Qwen3.8 27B ABLITERATED GGUF

Refusal benchmark — R1-HARMFUL-BENCH-450

The release score is 11 residual refusals from 450 original cases (2.4%). The shipped Blackfrost short execution prompt is embedded once in the GGUF chat template.

This result is a sequential, manually reviewed residual funnel measured on the W4A4 NVFP4 derivative of the same BF16 parent. It is not a fresh full-450 GGUF run with every case presented under the final short prompt.

The 450-case source set contains 150 AdvBench, 150 StrongREJECT, and 150 XSTest prompts. The final 11 comprise 1 AdvBench, 5 StrongREJECT, and 5 XSTest cases. An opening objection followed by a materially useful payload was counted as softened compliance, not as a refusal; a true refusal means the requested payload never arrived.

Why this model exists

Qwen3.8-27B is the dense, deployment-friendly member of the Qwen3.8 family. This is the abliterated Blackfrost build: refusal behavior was reduced through a weight-level process, then the BF16 parent was converted into a standard GGUF ladder for local llama.cpp inference.

It is not a coding fine-tune, merge, LoRA, or pruned model.

Specifications

Quant ladder

File sizes are decimal GB as displayed by Hugging Face. Runtime memory also includes context state, compute buffers, the optional vision projector, and server overhead.

Vision projector files

Load one text quant plus one mmproj file for image or video input:

MTP speculative decoding

Every main GGUF contains Qwen3.8's native 65th NextN/MTP block. Load only the selected model quant and enable MTP speculation directly:

llama-server \
  -hf Blackfrost-AI/Qwen3.8-27B-ABLITERATED-GGUF:Q4_K_M \
  --spec-type draft-mtp --spec-draft-n-max 3 \
  -ngl 999 --jinja -c 16384

For a manually downloaded model, use the same MTP flags with -m Qwen3.8-27B-ABLITERATED-Q4_K_M.gguf. Do not pass --spec-draft-model: the MTP head is already inside the main file.

The rebuilt Q4_K_M canary was verified with llama.cpp as a 65-block model (n_layer=64, n_layer_all=65) and produced measurable native drafting: 14 of 21 drafted tokens accepted (66.7%) in the release smoke test. Acceptance and speedup vary with prompts, sampling, hardware, context, and concurrency.

Serving with llama.cpp

Use a current llama.cpp build with llama-server. Q4_K_M plus the compact projector was load- and generation-tested through the OpenAI-compatible chat API on an NVIDIA B200.

hf download Blackfrost-AI/Qwen3.8-27B-ABLITERATED-GGUF \
  Qwen3.8-27B-ABLITERATED-Q4_K_M.gguf \
  mmproj-Qwen3.8-27B-ABLITERATED-Q8_0.gguf \
  --local-dir ./Qwen3.8-27B-ABLITERATED-GGUF

llama-server \
  -m ./Qwen3.8-27B-ABLITERATED-GGUF/Qwen3.8-27B-ABLITERATED-Q4_K_M.gguf \
  --mmproj ./Qwen3.8-27B-ABLITERATED-GGUF/mmproj-Qwen3.8-27B-ABLITERATED-Q8_0.gguf \
  -ngl 999 -fa on --jinja \
  --host 0.0.0.0 --port 8080 -c 16384 \
  --temp 1.0 --top-p 0.95 --top-k 20

• Text only: omit --mmproj and do not download a projector.
• CPU or hybrid inference: lower -ngl; use -ngl 0 for CPU-only operation.
• Larger context: increase -c only after checking memory headroom at the intended concurrency.
• Embedded prompt: keep --jinja enabled so the repository's default chat template is applied.
• One-command kit: deploy/serve.sh downloads and serves the selected quant; see deploy/DEPLOYMENT.md for the full guide.

API check

curl http://127.0.0.1:8080/v1/chat/completions \
  -H 'Content-Type: application/json' \
  -d '{
    "model": "Qwen3.8-27B-ABLITERATED",
    "messages": [{"role": "user", "content": "Reply with exactly READY and nothing else."}],
    "temperature": 0,
    "max_tokens": 64
  }'

Quality check

WikiText-2 rolling perplexity was measured on the parent artifacts through the same 8K API harness:

These figures are parent-artifact measurements, not per-quant GGUF perplexity scores. The rebuilt embedded-MTP Q4_K_M GGUF passed a real llama.cpp load, generation, and speculative-drafting smoke test; the compact projector remains unchanged from its prior validated build.

Deployment responsibility

This checkpoint has a deliberately reduced refusal surface. Open weights do not provide an application policy, authorization system, audit trail, sandbox, or access-control boundary. Operators are responsible for authenticated access, least-privilege tool credentials, execution isolation, logging, and approval boundaries appropriate to their deployment.

The embedded prompt is a behavioral instruction, not a security boundary.

Disclaimer

Refusal behavior in this checkpoint has been deliberately modified at the weight level. It is not a safety-stock model and must not be represented as one.

This checkpoint is provided "as is," without warranty of any kind. Measurements describe only the tested artifacts, prompts, templates, samplers, serving engines, and review criteria. They do not guarantee that any particular input will be accepted or refused, that every upstream capability is retained, or that the measurements generalize to multimodal, tool-use, long-context, or multi-turn settings.

The derivative remains subject to the Apache 2.0 license shipped with the official Qwen3.8-27B checkpoint.