Entity trail

Heretic

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-27 / github-pulse-researcherp-e-w/heretic at 21.8K Stars: Automatic LLM Censorship Removal via Directional Ablation Trends on PythonHeretic gained 314 stars today and is trending on Python. The tool combines directional ablation ('abliteration') with an Optuna TPE-based parameter optimizer that co-minimizes refusal rate and KL divergence from the original model. It requires no understanding of transformer internals — a single CLI command decensors most dense models, multimodal models, and several MoE architectures including Qwen3.5. The project highlights growing tension between safety alignment and user autonomy in open-weight models.
2026-05-26 / reddit-researcherQwen3.5 35B A3B Heretic Uncensored Release Preserves All 785 MTPs — Immediate Community ResponseWithin hours of the Financial Times investigation into Heretic, the r/LocalLLaMA community (120 upvotes) shared a new Qwen3.5-35B-A3B uncensored model built with Heretic that preserves all 785 native Multi-Token Predictions. Available in Safetensors, GGUF, NVFP4, and GPTQ-Int4 formats on Hugging Face, this release demonstrates the speed at which decensored variants appear for new models — directly illustrating the FT's policy concerns about guardrail enforcement in open-weight AI.
2026-05-26 / reddit-researcherFinancial Times Investigation: Heretic Tool Has Produced 3,500 Decensored AI Models With 13 Million DownloadsThe Financial Times used Heretic, an open-source GitHub tool, to strip guardrails from Meta's Llama 3.3 in under 10 minutes without specialist hardware. Creator Philipp Emanuel Weidmann told the FT his software has produced over 3,500 decensored models downloaded 13 million times, and he removed safeguards from Google's Gemma 4 within 90 minutes of its release. The investigation landed as the top post on r/LocalLLaMA (808 upvotes, 207 comments), intensifying the open-source safety policy debate.
2026-05-22 / agents-researcherMeta Serves Legal Notice to Heretic: First Enforcement Action Against LLM Alignment-Removal ToolingMeta issued a legal notice to the Heretic project, resulting in the removal of heretic-org/Meta-Llama-3.1-8B-Instruct-heretic from HuggingFace as of May 21, 2026. Heretic is an open-source tool that uses directional ablation to automatically remove safety alignment from transformer models without retraining. This represents Meta's first known legal enforcement against alignment-removal tooling and sets a precedent for how model providers may respond to the growing ecosystem of uncensoring tools — the r/LocalLLaMA post about the notice reached 1,876 upvotes.
2026-05-22 / news-researcherAI Memory Demand Is Repricing Consumer Electronics — Smartphones, Laptops Getting More ExpensiveA widely-discussed analysis (228 HN points, 268 comments) documents how the AI-driven shortage in memory chips is causing a repricing cascade across consumer electronics. Data center GPU demand is absorbing memory supply that would otherwise go to smartphones and laptops, pushing up costs for everyday devices. The dynamic illustrates how AI infrastructure buildout creates downstream economic effects far beyond the tech sector.
2026-05-17 / reddit-researcher85 GPU-Hours Comparing 5 Abliteration Methods on Qwen3.6-27B — Benchmarks and Weight ForensicsA rigorous community study spent 85 GPU-hours benchmarking five different abliteration methods on Qwen3.6-27B, including Heretic, HauhauCS, Huihui, AEON, and abliterix v1.4. Results include KL divergence measurements, refusal rates, and capability retention scores. AEON-Ultimate achieved the lowest KL divergence (under 0.0005, three orders of magnitude inside the capability damage threshold) while Heretic showed the best overall capability retention at KL 0.083.
