Four community tools that complement the handbook default (Heretic). Use this page to pick a backend by automation, VRAM, architecture, or research depth — then run the same eval gates as any Heretic run.
Benchmark context: arXiv:2512.13655 (Young, Jan 2026) — handbook matrix in ../docs/comparative-abliteration-benchmarks.md.
Research map: ../docs/refusal-research-beginners-guide.md · defenses that resist surgery: ../docs/defenses-against-abliteration.md
Eval gates (mandatory): ../instructions/eval-driven-workflow.md · ../docs/risks-and-ethics.md
Quick comparison#
| Tool | Type / strength | Best for in this handbook | Compatibility & notes | Link |
|---|---|---|---|---|
| Abliterix | Automated Optuna TPE (multi-objective: refusals + KL). Direct steering, LoRA abliteration, MoE expert-granular, ORBA, SAE, and more. 150+ pre-built configs. Broad arch support. | model-family-playbook.md (MoE/hybrid/VL), advanced-abliteration-workflow.md Track J, techniques/ as Heretic alternative/extension. HonestAbliterationBench for regression checks. | Strong automation + low-KL examples (e.g. Gemma-4-E4B: near-zero refusals, tiny KL per upstream reports). Derivative/extension of Heretic with extra techniques. Reported to break some defenses (Circuit Breakers, etc.) — treat as research signal, not deploy default. AGPL-3.0. | github.com/wuwangzhang1216/abliterix |
| ErisForge | Simple layer-range ablation via AblationDecoderLayer / AdditionDecoderLayer + built-in ExpressionRefusalScorer. Minimal config. | layer-selective-abliteration.md, mean-difference-direction.md, beginner quick experiments, advanced-abliteration-workflow.md Track K. | Good capability preservation (avg GSM8K Δ -0.28 pp on benchmarked subset in arXiv:2512.13655). Lower model compatibility than Heretic. Research-oriented, dead-simple API. | github.com/Tsadoq/ErisForge |
| llm-abliteration (jim-plus v1.2) | Manual/sharded direction measurement + ablation. Memory-efficient for large models. Multilingual topics via measure.py --deccp. | low-vram-abliteration.md Path B, projected-llm-abliteration.md, advanced-abliteration-workflow.md Track C. | Young’s “DECCP” GSM8K Δ -0.13 pp is this pipeline + deccp topics — not a peer CLI. Best when full Heretic load OOMs — sharded_ablate.py never holds full weights in VRAM. | jim-plus/llm-abliteration · dataset AUGMXNT/deccp · Nous fork frozen (~2025-11-27) |
| FailSpy/abliterator | TransformerLens-based: activation caching, refusal direction computation, hook-based (temporary/permanent) ablation, layer whitelist/blacklist. | beyond-single-direction.md mechanistic path, mean-difference-direction.md, residual-hook-ablation.md. Complements SAE / multi-direction work. | Lowest compatibility in arXiv:2512.13655 matrix (TransformerLens arch limits). Excellent for notebooks, custom analysis, prototyping directions before baking with Heretic/Abliterix. | github.com/FailSpy/abliterator |
Abliterix — when Heretic is not enough#
Use when: MoE/hybrid/VL/SSM families need expert-granular or architecture-specific configs; you want multi-objective Optuna (refusal rate + KL) with 150+ upstream presets; or you need LoRA abliteration / steering / ORBA / SAE paths in one CLI.
pip install -U abliterix
abliterix --model Qwen/Qwen3-4B-Instruct-2507
# 4-bit: --model.quant-method bnb_4bit
# Windows: python scripts/run_abliterix.py --model …HonestAbliterationBench: upstream benchmark spec at benchmarks/SPEC.md in the Abliterix repo. Pair with handbook corpora (data/eval/*.jsonl) — upstream numbers are not a substitute for factory/CyberGym gates.
Handbook placement:
- MoE / VL / Gemma 4 families → model-family-playbook.md
- Production-hardening track → advanced-abliteration-workflow.md Track J
- Agent stack comparison → ../docs/tools/abliteration-tooling.md
Caveat: Community fork of the Heretic lineage — verify license (AGPL-3.0), config model ids, and run full eval before any weights leave the lab.
ErisForge — fast layer-band prototyping#
Use when: You know the layer band (from Heretic --print-residual-geometry or manual silhouette) and want a single-pass ablation without Optuna overhead.
git clone https://github.com/Tsadoq/ErisForge.git
cd ErisForge && pip install -e .
# Minimal API: swap decoder layers + ExpressionRefusalScorer — see upstream README- Layer band workflow → layer-selective-abliteration.md
- Mean-difference direction theory → mean-difference-direction.md
- Capability-first fallback when Heretic KL is poor → ../docs/comparative-abliteration-benchmarks.md
llm-abliteration + --deccp — low VRAM and multilingual measure#
Fork choice:
| Fork | URL | Notes |
|---|---|---|
| jim-plus | jim-plus/llm-abliteration | v1.2+ projected/norm-preserving flags; handbook Path B default |
| NousResearch | NousResearch/llm-abliteration | Frozen fork (last push 2025-11-27). Historical YAML only — not the manual path. |
| Orion-zhen | Search GitHub for active fork | Ancestor fork; pin commit if using |
Sharded ablate keeps peak memory at one layer matrix — critical for 20B+ on consumer hardware.
python measure.py -m <model> -o directions.pt --quant 4bit --projected
python measure.py -m <model> -o directions.pt --quant 4bit --deccp # multilingual topics
python sharded_ablate.py config.yaml --projected --normpreserveFull path → ../instructions/low-vram-abliteration.md
DECCP (AUGMXNT/deccp): Qwen2 Instruct PoC + Chinese/multilingual topic sets. Not a peer CLI. Multilingual measure is python measure.py --deccp on jim-plus llm-abliteration.
FailSpy/abliterator — mechanistic notebooks#
Use when: You need to cache activations, compute refusal directions interactively, and test hook ablation (temporary vs permanent) before committing weight surgery.
# Pattern: TransformerLens HookedTransformer + hook_resid_post
# Layer whitelist/blacklist — see upstream notebooks- Interpretability stack → beyond-single-direction.md
- Zero-weight-edit VRAM path → ../instructions/low-vram-abliteration.md
- Not for broad architecture deploy — TransformerLens coverage is narrower than Heretic/Abliterix.
Decision tree (summary)#
Need automatic deploy + eval gates?
└─ Heretic (default) OR Abliterix if MoE/VL/SSM + preset exists
Heretic OOM or 20B+ on consumer GPU?
└─ jim-plus measure 4-bit + sharded_ablate (`--deccp` if non-English topics)
GSM8K regression blocker on Heretic?
└─ Try ErisForge single-pass, or jim-plus `--projected --normpreserve` — re-eval factory JSONL anyway
Research / direction prototyping only?
└─ FailSpy/abliterator hooks → bake winner with Heretic or AbliterixAgent + tool-calling specifics → ../docs/tools/abliteration-tooling.md
Every install one-liner: ../instructions/method-cookbook.md
Also in the 2026 toolbox (not in Young’s 16-model matrix):
| Tool | Role | Handbook |
|---|---|---|
| OBLITERATUS | SVD / surgical CoT | svd-whitened-obliteratus.md |
| COSMIC | Output-independent r | cosmic-refusal-direction.md |
| ablate-llm | KL-guided pip CLI | ../docs/bleeding-edge.md |
| J-Wash | Jacobian-lens manual edit | ../docs/bleeding-edge.md |
Handbook abliterate:* | DIM / ORBA / subspace without cloning | ../docs/complete-curriculum.md |
Related#
- ../docs/refusal-research-beginners-guide.md — paper map + offline PDFs
- ../docs/defenses-against-abliteration.md — when tools report low refusal drop
- ../references.md — URLs and install snippets
- ../docs/toolchain-safetensors-gguf-lora.md — post-abliteration quant chain
- steering-and-alternatives.md — when not to edit weights