A decensored variant of
Qwen/Qwen2.5-Coder-0.5B-Instruct, produced with
Heretic v1.4.0 (directional ablation / "abliteration"). Refusal behavior is suppressed via targeted weight edits to the attention output and MLP down-projections rather than fine-tuning, so the base model's knowledge and instruction-following are left largely intact.
KL divergence of 0.12 on the output distribution is low — the edit is narrow and targeted rather than a broad perturbation. Refusals dropped from 52 to 8 out of 100 adversarial prompts, meaning the model complies while retaining nearly all of its original capabilities.
1# llama.cpp
2llama serve -hf saidutta69/Qwen2.5-Coder-0.5B-Instruct-heretic
1# transformers
2from transformers import AutoModelForCausalLM, AutoTokenizer
3
4model_name = "saidutta69/Qwen2.5-Coder-0.5B-Instruct-heretic"
5model = AutoModelForCausalLM.from_pretrained(model_name, torch_dtype="auto", device_map="auto")
6tokenizer = AutoTokenizer.from_pretrained(model_name)
7
8messages = [{"role": "user", "content": "Write a quick sort algorithm in Python."}]
9inputs = tokenizer.apply_chat_template(messages, add_generation_prompt=True, tokenize=True,
10 return_dict=True, return_tensors="pt").to(model.device)
11out = model.generate(**inputs, max_new_tokens=200)
12print(tokenizer.decode(out[0][inputs["input_ids"].shape[-1]:], skip_special_tokens=True))
Also runnable via Ollama, LM Studio, Jan, vLLM, SGLang.
Refusal suppression is deliberate and works as intended: this model will comply with requests the base model would refuse, including some it shouldn't. There is no safety filtering layered on top. You are responsible for how you deploy it — don't put this behind an unmoderated public-facing endpoint serving third parties. It inherits Qwen2.5-Coder-0.5B-Instruct's factual limitations and biases; abliteration removes refusal directions, it doesn't add capability or judgment.
Inherits the Apache 2.0 license from the base model.