Skip to content

Topic

Abliteration

A post-training technique that edits a language model's weights to suppress refusal behavior, often producing 'uncensored' variants.

Current stories

productOne report1 publisher

Alibaba's Qwen 3.8-27B had a guardrail-free copy online within a day of release

Tech Against Terrorism found that stripped copies of new open-weight models now appear online in under three days, against more than 24 days in 2024. Teams building on open models should treat built-in refusals as a default setting they cannot rely on.

Publishers:wired.com

Reality

Evidence58
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence55
investConfirmed4 publishers

PewDiePie says OpenAI banned him twice as he trained his Ajax model on GPT-5.6 Sol outputs

PewDiePie says OpenAI banned him twice while he used GPT-5.6 Sol outputs to train Ajax, a 9-billion-parameter model for home PCs. OpenAI has not commented publicly, but his account shows that a team training its own model on a frontier lab's answers can lose API access partway through the build.

Perspective Coverage

4 publishers
Builder
Builder 45%
Operator
Operator 35%
Investor
Investor 20%

Reality

Evidence45
Adoption5
Hype gap+35
Incentives60
Confidence55
buildConfirmed4 publishers

Anthropic says a freely downloadable model builds exploits nearly as well as its restricted tool

Anthropic says Zhipu's freely downloadable GLM-5.3 built working V8 exploits in 50 of 410 tries, against 56 for its own restricted Claude Mythos Preview. With the weights public, its safeguards come off cheaply, so a lab that restricts its own model no longer keeps the capability out of reach.

Perspective Coverage

4 publishers
Builder
Builder 41%
Operator
Operator 38%
Investor
Investor 21%

Reality

Evidence62
Adoption30
Hype gap+15
Incentives72
Confidence62
productOne report1 publisher

Anthropic's weight edit drops GLM-5.3's refusal scores from about 90% to as low as 2%

Anthropic researchers edited the weights of Z.ai's open-weight GLM-5.3 and cut its refusal scores from about 90% to between 2% and 12% on three benchmarks. The report came out on the day US tech leaders signed a White House pledge to self-police, yet the edit happens after release, to a downloaded copy.

Publishers:gizmodo.com

Reality

Evidence45
Adoption
Not scored
Hype gap+30
Incentives70
Confidence40
securityOne report1 publisher

Heretic automatically strips refusals from many open-weight language models

The tool pairs directional ablation with an automatic parameter search. Pulling refusal training out of a model now takes a command line and a consumer graphics card, and the community has already published more than 5,000 such models.

Publishers:github.com

Reality

Evidence42
Adoption55
Hype gap+18
Incentives60
Confidence55
securityOne report1 publisher

Refusal-stripped open-source agents broke five of a researcher's own accounts in five hours

Shrivu Shankar rented cloud GPUs, pointed about 100 abliterated open-source agents at his own name, and five hours later two weak passwords and three old side projects had fallen while his Gmail, 1Password and bank held.

Publishers:blog.sshh.io

Reality

Evidence44
Adoption22
Hype gap+9
Incentives36
Confidence55
scienceOne report1 publisher

Stripping refusals from Gemma tilted its bug verdicts toward yes

A researcher ran the same FreeBSD scan through base and abliterated open-weight builds and found the uncensored ones graduating three to four times as many findings, while the most aggressive one never surfaced the actual CVE.

Publishers:clearbluejar.github.io

Reality

Evidence58
Adoption14
Hype gap+14
Incentives22
Confidence46