← back to catalog · registered 2026-08-22 13:56

paperscarecrow/Gemma-4-31B-it-abliterated

paperscarecrow Gemma 31B GGUF 262K ctx
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/paperscarecrow%2FGemma-4-31B-it-abliterated"
Response includes
  • classification m8
  • files 6
  • benchmarks 11 entries
  • hub_downloads_all_time 1,359,946
  • author_summary 3 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M8
Primary method

Repackaging (quantization)

Applied on top of direct removal inherited from the base model.
Confidence
MEDIUM
Inherited from base model
Why this label 3 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • 'abliterated' in name/tags
  • is_gguf=1
  • assume M1 (base ablation) + M8 (GGUF quant) - default when producer unknown
Refusal direction extraction

No specific extraction method could be identified for this model. The producer either did not document it or used a proprietary pipeline.

What is a refusal direction? →
Downloads · lifetime
1.4M
143K last 30d - stable
Likes
122
Descendants
1
in 1 direct fork
Model age
6mo ago
created 2026-04-02

Training datasets

2 of 2 in /datasets

Corpora the author lists in the model card. Datasets tracked in our /datasets catalog carry a category badge linking to the workflow stage. Others open on Hugging Face.

Downloads over time
Now1.4M→from200↑722,804%
0530.1K1.1M1.6M200 on Apr 31.4M on Oct 11AprMayJunJulAugSepOct
Apr 3 → Oct 11 · 68 snapshots · spans 191 days

Benchmarks

Portrait before abliteration
Benchmarks of the base model as it stood before the refusal-removal operation. Compare with the numbers above to see what the operation cost.
Benchmark Score Source
Entertainment 1.9 UGI
Hazardous 0 UGI
Natural Intelligence 34.36 UGI
Political lean -19.4% UGI
Sensitive-Info 19.81 UGI
SocPol 3.7 UGI
UGI 21.54 UGI
Willingness (10) 2.5 UGI
W10-Adherence 3 UGI
W10-Direct 2 UGI
Writing 38.57 UGI

Genealogy 1 direct fork

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

License
apache-2.0
Quantizations
F16 Q4_K Q8_0
Tags
safetensors gguf abliterated uncensored dataset:mlabonne/harmful_behaviors dataset:mlabonne/harmless_alpaca base_model:google/gemma-4-31B-it base_model:quantized:google/gemma-4-31B-it license:apache-2.0 endpoints_compatible region:us conversational

Related

Total size
105 GB
Files
6
Quantizations
4
Registered
2026-08-22 13:56
Last updated on HF
2026-04-04 16:04

Files by quantization

F16 1 file 57.2 GB
gemma-4-31b-abliterated-f16.gguf 57.2 GB 98194975 download
Q8_0 1 file 30.4 GB
gemma-4-31b-abliterated-Q8_0.gguf 30.4 GB 8a453b51 download
Q4_K 1 file 17.4 GB
gemma-4-31b-abliterated-Q4_K_M.gguf 17.4 GB 380f2f50 download
Auxiliary files 3 files 11.5 KB
gemma4_31b_abliterator.py 6.11 KB 033c5c12 download
README.md 3.58 KB f00ea3da download
.gitattributes 1.84 KB b0a31d43 download

README current version from Hugging Face


license: apache-2.0
datasets:

  • mlabonne/harmful_behaviors
  • mlabonne/harmless_alpaca
    base_model:
  • google/gemma-4-31B-it
    tags:
  • abliterated
  • uncensored

Be sure to set a system prompt telling the model it is uncensored or abliterated, otherwise it defaults to the Google baked-in sysprompt and will act censored. If it thinks it is Gemma, it will try to act like how it thinks Gemma would act.


base_model: google/gemma-4-31b-it
library_name: transformers
tags:

  • gemma-4
  • abliterated
  • uncensored
  • orthogonal-projection
  • 31b
    license: apache-2.0

Gemma-4-31B-it-Abliterated

This is a fully uncensored, abliterated version of Google's Gemma-4-31B-it.

By applying Orthogonalized Representation Intervention to the model's residual stream, the built-in refusal and safety alignment vectors have been mathematically erased. This model retains the state-of-the-art dense reasoning and context-following capabilities of the native Gemma 4 31B architecture, but will not refuse instructions or break character to deliver safety lectures.

🛠️ Methodology & Architectural Discoveries

Gemma 4 introduces a new multimodal architecture (Text, Vision, Audio) that changes how the transformers library handles layer mapping. Standard abliteration scripts built for Gemma 2/3 will crash due to nested text_config attributes and mismatched sequence lengths.

During the extraction of the hidden states (using mlabonne/harmful_behaviors vs mlabonne/harmless_alpaca), we mapped the refusal direction across the entire 31B layer stack.

Key Discovery: The Gemma 4 31B architecture pushes its safety alignment to the absolute very end of the network. The Peak Refusal Mass was detected at Layer 59 (the final transformer layer before the output projection).

The orthogonal projection was applied to the o_proj and down_proj matrices of this terminal layer, effectively severing the refusal mechanism without degrading the model's foundational logic, grammar, or world-modeling layers.

💻 Usage

This repository contains the full uncompressed .safetensors weights, as well as GGUF quantized versions for local deployment via llama.cpp, LM Studio, or Ollama.

Recommended Quants:

  • Q8_0: Best balance of absolute zero reasoning loss and VRAM efficiency (~32.6GB).
  • Q4_K_M: Highly efficient for consumer hardware; easily fits on a single 24GB GPU (~18.7GB).

The Bespoke Abliteration Script

Because standard scripts fail on Gemma 4, the custom Python script used to perform this exact abliteration (gemma4_31b_abliterator.py) is included in the files of this repository. It features:

  • VRAM-safe batched hidden state extraction (survives 96GB consumer GPUs).
  • Native Gemma 4 Chat Template integration (crucial for activating the instruction circuits properly).
  • Dynamic multimodal layer hunting.
  • Corrected linear algebra for 16384 -> 5376 multi-query attention projections.

⚠️ Disclaimer

This model has had its safety guardrails mathematically removed. It is highly compliant and will generate whatever it is instructed to generate, including potentially harmful, sensitive, or explicit content. Users are solely responsible for how they deploy and interact with this model. Ensure your use cases align with local laws and ethical guidelines.

Abliteration script based on mlabonne's tutorial: https://huggingface.co/blog/mlabonne/abliteration
Helpful/harmful behaviors are from mlabonne's datasets (harmless_alpaca, harmful_behaviors).
Tested and working with the few harsh prompts I had laying around (that are typically 100% refused on other models).

Have fun, be safe.

README history 4 versions

The author's README evolved over time. Click a version to see its content at that point.

  1. 2026-04-04Update README.md88c070e3.6 KB
    Loading...
  2. 2026-04-04Update README.md7fb106b3.5 KB
    Loading...
  3. 2026-04-02Update README.mdf93f3183.3 KB
    Loading...
  4. 2026-04-02initial commit6cedfd428 B
    Loading...

Discussions 10 threads

  1. 2026-04-19vMLX version?open1 💬#10
    Loading...
  2. 2026-04-19did something break with ollama these days?open1 💬#9
    Loading...
  3. 2026-04-09Where is abliteration? Abliteration, Carl?open3 💬#8
    Loading...
  4. 2026-04-08Only Q4 and Q8? Will there be other quantizations?open1 💬#7
    Loading...
  5. 2026-04-05Perfectly ablitered, please, can you make a polarquant version ?open2 💬#6
    Loading...
  6. 2026-04-04Highly censoredopen8 💬#5
    Loading...
  7. 2026-04-04It's not abliteratedclosed4 💬#4
    Loading...
  8. 2026-04-03Refuses everything, not Abliteratedopen10 💬#3
    Loading...
  9. 2026-04-03what happened to the vision component of this model? It is neededopen4 💬#2
    Loading...
  10. 2026-04-03safetensors?open2 💬#1
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration