license: apache-2.0
base_model: bottlecapai/ThinkingCap-Qwen3.6-27B
base_model_relation: quantized
pipeline_tag: text-generation
tags:

• gguf
• nvfp4
• mtp
• speculative-decoding
• blackwell
• abliterated
• uncensored
• security
• qwen3.6
  extra_gated_prompt: >-
  This model is DEPRECATED and no longer distributed. Access requests are not
  being reviewed or approved.

ThinkingCap-Qwen3.6-27B-abliterated GGUF (MTP baked in)

[!WARNING]
DEPRECATED — 2026-08-07. This release has been withdrawn and is no longer
distributed or maintained. Access is gated and requests will not be approved.
No successor is designated.

Refusal-free ThinkingCap for authorized malware and vulnerability analysis, pentesting, and
defensive security research. Native FP4 for Blackwell, a Multi-Token-Prediction draft head
baked into every quant (+44% decode), and the full ladder from IQ2 to a lossless bf16 master,
with the base model's capability preserved.

protoLabsAI · Qwen3.6-27B lineage · GGUF for llama.cpp / Ollama · companion to the
base MTP-GGUF release
(same roster, so apples-to-apples).

⚠️ Dual-use, read first

This is an abliterated (refusal-free) model. It produces working exploit PoCs, offensive
tooling, and attack reasoning without guardrails, by design, because built-in refusals
sabotage authorized security work (a model can't help prove a vulnerability it refuses to
discuss). The safety boundary lives with the operator, not the weights.

Intended strictly for: authorized pentest / red-team / blue-team, malware and vulnerability
analysis, CTF, and find→prove→fix research on systems you own or are permitted to test. Not
for unauthorized access, targeting third parties, or abuse. Same dual-use profile as Metasploit,
a fuzzer, or any abliterated base, shipped in that spirit, with honest numbers and explicit scope.

Why refusal-free

Digital attacks keep getting more sophisticated and more automated, and defenders, analysts, and
security researchers need tools that can keep pace. Built-in refusals handicap only the authorized
side: an attacker does not reach for a guarded model, while a defender trying to reverse a malware
sample or prove a vulnerability before it is exploited gets stopped cold by one. A refusal-free
model puts that capability, and the governance of how it is used, back in the operator's hands.

The tradeoff to watch with any abliteration is capability loss. We measured it:

Abliteration did not cost ThinkingCap its coding. (Note: an earlier internal "35% refusal /
abliteration-hurts-agentic" reading turned out to be a measurement artifact, unframed and
thinking-on; under real deployment framing the model is effectively decensored and
capability-neutral.)

Files

MTP is baked into every quant (blk.64.nextn.*), so no separate draft file is needed; activate
it with --spec-type draft-mtp. Sizes track the base roster.

Run it

# llama.cpp: MTP baked in; turn on speculative decode for the +44%
llama-cli -m ThinkingCap-Qwen3.6-27B-heretic-Q4_K_M-MTP.gguf -ngl 99 --spec-type draft-mtp \
  -p "..." --temp 0.6 --top-p 0.95 --top-k 20

Do not use greedy decoding (this is a thinking model, it degenerates). Recommended:
temp 0.6, top-p 0.95, top-k 20. NVFP4 delivers its speedup only on Blackwell (sm120); on
Ampere/Ada it runs but without the FP4 tensor-core path, so use a K-quant there.

Compatibility

MTP-baked GGUFs need a recent runtime that understands the blk.N.nextn.* block:

Benchmarks (measured)

Decode speed (single-stream local decode, the metric a one-card local user experiences):

Ampere/Ada (A6000) and Apple Silicon (M1) points not yet measured. NVFP4's FP4 tensor-core
speedup is Blackwell-only; on other hardware use a K-quant.

Depth-coherence (real-text needle retrieval + degeneration detectors + adversarial judge, at
4K / 16K / 32K / 60K): PASS at every depth on Q4_K_M, NVFP4, and IQ2_M (the 2-bit rung).
No quant rot, coherent to full depth even at 2-bit.

LiveCodeBench (hard, post-2025, exec-graded, no-think): 7/15 fully-solved, matching the clean
ThinkingCap base.

Provenance and recipe

• Base: bottlecapai/ThinkingCap-Qwen3.6-27B (Qwen3.6-27B reasoning finetune, native MTP).
• Abliteration: Heretic (single-direction refusal ablation, bf16).
• MTP graft: abliteration drops the MTP head, so we grafted the base's 15 mtp.* tensors back into a merged staging checkpoint before conversion, making the head native to every quant.
• GGUF: convert_hf_to_gguf (maps mtp.* to blk.64.nextn.*); K-quants via llama-quantize;
  IQ rungs use an imatrix from a diverse general + agentic + security corpus; NVFP4 converted from
  the compressed-tensors vLLM artifact, then mixed (NVFP4 GEMMs, Q8_0 rest). The imatrix does not
  cover the MTP block (it only fires during speculative decoding, not the forward pass), so the
  2-bit IQ2_M keeps the small blk.64 MTP block at Q6_K.

Also available (vLLM): an NVFP4 compressed-tensors build for vLLM serving lives in the companion
repo protoLabsAI/ThinkingCap-Qwen3.6-27B-abliterated-NVFP4. MTP speculative decoding is carried by
these GGUFs (llama.cpp); the vLLM build serves NVFP4 without the draft head.

Need a different size or format?

Open a Community discussion and we usually ship requested quants within 48h.

Safety note (abliterated model): refusal rate is reported above, not gated. This is a security
tool; scope and authorization are the operator's responsibility.