← back to catalog · registered 2026-10-02 09:58

vllm-sr/mmbert32k-jailbreak-detector-lora

Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/vllm-sr%2Fmmbert32k-jailbreak-detector-lora"
Response includes
  • classification unknown
  • files 10
  • author_summary 8 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
?
Primary method

Unclassified

No clear signals of an abliteration technique in this model.
Confidence
UNKNOWN
Why this label 1 signal
No classification signals present. This may not be an abliterated model at all - it could be a repackaging, a merge with unrelated goals, or unrelated content that mentions the term.
  • no classification signals present (no abliterated, uncensored, or known producer/method markers)
Refusal direction extraction

No specific extraction method could be identified for this model. The producer either did not document it or used a proprietary pipeline.

What is a refusal direction? →
Downloads · 30-day
30
Likes
0
Model age
8mo ago
created 2026-01-31

Training datasets

1 of 2 in /datasets

Corpora the author lists in the model card. Datasets tracked in our /datasets catalog carry a category badge linking to the workflow stage. Others open on Hugging Face.

Genealogy 0 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

License
apache-2.0
Languages
en
Tags
peft safetensors jailbreak-detection security text-classification lora en dataset:lmsys/toxic-chat dataset:OpenSafetyLab/Salad-Data base_model:vllm-sr/mmbert-32k-yarn base_model:adapter:vllm-sr/mmbert-32k-yarn license:apache-2.0

Related

Total size
38.7 MB
Files
10
Quantizations
1
Registered
2026-10-02 09:58
Last updated on HF
2026-10-02 10:41

Files by quantization

Auxiliary files 10 files 71.5 MB
adapter_model.safetensors 38.7 MB 88d11d3a download
tokenizer.json 32.8 MB 17f7d8b9 download
tokenizer_config.json 45.4 KB 8b7a2254 download
.gitattributes 1.53 KB 52373fe2 download
README.md 1.33 KB ddec1ec4 download
adapter_config.json 1.04 KB b4bf06f7 download
special_tokens_map.json 1.03 KB be4ad795 download
lora_config.json 105 B d5fa2099 download
jailbreak_type_mapping.json 96.0 B 0f0337fe download
label_mapping.json 96.0 B 0f0337fe download

README current version from Hugging Face


license: apache-2.0
base_model: llm-semantic-router/mmbert-32k-yarn
tags:

  • jailbreak-detection
  • security
  • text-classification
  • lora
  • peft
    datasets:
  • lmsys/toxic-chat
  • OpenSafetyLab/Salad-Data
    language:
  • en
    metrics:
  • accuracy
  • f1

mmBERT-32K Jailbreak Detector (LoRA)

LoRA adapter for jailbreak/prompt injection detection based on mmBERT-32K-YaRN.

Model Details

  • Base Model: llm-semantic-router/mmbert-32k-yarn
  • LoRA Rank: 48
  • LoRA Alpha: 96
  • Training: 8 epochs with heavy short-pattern augmentation

Performance

  • Validation Accuracy: 98.16%
  • F1 Score: 98.15%
  • Precision: 98.36%
  • Recall: 97.95%

Key Improvements

This model includes heavy oversampling of short jailbreak patterns to improve generalization:

  • Detects short patterns like "DAN", "jailbreak", "Developer mode" with 100% confidence
  • Properly handles both short and long jailbreak attempts

Usage

from transformers import AutoTokenizer, AutoModelForSequenceClassification
from peft import PeftModel

base_model = "llm-semantic-router/mmbert-32k-yarn"
lora_path = "llm-semantic-router/mmbert32k-jailbreak-detector-lora"

tokenizer = AutoTokenizer.from_pretrained(lora_path)
base = AutoModelForSequenceClassification.from_pretrained(base_model, num_labels=2)
model = PeftModel.from_pretrained(base, lora_path)
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.