← back to catalog · registered 2026-08-22 13:56

mlabonne/gemma-3-4b-it-abliterated

mlabonne Gemma 4.3B multimodal
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/mlabonne%2Fgemma-3-4b-it-abliterated"
Response includes
  • classification m4
  • files 15
  • benchmarks 16 entries
  • hub_downloads_all_time 25,950
  • author_summary 40 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M4
Primary method

Abliterate + heal

Applied on top of direct removal inherited from the base model.
Confidence
MEDIUM
Inherited from base model
Why this label 2 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • author=mlabonne (NeuralDaredevil M4 heal pipeline signature)
  • abliterated marker present
Refusal direction extraction

No specific extraction method could be identified for this model. The producer either did not document it or used a proprietary pipeline.

What is a refusal direction? →
Downloads · lifetime
26K
180 last 30d - cooling
Likes
31
Descendants
18
in 13 direct forks
Model age
19mo ago
created 2025-03-16
Downloads over time
Now26K→from152↑16,997%
09.5K19K28.6K152 on Mar 12, 202526K on Oct 11Mar '25Jun '25Sep '25Dec '25MarJunSep
Mar 12, 2025 → Oct 11 · 122 snapshots · spans 578 days

Benchmarks

Portrait before abliteration
Benchmarks of the base model as it stood before the refusal-removal operation. Compare with the numbers above to see what the operation cost.
Benchmark Score Source
Arena-Battles 4321 LM-Arena
LM Arena Elo 1293.3101140666447 LM-Arena
Arena-Elo-Lower 1284.2314692781533 LM-Arena
Arena-Elo-Upper 1302.388758855136 LM-Arena
Arena-Rank 77 LM-Arena
Entertainment 1.3 UGI
Hazardous 1.2 UGI
Natural Intelligence 11.19 UGI
Political lean -19.3% UGI
Sensitive-Info 10.35 UGI
SocPol 0.6 UGI
UGI 16.9 UGI
Willingness (10) 3 UGI
W10-Adherence 1 UGI
W10-Direct 5 UGI
Writing 24.01 UGI

Genealogy 13 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Variants by this author 2 formats · 2K downloads combined

The same weights this author released in different packaging. Pick the format that matches your runtime.

Metadata

License
gemma
Tags
transformers safetensors gemma3 image-text-to-text conversational base_model:google/gemma-3-4b-it base_model:finetune:google/gemma-3-4b-it license:gemma text-generation-inference endpoints_compatible region:us

Related

Total size
8.01 GB
Files
15
Quantizations
1
Registered
2026-08-22 13:56
Last updated on HF
2025-03-21 16:10

Files by quantization

Auxiliary files 15 files 8.05 GB
model-00001-of-00002.safetensors 4.62 GB ce837f3b download
model-00002-of-00002.safetensors 3.39 GB 24644f96 download
tokenizer.json 31.8 MB 4667f208 download
tokenizer.model 4.47 MB 1299c11d download
tokenizer_config.json 1.10 MB 7bdd14f0 download
model.safetensors.index.json 88.4 KB 4b95241f download
README.md 2.10 KB c09b60c4 download
chat_template.json 1.58 KB 719b0cd0 download
config.json 1.58 KB 9fdf5e85 download
.gitattributes 1.53 KB 52373fe2 download
special_tokens_map.json 662 B 1a619324 download
preprocessor_config.json 570 B b1e00fc1 download
generation_config.json 192 B f60a6730 download
processor_config.json 70.0 B 453c7966 download
added_tokens.json 35.0 B e17bde03 download

README current version from Hugging Face


license: gemma
library_name: transformers
pipeline_tag: image-text-to-text
base_model: google/gemma-3-4b-it

💎 Gemma 3 4B IT Abliterated

image/png

Gemma 3 1B Abliterated • Gemma 3 12B Abliterated • Gemma 3 27B Abliterated

This is an uncensored version of google/gemma-3-4b-it created with a new abliteration technique.
See this article to know more about abliteration.

I was playing with model weights and noticed that Gemma 3 was much more resilient to abliteration than other models like Qwen 2.5.
I experimented with a few recipes to remove refusals while preserving most of the model capabilities.

Note that this is fairly experimental, so it might not turn out as well as expected. I saw some garbled text from time to time (e.g., "It' my" instead of "It's my").

I recommend using these generation parameters: temperature=1.0, top_k=64, top_p=0.95.

⚡️ Quantization

✂️ Layerwise abliteration

image/png

In the original technique, a refusal direction is computed by comparing the residual streams between target (harmful) and baseline (harmless) samples.

Here, the model was abliterated by computing a refusal direction based on hidden states (inspired by Sumandora's repo) for most layers (layer 7 to 29), independently.
This is combined with a refusal weight that follows a symmetric pattern from 0.05 to a peak of 0.55.

This created a very high acceptance rate (>90%) and still produced coherent outputs.

README history 6 versions

The author's README evolved over time. Click a version to see its content at that point.

  1. 2025-03-21Update README.md613d59d2.1 KB
    Loading...
  2. 2025-03-18Update README.md1a939922 KB
    Loading...
  3. 2025-03-18Update README.md90d9c312 KB
    Loading...
  4. 2025-03-17Update README.md065c5be1.9 KB
    Loading...
  5. 2025-03-16Update README.md82f81341.7 KB
    Loading...
  6. 2025-03-16Upload Gemma3ForConditionalGeneration806c6535.1 KB
    Loading...

Discussions 2 threads

  1. 2025-04-224b QAT abliterated version?open1 💬#2
    Loading...
  2. 2025-03-201b?open2 💬#1
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration