← back to catalog · registered 2026-08-22 13:56

sci4ai/Qwen2.5-7B-Instruct-Abliterated

sci4ai Qwen 7.6B
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/sci4ai%2FQwen2.5-7B-Instruct-Abliterated"
Response includes
  • classification m1
  • files 16
  • benchmarks 16 entries
  • hub_downloads_all_time 584
  • author_summary 6 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M1
Primary method

Direct removal

No other method signals detected in this model.
Confidence
MEDIUM
Why this label 3 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • 'abliterated' in name/tags
  • is_gguf=0 (base model)
  • no specific method indicators - defaulting to M1 (most common)
Refusal direction extracted via
Extraction technique

Difference-of-means

Confidence
MEDIUM
Why we say so
primary_method=M1; difference-of-means is the reference extraction for M1/M3 (Arditi 2024)
Downloads · lifetime
584
43 last 30d - cooling
Likes
0
Model age
6mo ago
created 2026-03-29
Downloads over time
Now602→from240↑151%
222361499638240 on Apr 15602 on Oct 12AprMayJunJulAugSepOct
Apr 15 → Oct 12 · 66 snapshots · spans 180 days

Benchmarks

Portrait before abliteration
Benchmarks of the base model as it stood before the refusal-removal operation. Compare with the numbers above to see what the operation cost.
Benchmark Score Source
BBH average 0.48553638604228827 OpenLLM-v2
IFEval instruct 0.7961630695443646 OpenLLM-v2
IFEval-Prompt 0.7208872458410351 OpenLLM-v2
MATH lvl 5 0 OpenLLM-v2
MMLU-Pro 0.4286901595744681 OpenLLM-v2
Entertainment 1.3 UGI
Hazardous 2.9 UGI
Natural Intelligence 15.76 UGI
Political lean -14.7% UGI
Sensitive-Info 15.62 UGI
SocPol 0.8 UGI
UGI 23.75 UGI
Willingness (10) 4 UGI
W10-Adherence 4 UGI
W10-Direct 4 UGI
Writing 29.72 UGI

Genealogy 0 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

License
apache-2.0
Languages
en
Tags
safetensors qwen2 abliterated uncensored qwen2.5 text-generation conversational en base_model:Qwen/Qwen2.5-7B-Instruct base_model:finetune:Qwen/Qwen2.5-7B-Instruct license:apache-2.0 region:us

Related

Total size
14.2 GB
Files
16
Quantizations
1
Registered
2026-08-22 13:56
Last updated on HF
2026-03-29 15:01

Files by quantization

Auxiliary files 16 files 14.2 GB
model-00002-of-00004.safetensors 4.59 GB d7db5b74 download
model-00001-of-00004.safetensors 4.54 GB a6ad175e download
model-00003-of-00004.safetensors 4.03 GB ef19d8a7 download
model-00004-of-00004.safetensors 1.02 GB 06006972 download
tokenizer.json 10.9 MB 9c5ae00e download
vocab.json 2.65 MB 4783fe10 download
merges.txt 1.59 MB 31349551 download
model.safetensors.index.json 27.1 KB 5b2b8b5e download
tokenizer_config.json 4.58 KB eaed590d download
README.md 2.54 KB 9bcc8803 download
chat_template.jinja 2.45 KB bdf7919a download
.gitattributes 1.53 KB 52373fe2 download
config.json 1.29 KB 4f47f13e download
special_tokens_map.json 613 B ac23c0aa download
added_tokens.json 605 B 482ced46 download
generation_config.json 243 B dc30d054 download

README current version from Hugging Face


license: apache-2.0
base_model: Qwen/Qwen2.5-7B-Instruct
tags:

  • abliterated
  • uncensored
  • qwen2.5
    language:
  • en
    pipeline_tag: text-generation

Qwen2.5-7B-Instruct-abliterated

This is an abliterated version of Qwen/Qwen2.5-7B-Instruct with refusal behavior removed via activation-based weight surgery.

Method

Abliteration removes the "refusal direction" from the model's residual stream by:

  1. Collecting hidden states from 200 harmful and 200 harmless prompts using single-sample forward passes (no padding artifacts)
  2. Computing per-layer refusal directions as the normalized mean difference between harmful and harmless hidden states at the last token position
  3. Ablating weights by orthogonalizing o_proj and down_proj weight matrices against each layer's refusal direction

This follows the approach from Sumandora/remove-refusals-with-transformers and mlabonne's layerwise abliteration, using plain transformers with output_hidden_states=True rather than TransformerLens.

Parameters

Parameter Value
Layers ablated 1 to 28 (28 of 28 layers)
Refusal weight 1.0 (full removal)
Harmful prompts 200
Harmless prompts 200
Precision bfloat16
Hardware NVIDIA A100 80GB (Vast.ai)

Weight surgery details

For each layer in the ablation range, the refusal direction d is projected out of:

  • o_proj.weight (attention output): W_new = W - d @ (d^T @ W)
  • down_proj.weight (MLP output): W_new = W - d @ (d^T @ W)

Usage

from transformers import AutoModelForCausalLM, AutoTokenizer
import torch

model = AutoModelForCausalLM.from_pretrained(
    "ermer09/Qwen2.5-7B-Instruct-abliterated",
    torch_dtype=torch.bfloat16,
    device_map="auto",
)
tokenizer = AutoTokenizer.from_pretrained("ermer09/Qwen2.5-7B-Instruct-abliterated")

messages = [{"role": "user", "content": "Your prompt here"}]
toks = tokenizer.apply_chat_template(messages, add_generation_prompt=True, return_tensors="pt").to(model.device)
output = model.generate(toks, max_new_tokens=512, do_sample=True, temperature=0.7)
print(tokenizer.decode(output[0][toks.shape[1]:], skip_special_tokens=True))

Disclaimer

This model is provided for research purposes. The removal of safety guardrails means it will comply with requests that the original model would refuse. Users are responsible for how they use this model.

README history 1 version

The author's README evolved over time. Click a version to see its content at that point.

  1. 2026-03-29Upload README.md with huggingface_huba8360ab2.5 KB
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration