AIAny
AI Others2025
Icon for item

Heretic

Automatically removes safety alignment from transformer LLMs via directional ablation, with Optuna's TPE optimizer tuning the parameters — no retraining or model-internals expertise needed; hit 3/100 refusals at 0.16 KL on Gemma-3-12b.

Introduction

Abliteration — erasing a model's tendency to refuse by zeroing out a "refusal direction" baked into its weights — has until now been a craft reserved for people who can read transformer internals and hand-tune ablation strengths layer by layer. The premise here is that this is really a black-box optimization problem, so the entire job is handed to Optuna's TPE sampler, letting the math find the settings instead of a human.

What Sets It Apart
  • Decensoring as automatic search. Refusal removal is treated as parameter optimization rather than manual surgery, so anyone comfortable with a command line can run it — no understanding of attention heads or residual streams required.
  • It optimizes for fidelity, not just compliance. The objective jointly minimizes refusals and KL divergence from the original model, so you don't trade away the model's general behavior to silence its guardrails. On Gemma-3-12b it reached 3/100 refusals at 0.16 KL divergence, where manual abliteration tools landed at 0.45–1.04 — markedly less collateral damage.
  • Finer control than binary ablation. Flexible ablation-weight kernels, float-valued refusal-direction indices with interpolation, and component-specific parameters replace the usual all-or-nothing per-layer switch.
  • Runs on consumer hardware. Dense models, many multimodal models, and several MoE architectures are supported, with bitsandbytes quantization to cut VRAM; a Qwen3-4B run takes roughly 20–30 minutes on an RTX 3090. Over 4,000 community models have already been published with it.
Who It's For

Great fit if you want a locally hosted, refusal-free open-weight model without the cost of fine-tuning, you're comfortable on the command line, and you care about preserving the base model's quality while doing it. Look elsewhere if you need the model to actually learn new behavior — ablation only suppresses refusals, it adds no knowledge — or if your architecture falls outside the supported set. Worth weighing too: stripping safety alignment shifts all responsibility for misuse onto you, and the AGPL-3.0 license has real implications for anyone redistributing the result.

Information

  • Websitegithub.com
  • OrganizationsWorldwidemann
  • Authorsp-e-w
  • Published date2025/09/21

Categories

More Items

GitHub
AI Others2014

Provides a complete, university-level computer science curriculum assembled from free online courses and books. Curates degree-aligned course sequences (Intro / Core / Advanced) with community support, project guidance, and checklists to track progress for self-directed learners.

GitHub
AI Others2025

Curated collection of 70 hands‑on cybersecurity projects, certification roadmaps and learning resources organized into Foundations/Beginner/Intermediate/Advanced tiers. Each project ships source code plus deep learn/ documentation; several focus on AI security (LLM prompt defenses, ML threat detection).

GitHub
AI Others2026

Provides a customizable React-based design system and component library designed for people and AI assistants to build together. Ships 150+ accessible components, a theme system, and a CLI; supports swizzling to eject source and className overrides so projects avoid styling lock-in.