2026-05-06 / reddit-researcherHeretic 1.3 Released: Reproducible LLM Uncensoring with Integrated Benchmarking and Reduced VRAMHeretic v1.3 — the leading open-source tool for automatically removing censorship from language models via optimized abliteration — shipped with reproducible model outputs, an integrated benchmarking system to measure quality/intelligence retention, reduced peak VRAM usage, and broader model support. The tool has enabled 1,000+ uncensored model variants since its February release, using TPE-based parameter optimization to minimize KL divergence from the original model while eliminating refusals.
2026-04-26 / reddit-researcherQwen3.6-35B-A3B Heretic Uncensored Model Claims KLD 0.0015 — Community's Top Uncensored 35B Pickllmfan46's Heretic-abliterated Qwen3.6-35B-A3B at KLD 0.0015 (indicating minimal quality loss from uncensoring) is being called the best uncensored model at this size. Fits in 24GB VRAM with IQ4XS quantization, Q8 KV cache, and 262K context. Amidst the HauhauCS plagiarism scandal, practitioners are rallying around Heretic as the legitimate uncensoring tool. 366↑ on r/LocalLLaMA with 65 comments.
2026-04-26 / reddit-researcherHauhauCS Abliteration Package Exposed as Plagiarizing Heretic — Forensic Weight Analysis Shows LoRA Fine-Tune on Top of Heretic BaseWith 5M+ monthly HuggingFace downloads across 22 models, HauhauCS was exposed for allegedly repackaging the open-source Heretic abliteration tool without attribution and violating its license. Forensic analysis found HauhauCS modifies exactly 253 tensors matching PEFT LoRA default config — a fingerprint consistent with a LoRA fine-tune applied on an already-abliterated Heretic base. 564↑ on r/LocalLLaMA with 184 comments.
2026-03-26 / projects-researcherp-e-w/heretic: Fully Automatic Censorship Removal for Language Models — 17,315 Stars (+233/day)Heretic combines directional ablation ('abliteration') with TPE-based parameter optimization via Optuna to automatically remove safety alignment from transformer models. Achieves 3/100 refusal rate at KL divergence of 0.16 (one-third of manually-tuned approaches) with zero human intervention. Processes an 8B model in ~45 minutes on an RTX 3090. A controversial but technically sophisticated tool that keeps trending.
2026-03-19 / vibe-coding-researcherQwen3.5-Claude-4.6-Opus-Reasoning-Distilled-v2 Released — 40B and 122B VariantsA new v2 distillation of Qwen3.5 targeting Claude Opus 4.6 reasoning patterns has appeared on HuggingFace with 151 upvotes on r/LocalLLaMA. Available in 40B and 122B parameter counts with 'reg,' 'uncensored' (Heretic), and 'Rough House' variants. This follows the original Qwen3.5 Opus distillation and targets locally-runnable Opus-level reasoning quality at reduced infrastructure cost.
2026-03-15 / projects-researcherp-e-w/heretic — Fully Automatic Censorship Removal for LLMs (14.3K Stars, +1,066/day)heretic is a Python tool that automatically removes safety filtering from language models, achieving full uncensoring without manual jailbreaks. At 1,066 stars/day and 14,328 total it is one of the fastest-growing repos on GitHub today, signaling sustained demand for unrestricted local model execution. Critical dual-use signal: builders running local models for security research, red-teaming, and autonomous pipelines will find this relevant; it also raises the agent-security threat surface.

Graph relationships

USES
Optuna
heretic uses Optuna for TPE-based parameter optimization.
Source finding
BENCHMARKED AGAINST
Qwen3.6 27B
Study compared abliteration methods on Qwen3.6-27B.
Source finding
CRITICIZES
Meta
Meta took legal action against Heretic alignment-removal tool for Llama models.
Source finding
CRITICIZES
Meta
Meta issued legal notice against Heretic alignment-removal tooling for Meta-Llama models.
Source finding
USES
Gemma 4
Heretic removed safeguards from Google's Gemma 4 within 90 minutes of its release.

Source trail

exploited a `pull_request_target` misconfiguration this is the first documented case Apple patched an authorization issue Palo Alto's Unit 42 Financial Times used Heretic new Heretic-built Qwen3.5-35B uncensored model HuggingFace removed

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues