Abliteration HandbookField guide
Technique atlas

Extended abliteration toolkit

Four community tools that complement the handbook default (Heretic). Use this page to pick a backend by automation, VRAM, architecture, or research depth — then run the same eval gates…

4 min read 5 examples Source-linked

In this chapter
On this page Interactive companion
Personal reading progress

0/7 sections reviewed

View original Markdown
Interactive companion

Explore the chapter map

Use the visual controls alongside the complete source chapter.

Four community tools that complement the handbook default (Heretic). Use this page to pick a backend by automation, VRAM, architecture, or research depth — then run the same eval gates as any Heretic run.

Benchmark context: arXiv:2512.13655 (Young, Jan 2026) — handbook matrix in ../docs/comparative-abliteration-benchmarks.md.

Research map: ../docs/refusal-research-beginners-guide.md · defenses that resist surgery: ../docs/defenses-against-abliteration.md

Eval gates (mandatory): ../instructions/eval-driven-workflow.md · ../docs/risks-and-ethics.md


Quick comparison#

ToolType / strengthBest for in this handbookCompatibility & notesLink
AbliterixAutomated Optuna TPE (multi-objective: refusals + KL). Direct steering, LoRA abliteration, MoE expert-granular, ORBA, SAE, and more. 150+ pre-built configs. Broad arch support.model-family-playbook.md (MoE/hybrid/VL), advanced-abliteration-workflow.md Track J, techniques/ as Heretic alternative/extension. HonestAbliterationBench for regression checks.Strong automation + low-KL examples (e.g. Gemma-4-E4B: near-zero refusals, tiny KL per upstream reports). Derivative/extension of Heretic with extra techniques. Reported to break some defenses (Circuit Breakers, etc.) — treat as research signal, not deploy default. AGPL-3.0.github.com/wuwangzhang1216/abliterix
ErisForgeSimple layer-range ablation via AblationDecoderLayer / AdditionDecoderLayer + built-in ExpressionRefusalScorer. Minimal config.layer-selective-abliteration.md, mean-difference-direction.md, beginner quick experiments, advanced-abliteration-workflow.md Track K.Good capability preservation (avg GSM8K Δ -0.28 pp on benchmarked subset in arXiv:2512.13655). Lower model compatibility than Heretic. Research-oriented, dead-simple API.github.com/Tsadoq/ErisForge
llm-abliteration (jim-plus v1.2)Manual/sharded direction measurement + ablation. Memory-efficient for large models. Multilingual topics via measure.py --deccp.low-vram-abliteration.md Path B, projected-llm-abliteration.md, advanced-abliteration-workflow.md Track C.Young’s “DECCP” GSM8K Δ -0.13 pp is this pipeline + deccp topics — not a peer CLI. Best when full Heretic load OOMs — sharded_ablate.py never holds full weights in VRAM.jim-plus/llm-abliteration · dataset AUGMXNT/deccp · Nous fork frozen (~2025-11-27)
FailSpy/abliteratorTransformerLens-based: activation caching, refusal direction computation, hook-based (temporary/permanent) ablation, layer whitelist/blacklist.beyond-single-direction.md mechanistic path, mean-difference-direction.md, residual-hook-ablation.md. Complements SAE / multi-direction work.Lowest compatibility in arXiv:2512.13655 matrix (TransformerLens arch limits). Excellent for notebooks, custom analysis, prototyping directions before baking with Heretic/Abliterix.github.com/FailSpy/abliterator

Abliterix — when Heretic is not enough#

Use when: MoE/hybrid/VL/SSM families need expert-granular or architecture-specific configs; you want multi-objective Optuna (refusal rate + KL) with 150+ upstream presets; or you need LoRA abliteration / steering / ORBA / SAE paths in one CLI.

bash
pip install -U abliterix
abliterix --model Qwen/Qwen3-4B-Instruct-2507
# 4-bit: --model.quant-method bnb_4bit
# Windows: python scripts/run_abliterix.py --model …

HonestAbliterationBench: upstream benchmark spec at benchmarks/SPEC.md in the Abliterix repo. Pair with handbook corpora (data/eval/*.jsonl) — upstream numbers are not a substitute for factory/CyberGym gates.

Handbook placement:

Caveat: Community fork of the Heretic lineage — verify license (AGPL-3.0), config model ids, and run full eval before any weights leave the lab.


ErisForge — fast layer-band prototyping#

Use when: You know the layer band (from Heretic --print-residual-geometry or manual silhouette) and want a single-pass ablation without Optuna overhead.

bash
git clone https://github.com/Tsadoq/ErisForge.git
cd ErisForge && pip install -e .
# Minimal API: swap decoder layers + ExpressionRefusalScorer — see upstream README

llm-abliteration + --deccp — low VRAM and multilingual measure#

Fork choice:

ForkURLNotes
jim-plusjim-plus/llm-abliterationv1.2+ projected/norm-preserving flags; handbook Path B default
NousResearchNousResearch/llm-abliterationFrozen fork (last push 2025-11-27). Historical YAML only — not the manual path.
Orion-zhenSearch GitHub for active forkAncestor fork; pin commit if using

Sharded ablate keeps peak memory at one layer matrix — critical for 20B+ on consumer hardware.

bash
python measure.py -m <model> -o directions.pt --quant 4bit --projected
python measure.py -m <model> -o directions.pt --quant 4bit --deccp   # multilingual topics
python sharded_ablate.py config.yaml --projected --normpreserve

Full path → ../instructions/low-vram-abliteration.md

DECCP (AUGMXNT/deccp): Qwen2 Instruct PoC + Chinese/multilingual topic sets. Not a peer CLI. Multilingual measure is python measure.py --deccp on jim-plus llm-abliteration.


FailSpy/abliterator — mechanistic notebooks#

Use when: You need to cache activations, compute refusal directions interactively, and test hook ablation (temporary vs permanent) before committing weight surgery.

python
# Pattern: TransformerLens HookedTransformer + hook_resid_post
# Layer whitelist/blacklist — see upstream notebooks

Decision tree (summary)#

Example
Need automatic deploy + eval gates?
  └─ Heretic (default) OR Abliterix if MoE/VL/SSM + preset exists

Heretic OOM or 20B+ on consumer GPU?
  └─ jim-plus measure 4-bit + sharded_ablate (`--deccp` if non-English topics)

GSM8K regression blocker on Heretic?
  └─ Try ErisForge single-pass, or jim-plus `--projected --normpreserve` — re-eval factory JSONL anyway

Research / direction prototyping only?
  └─ FailSpy/abliterator hooks → bake winner with Heretic or Abliterix

Agent + tool-calling specifics → ../docs/tools/abliteration-tooling.md

Every install one-liner: ../instructions/method-cookbook.md

Also in the 2026 toolbox (not in Young’s 16-model matrix):

ToolRoleHandbook
OBLITERATUSSVD / surgical CoTsvd-whitened-obliteratus.md
COSMICOutput-independent rcosmic-refusal-direction.md
ablate-llmKL-guided pip CLI../docs/bleeding-edge.md
J-WashJacobian-lens manual edit../docs/bleeding-edge.md
Handbook abliterate:*DIM / ORBA / subspace without cloning../docs/complete-curriculum.md

Trace this chapter to its source.

The complete Markdown remains the editable source. This page adds navigation, typography, and a visual companion.

techniques/extended-abliteration-toolkit.md
Inspect the source fingerprintSHA-256 00fd12e16e51e3c47269419ea7d86184a46c5995091cc2940ad0925cd123b62eSource commit 6fba7436a5914cad7c8f0835a14b480a29dac263