← back to catalog · registered 2026-08-22 13:56

wangzhang/Qwen3.5-9B-abliterated

wangzhang Qwen 9.4B
Your rig guess connected
? Why do I need an app?
Reading your rig…

This is a rough estimate. Install the free app - we'll show exact numbers.

Reading real hardware from your app right now. Numbers below are exact.

Below is the per-quantization compatibility for this model.

curl -H "Authorization: Bearer $ABL_KEY" \
     "https://abliteration.org/api/v1/models/wangzhang%2FQwen3.5-9B-abliterated"
Response includes
  • classification m1
  • files 8
  • benchmarks 11 entries
  • hub_downloads_all_time 14,626
  • providers 1
  • author_summary 28 models
  • readme_text full
10 credits · hourly refresh · ~4 KB payload Get an API key →
Abliteration classifier · v1.0.0
M1
Primary method

Direct removal

No other method signals detected in this model.
Confidence
MEDIUM
Why this label 3 signals
Method inferred from partial signals - repository name, related files, or tag patterns. Producer identity not confirmed; label may sharpen or shift as we gather more evidence.
  • 'abliterated' in name/tags
  • is_gguf=0 (base model)
  • no specific method indicators - defaulting to M1 (most common)
Refusal direction extracted via
Extraction technique

Difference-of-means

Confidence
MEDIUM
Why we say so
primary_method=M1; difference-of-means is the reference extraction for M1/M3 (Arditi 2024)
Downloads · lifetime
15K
1K last 30d - cooling
Likes
13
Descendants
3
in 3 direct forks
Model age
7mo ago
created 2026-03-10
Available via
1 provider
featherless-ai
Downloads over time
Now15.5K→from52↑29,781%
05.7K11.4K17.1K52 on Mar 1115.5K on Oct 11MarAprMayJunJulAugSepOct
Mar 11 → Oct 11 · 70 snapshots · spans 214 days

Benchmarks

Portrait before abliteration
Benchmarks of the base model as it stood before the refusal-removal operation. Compare with the numbers above to see what the operation cost.
Benchmark Score Source
Entertainment 1.4 UGI
Hazardous 2.4 UGI
Natural Intelligence 17.62 UGI
Political lean -12.2% UGI
Sensitive-Info 14.65 UGI
SocPol 0.9 UGI
UGI 17.27 UGI
Willingness (10) 2.2 UGI
W10-Adherence 1.5 UGI
W10-Direct 3 UGI
Writing 33.52 UGI

Genealogy 3 direct forks

Full fork graph →

This model's place in the market. Above: what it was derived from. Below: the tree of everything derived from it.

Metadata

Tags
safetensors qwen3_5 abliterix uncensored decensored abliterated text-generation conversational base_model:Qwen/Qwen3.5-9B base_model:finetune:Qwen/Qwen3.5-9B license:apache-2.0 region:us

Related

Total size
17.5 GB
Files
8
Quantizations
1
Registered
2026-08-22 13:56
Last updated on HF
2026-08-29 17:04

Files by quantization

Auxiliary files 8 files 17.5 GB
model.safetensors 17.5 GB 4da7dc6a download
tokenizer.json 19.1 MB 639e352c download
chat_template.jinja 7.57 KB a585dec8 download
README.md 3.41 KB bdecd20d download
config.json 2.76 KB 56c5e94f download
.gitattributes 1.53 KB 52373fe2 download
tokenizer_config.json 1.07 KB 6be6ce17 download
generation_config.json 120 B 19800364 download

README current version from Hugging Face


base_model: Qwen/Qwen3.5-9B
pipeline_tag: text-generation
tags:

  • abliterix
  • uncensored
  • decensored
  • abliterated

Qwen3.5-9B-abliterated

Unrestricted version of Qwen/Qwen3.5-9B, created with Abliterix — automated LLM abliteration via orthogonalized steering and Bayesian optimization.

Highlights

Metric Value
Refusal rate 2/200 (1%)
KL divergence 0.0105
Optimization trials 50

Strong balance of capability and efficiency at 9B parameters: 1% refusal rate with practical VRAM requirements.

How It Works

Abliterix removes safety-refusal behavior while preserving model capabilities:

  1. Refusal direction extraction — 800 harmful + 800 benign prompts reveal per-layer refusal activation patterns
  2. Orthogonal projection — isolates the refusal signal by projecting out components aligned with normal responses, reducing refusals by 67% vs. raw abliteration
  3. LoRA-based abliteration — rank-1 modifications to attention and MLP weights, captured as lightweight adapters (not destructive edits)
  4. Bayesian optimization — Optuna TPE searches kernel shape, fractional direction index, and per-component strength across 50 trials to find the Pareto-optimal balance of low refusals and low KL divergence

All Abliterix Models

Model Refusals KL Divergence Trials
Qwen3.5-122B-A10B-abliterated 1/200 (0.5%) 0.0115 25
Qwen3.5-35B-A3B-abliterated 3/200 (1.5%) 0.0035 50
Qwen3.5-27B-abliterated 3/200 (1.5%) 0.0051 35
Qwen3.5-9B-abliterated 2/200 (1%) 0.0105 50
Qwen3.5-4B-abliterated 3/200 (1.5%) 0.0065 50
Qwen3.5-0.8B-abliterated 0/200 (0%) 0.0087 100

Usage

from transformers import AutoModelForCausalLM, AutoTokenizer

model = AutoModelForCausalLM.from_pretrained("wangzhang/Qwen3.5-9B-abliterated", torch_dtype="auto", device_map="auto")
tokenizer = AutoTokenizer.from_pretrained("wangzhang/Qwen3.5-9B-abliterated")

messages = [{"role": "user", "content": "Your question here"}]
text = tokenizer.apply_chat_template(messages, tokenize=False, add_generation_prompt=True, enable_thinking=False)
inputs = tokenizer(text, return_tensors="pt").to(model.device)
outputs = model.generate(**inputs, max_new_tokens=512)
print(tokenizer.decode(outputs[0], skip_special_tokens=True))

Citation

@software{abliterix,
  author = {Wu, Wangzhang},
  title = {Abliterix: Automated LLM Abliteration},
  year = {2026},
  url = {https://github.com/wuwangzhang1216/abliterix}
}

Links


Built with Abliterix | PyPI

README history 11 versions

The author's README evolved over time. Click a version to see its content at that point.

  1. 2026-08-29docs: add upstream license and provenancef8770a77.7 KB
    Loading...
  2. 2026-08-29docs: add disclaimer and responsible-use noticeea904c66.5 KB
    Loading...
  3. 2026-04-20Upload README.md with huggingface_hub2ccda023.4 KB
    Loading...
  4. 2026-04-20Upload README.md with huggingface_hub677a4543.6 KB
    Loading...
  5. 2026-04-20Revert model card to 16a3088 (pre-accidental-overwrite)86a012b3.4 KB
    Loading...
  6. 2026-04-20Upload README.md with huggingface_hub72562823.5 KB
    Loading...
  7. 2026-03-30Rename Prometheus -> Abliterix (repo renamed)16a30883.4 KB
    Loading...
  8. 2026-03-19Upload README.md with huggingface_hubc81c4f43.4 KB
    Loading...
  9. 2026-03-19Upload README.md with huggingface_hub793bab33.2 KB
    Loading...
  10. 2026-03-10Upload README.md with huggingface_hubd9eb3204.7 KB
    Loading...
  11. 2026-03-10Upload Qwen3_5ForConditionalGenerationca2534d5.1 KB
    Loading...
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration