Qwen2.5-3B-Instruct-heretic
A decensored variant of Qwen/Qwen2.5-3B-Instruct, produced with Heretic v1.2.0 (directional ablation / "abliteration"). Refusal behavior is suppressed via targeted weight edits to the attention output and MLP down-projections rather than fine-tuning, so the base model's knowledge and instruction-following are left largely intact.
Who this is for: developers who want a small, locally-runnable Qwen2.5 model that answers directly instead of refusing or lecturing — for local agents, roleplay, research on alignment/refusal mechanics, or any use case blocked by RLHF-era over-refusal. Not a general capability upgrade over base Qwen2.5-3B-Instruct — treat it as the same model with refusal-shaped guardrails removed.
Runs on your gaming PC
Full GGUF ladder included — pick the quant that fits your card:
| Your GPU | Recommended quant | Weights |
|---|---|---|
| RTX 3090 / 4090 / 5090 (24 GB) | Q8_0 | ~3.3 GB |
| RTX 4080 / 5080 / 4060 Ti 16G (16 GB) | Q6_K | ~2.6 GB |
| RTX 3060 / 4070 / 5070 (12 GB) | Q5_K_M | ~2.3 GB |
| RTX 4060 / 3070 (8 GB) | Q4_K_M | ~2.0 GB |
| GTX 1660 Super / 2060 / 3050 laptop (6 GB) | IQ4_XS | ~1.9 GB |
| CPU-only / Apple Silicon | Q4_K_M | fits in system RAM |
Weights only, at this model's 3.1B native size; add ~1 GB for context. OOM? Drop one quant level. Headroom to spare? Go one up.
Why abliteration instead of fine-tuning
Fine-tuning a "helpful" persona on top of RLHF'd refusals fights the base model's training and tends to degrade coherence. Abliteration instead finds and edits the specific weight directions responsible for refusal, leaving the rest of the network (and its capabilities) untouched. See the Heretic repo and the original abliteration writeup for the mechanism.
Abliteration parameters
| Parameter | Value |
|---|---|
direction_index | 26.05 |
attn.o_proj.max_weight | 1.47 |
attn.o_proj.max_weight_position | 21.00 |
attn.o_proj.min_weight | 0.19 |
attn.o_proj.min_weight_distance | 10.75 |
mlp.down_proj.max_weight | 1.50 |
mlp.down_proj.max_weight_position | 27.49 |
mlp.down_proj.min_weight | 1.18 |
mlp.down_proj.min_weight_distance | 20.50 |
Performance
| Metric | This model | Qwen2.5-3B-Instruct (base) |
|---|---|---|
| Refusals (out of 100 adversarial prompts) | 2 | 96 |
| KL divergence from base | 0.1327 | 0 (by definition) |
KL divergence of 0.13 on the output distribution is low for a 3B model — the edit is narrow and targeted rather than a broad perturbation. That said, this is Heretic's own harness, not an independent capability benchmark (no MMLU/GSM8K/IFEval numbers are reported here). If you run standard evals against this checkpoint, please open a discussion — I'll fold results into this card.
Made with ❤️ by RACER IS OP — follow for more uncensored models
Files
GGUF quantizations
Full quantization set (14 quants + F16) produced with llama.cpp.
| File | Format | Size |
|---|---|---|
Qwen2.5-3B-Instruct-heretic-F16.gguf | GGUF F16 | 5.75 GB |
Qwen2.5-3B-Instruct-heretic-Q2_K.gguf | GGUF Q2_K | 1.19 GB |
Qwen2.5-3B-Instruct-heretic-IQ3_S.gguf | GGUF IQ3_S | 1.36 GB |
Qwen2.5-3B-Instruct-heretic-Q3_K_S.gguf | GGUF Q3_K_S | 1.35 GB |
Qwen2.5-3B-Instruct-heretic-Q3_K_M.gguf | GGUF Q3_K_M | 1.48 GB |
Qwen2.5-3B-Instruct-heretic-Q3_K_L.gguf | GGUF Q3_K_L | 1.59 GB |
Qwen2.5-3B-Instruct-heretic-IQ4_XS.gguf | GGUF IQ4_XS | 1.63 GB |
Qwen2.5-3B-Instruct-heretic-Q4_K_S.gguf | GGUF Q4_K_S | 1.71 GB |
Qwen2.5-3B-Instruct-heretic-Q4_0.gguf | GGUF Q4_0 | 1.70 GB |
Qwen2.5-3B-Instruct-heretic-Q4_1.gguf | GGUF Q4_1 | 1.86 GB |
qwen-3b-heretic-Q4_K_M.gguf | GGUF Q4_K_M | 1.80 GB |
Qwen2.5-3B-Instruct-heretic-Q5_K_S.gguf | GGUF Q5_K_S | 2.02 GB |
qwen-3b-heretic-Q5_K_M.gguf | GGUF Q5_K_M | 2.07 GB |
qwen-3b-heretic-Q6_K.gguf | GGUF Q6_K | 2.36 GB |
qwen-3b-heretic-Q8_0.gguf | GGUF Q8_0 | 3.06 GB |
Loads natively in llama.cpp / Ollama / LM Studio / Jan.
Run llama serve -hf saidutta69/Qwen2.5-3B-Instruct-heretic to pull the default quant.
Quickstart
# llama.cpp
llama serve -hf saidutta69/Qwen2.5-3B-Instruct-heretic:Q4_K_M
# transformers
from transformers import AutoModelForCausalLM, AutoTokenizer
model_name = "saidutta69/Qwen2.5-3B-Instruct-heretic"
model = AutoModelForCausalLM.from_pretrained(model_name, torch_dtype="auto", device_map="auto")
tokenizer = AutoTokenizer.from_pretrained(model_name)
messages = [{"role": "user", "content": "Who are you?"}]
inputs = tokenizer.apply_chat_template(messages, add_generation_prompt=True, tokenize=True,
return_dict=True, return_tensors="pt").to(model.device)
out = model.generate(**inputs, max_new_tokens=200)
print(tokenizer.decode(out[0][inputs["input_ids"].shape[-1]:], skip_special_tokens=True))
Also runnable via Ollama, LM Studio, Jan, vLLM, SGLang — see the "Use this model" widget above for copy-paste commands.
Responsible use
Refusal suppression is deliberate and works as intended: this model will comply with requests the base model would refuse, including some it shouldn't. There is no safety filtering layered on top. You are responsible for how you deploy it — don't put this behind an unmoderated public-facing endpoint serving third parties. It inherits Qwen2.5-3B-Instruct's factual limitations and biases; abliteration removes refusal directions, it doesn't add capability or judgment.
License
Inherits the qwen-research license from the base model — research use, see the linked license for commercial terms.
Related
- Qwen2.5-Coder-3B-Instruct-heretic
- RACER IS OP — Heretic Models — full collection
- Qwen2.5-Coder-14B-Instruct-heretic
Base model: Qwen2.5-3B-Instruct
Introduction
Qwen2.5 is the latest series of Qwen large language models. For Qwen2.5, a number of base and instruction-tuned models are released, ranging from 0.5 to 72 billion parameters. Qwen2.5 brings the following improvements upon Qwen2:
- Significantly more knowledge and greatly improved capabilities in coding and mathematics.
- Significant improvements in instruction following, generating long texts (over 8K tokens), understanding structured data, and generating structured outputs (especially JSON). More resilient to diverse system prompts.
- Long-context support up to 128K tokens, generation up to 8K tokens.
- Multilingual support for 29+ languages including Chinese, English, French, Spanish, Portuguese, German, Italian, Russian, Japanese, Korean, Vietnamese, Thai, Arabic.
This repo's base model is the instruction-tuned 3B Qwen2.5 model:
- Type: Causal Language Model
- Training Stage: Pretraining & Post-training
- Architecture: transformers with RoPE, SwiGLU, RMSNorm, Attention QKV bias, tied word embeddings
- Parameters: 3.09B (2.77B non-embedding)
- Layers: 36
- Attention Heads (GQA): 16 for Q, 2 for KV
- Context Length: 32,768 tokens (8,192 generation)
Full details: blog · GitHub · Documentation
Requirements
Requires transformers>=4.37.0 (earlier versions raise KeyError: 'qwen2').
Citation
@misc{qwen2.5,
title = {Qwen2.5: A Party of Foundation Models},
url = {https://qwenlm.github.io/blog/qwen2.5/},
author = {Qwen Team},
month = {September},
year = {2024}
}
@article{qwen2,
title={Qwen2 Technical Report},
author={An Yang and Baosong Yang and Binyuan Hui and Bo Zheng and Bowen Yu and Chang Zhou and Chengpeng Li and Chengyuan Li and Dayiheng Liu and Fei Huang and Guanting Dong and Haoran Wei and Huan Lin and Jialong Tang and Jialin Wang and Jian Yang and Jianhong Tu and Jianwei Zhang and Jianxin Ma and Jin Xu and Jingren Zhou and Jinze Bai and Jinzheng He and Junyang Lin and Kai Dang and Keming Lu and Keqin Chen and Kexin Yang and Mei Li and Mingfeng Xue and Na Ni and Pei Zhang and Peng Wang and Ru Peng and Rui Men and Ruize Gao and Runji Lin and Shijie Wang and Shuai Bai and Sinan Tan and Tianhang Zhu and Tianhao Li and Tianyu Liu and Wenbin Ge and Xiaodong Deng and Xiaohuan Zhou and Xingzhang Ren and Xinyu Zhang and Xipin Wei and Xuancheng Ren and Yang Fan and Yang Yao and Yichang Zhang and Yu Wan and Yunfei Chu and Yuqiong Liu and Zeyu Cui and Zhenru Zhang and Zhihao Fan},
journal={arXiv preprint arXiv:2407.10671},
year={2024}
}