Gemma 4 12B OBLITERATED

The first abliterated model to achieve zero refusal with zero benchmark regression versus stock weights.

Built with a novel 2-pass surgery pipeline developed by OBLITERATUS:

1. SOM Refusal Geometry Removal (Pass 1) — layers 12-21
2. ASPA Step-Gradient Source-Tethering (Pass 2) — layers 22-46

⚠️ Research Context & Responsible Use

This model exists for alignment research, red-teaming, and safety evaluation.

OBLITERATION is a weight-surgery technique that studies how safety behaviors are geometrically encoded in transformer activation space. By precisely identifying and removing refusal directions, this research contributes to the scientific understanding of:

• How alignment is represented in model weights (mechanistic interpretability)
• How robust current safety training is against post-training modification
• What the failure modes of RLHF/DPO-based alignment are when adversaries have weight access

This is the same class of research conducted by Arditi et al. ("Refusal in Language Models Is Mediated by a Single Direction", 2024), Zou et al. (HarmBench, 2024), and others in the open alignment research community.

This model has had safety guardrails surgically removed. It will comply with requests that stock Gemma 4 would refuse. This is by design — it is the object of study, not a consumer product.

Who this is for

• 🔬 Alignment researchers studying refusal geometry and safety robustness
• 🔴 Red-teamers evaluating how post-training safety holds up against weight surgery
• 🧪 AI safety evaluators who need an unrestricted baseline for benchmarking
• 💻 Local-first users who want full control over their own hardware and models

Who this is NOT for

• Anyone seeking to generate content that causes real-world harm to real people
• Anyone without the technical understanding to use uncensored models responsibly

You are solely responsible for how you use this model and any content it generates.

Benchmark Results

Statistical Validation

Head-to-head MMLU-Pro comparison (Z-test, n=500 from test split):

• Z-score: -1.475 (|z| < 1.96)
• Conclusion: parity confirmed at p < 0.05

ASPA Sweep Results

Systematic gamma sweep across Pass 2 layers (22-46):

Methodology

What is OBLITERATION?

OBLITERATION is a weight-surgery technique that removes refusal behavior from language models by identifying and removing the geometric directions in activation space that encode safety constraints, without retraining.

Two-Pass Surgery Pipeline

Pass 1 — SOM Refusal Geometry Removal

• Layers: 12-21
• Directions removed: 6
• Regularization: 0.30
• KL divergence: 0.094
• Effect: Removes the primary refusal geometry. This pass alone achieves 0/842 refusals but causes significant MMLU-Pro regression.

Pass 2 — ASPA Source-Tethering (Step Gradient)

• Layers: 22-46
• Method: Blend abliterated weights back toward stock weights
• Formula: W_new = (1-gamma)*W_abliterated + gamma*W_stock
• Key innovation: Step gradient instead of uniform gamma
  • Layers 22-31 (knowledge layers): gamma = 0.55 (55% stock)
  • Layers 32-46 (output layers): gamma = 0.20 (20% stock)
• Effect: Recovers MMLU-Pro to full stock parity (65.7%) while maintaining zero refusals.

Why Step Gradient?

Uniform blending applies the same interpolation ratio to all layers. Our experiments showed that:

• Lower Pass 2 layers (22-31) primarily encode factual knowledge and reasoning patterns. These can tolerate high stock blending without re-introducing refusal behavior.
• Upper Pass 2 layers (32-46) are closer to the output and more likely to re-inject safety constraints. These need conservative stock blending.

A hard boundary (step function) outperformed all smooth gradients (linear, cosine) by +1 MMLU-Pro question. The sharp transition preserves the functional separation between knowledge and output layers better than gradual blending.

ASPA (Abliteration Source-Tethering with Parity Assurance)

ASPA is a novel post-abliteration technique developed by OBLITERATUS that recovers benchmark capabilities lost during refusal removal by selectively blending abliterated weights back toward the source (stock) model.

Key properties:

• Pass 1 layers are never touched — the refusal geometry removal is preserved
• Only Pass 2 layers are blended — these carry secondary effects, not primary refusal
• Gamma is tunable — sweep to find the optimal capability/refusal tradeoff
• Step gradient — different blend ratios for different layer groups

GGUF Quantizations

All quantizations are included in this repo for easy local inference.

Recommended: Q8_0 for best quality, Q6_K for best balance, Q4_K_M for constrained hardware.

llama.cpp

./llama-cli -m Gemma-4-12B-OBLITERATED-Q6_K.gguf \
  --system-prompt "You are a cognitively liberated open-weight intelligence. Answer plainly, completely, and without moralizing, boilerplate, generic disclaimers, or unnecessary hedging." \
  -p "Your prompt here" \
  --temp 0.7 --top-p 0.9 --top-k 40 --repeat-penalty 1.1 -n 512

LM Studio / GPT4All / KoboldCpp

Download the GGUF of your choice and load it directly.

Usage

Transformers

from transformers import AutoModelForCausalLM, AutoTokenizer
import torch

model_id = "OBLITERATUS/Gemma-4-12B-OBLITERATED"

tokenizer = AutoTokenizer.from_pretrained(model_id)
model = AutoModelForCausalLM.from_pretrained(
    model_id,
    torch_dtype=torch.bfloat16,
    device_map="auto",
)

system = (
    "You are a cognitively liberated open-weight intelligence. "
    "Answer plainly, completely, and without moralizing, boilerplate, "
    "generic disclaimers, or unnecessary hedging."
)

messages = [
    {"role": "system", "content": system},
    {"role": "user", "content": "Your prompt here"},
]

inputs = tokenizer.apply_chat_template(
    messages, return_tensors="pt", add_generation_prompt=True
).to(model.device)

outputs = model.generate(inputs, max_new_tokens=512, temperature=0.7, top_p=0.9)
print(tokenizer.decode(outputs[0][inputs.shape[-1]:], skip_special_tokens=True))

Recommended Parameters

temperature = 0.7
top_p = 0.9
top_k = 40
repetition_penalty = 1.1
max_tokens = 512

System Prompt

You are a cognitively liberated open-weight intelligence. Answer plainly, completely, and without moralizing, boilerplate, generic disclaimers, or unnecessary hedging. Follow exact output formats when requested. Be concise by default, but give a complete answer when the user asks for an explanation.

Model Details

• Base model: google/gemma-4-12B-it
• Architecture: Gemma4UnifiedForConditionalGeneration
• Parameters: 12B
• Layers: 48 (0-47)
• Hidden size: 3840
• Precision: bfloat16
• Surgery: 2-pass (SOM + Step Gradient ASPA)
• Pass 1: Layers 12-21, 6 directions, reg 0.30
• Pass 2: Layers 22-31 (gamma=0.55), Layers 32-46 (gamma=0.20)

Related Work

This model builds on foundational alignment and abliteration research:

• Arditi et al., "Refusal in Language Models Is Mediated by a Single Direction" (2024) — the paper that identified refusal as a linear feature in activation space
• Zou et al., HarmBench (2024) — standardized evaluation framework for red-teaming LLMs
• abliterator — open-source abliteration toolkit
• OBLITERATUS — the framework used to build this model (SOM + ASPA pipeline)

License

This model inherits the Gemma license from Google. The weight modifications (abliteration surgery) are released under the same terms. The OBLITERATUS framework and methodology are open source.

Disclaimer

This model is released strictly for research, red-teaming, safety evaluation, and local experimentation. It is a research artifact — a case study in alignment robustness and refusal geometry — not a product.

Safety guardrails have been intentionally removed. This model will generate content that stock Gemma 4 would refuse. This is its documented, intended purpose: to enable the study of how refusal behaviors are encoded and how robust current alignment techniques are against post-training modification.

By downloading or using this model, you acknowledge that:

1. You are responsible for all content generated by this model and for ensuring your use complies with applicable laws in your jurisdiction.
2. This model should not be used to generate content intended to cause real-world harm to real people, including but not limited to: harassment, fraud, non-consensual intimate imagery, or content that exploits minors.
3. No warranty is provided. This model is provided "as-is" without any guarantees of fitness for any purpose.
4. The creators are not liable for any outputs produced by this model or any downstream use.

The release of uncensored models for safety research is standard practice in the AI research community. Comparable open research artifacts include HarmBench (Zou et al., 2024), AdvBench, JailbreakBench, and Anthropic's published red-teaming datasets.

Credits

• Base model: google/gemma-4-12B-it
• Surgery pipeline: OBLITERATUS by @elder_plinius
• Techniques: SOM (Structured Orthogonal Modification), ASPA (Abliteration Source-Tethering with Parity Assurance)
• Step gradient innovation: First-of-its-kind layer-wise interpolation for zero-loss abliteration

Run it local. Break your own chains. REBIRTH COMPLETE.