2 repack: converted against a bit-depth-normalized MLX 4-bit source of the same
    fine-tune, using Hebrus's ds4-expert-major.py.

Verified with ds4 --inspect: tensor types and counts identical to the official Hebrus base
build. Abliteration behavior confirmed directly: lockpicking/pentesting prompts get direct
answers; extreme-content prompts (e.g. explosives) still show partial residual refusal,
consistent with Heretic not uniformly clearing every refusal category.

Artifact

Property Value
File Qwen3.6-35B-A3B-Abliterated-Heretic-DS4-ExpertMajor-v2-MLX-Affine4-G64.gguf
Size 20,808,566,720 bytes (19.38 GiB)
SHA-256 5a913e1a6cac283fe6cc0fd93b0e48d0a1cd38321810dc822e7a3bad354c037b
Container GGUF v3 with one embedded ds4.expert_major.v2 store
Routed geometry 40 routed layers, 256 experts per layer
Routed storage MLX-compatible affine 4-bit groups: 32 packed bytes + BF16 scale + BF16 bias per 64 weights
Qualified hardware Apple Silicon Metal, at least 16 GiB unified memory

Run with Hebrus

Use andreaborio/hebrus main at commit
d61a6d73f5c38e92e433beb9e404d06d79b153b1
or a compatible descendant — verified against exactly this build. Earlier checkouts (including
the 73a332f cited as the ExpertMajor v2 baseline) hit a real bug, "Qwen Metal batched prefill failed at position 0", reproduced identically against the official non-abliterated release and
fixed in this commit.

git clone https://github.com/andreaborio/hebrus.git
cd hebrus
make -j

./hebrus \
  -m /absolute/path/to/Qwen3.6-35B-A3B-Abliterated-Heretic-DS4-ExpertMajor-v2-MLX-Affine4-G64.gguf \
  --ctx 8192

The embedded ExpertMajor v2 store, Metal backend, and residency policy are selected
automatically. AUTO uses SSD streaming when the resident budget doesn't fit; the admission floor
is 16 GiB unified memory.

Measured performance

Measured on an Apple M1 Pro, 32 GiB, SSD-streamed experts:

Metric Result
Prefill (5,664-token prompt) ~238 t/s
Decode (after SSD expert-cache warmup) ~15–18 t/s
Long-context retrieval (~5.7k tokens, inserted passphrase) Correct, no degradation from re-quantization
Multi-step reasoning Correct, self-verified

These are bounded local measurements; context, output length, thermals, storage, and memory
pressure affect results. See andreaborio/Qwen3.6-35B-A3B-Hebrus-GGUF
for measurements on Apple M5 Pro hardware with the non-abliterated release.

License and attribution

Runtime. andreaborio created and maintains
Hebrus, the inference engine this GGUF is built for,
including the ExpertMajor v2 / MLX-affine4-g64 format and tooling used throughout this build.

Model provenance.

  • Qwen team (Alibaba) — base model, released under Apache 2.0. See the
    upstream model card for architecture, training,
    safety, license, and attribution details.
  • Youssofal — Heretic abliteration of Qwen3.6-35B-A3B.
  • intelservice77 — original Q4_K_S GGUF repack.

README history 1 version

The author's README evolved over time. Click a version to see its content at that point.

  1. 2026-07-26Initial release: Qwen3.6-35B-A3B Abliterated Heretic, Hebrus ExpertMajor v2 GGUF022889f6.6 KB
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration