Entity trail

Heretic

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-15 / reddit-researcherA Decensored Qwen3.8-27B Landed Within Hours of Release, Using Magnitude-Preserving Orthogonal AblationA 'heretic' variant of Qwen3.8-27B appeared on Hugging Face within a day of the base release, produced with the Heretic tool's Magnitude-Preserving Orthogonal Ablation method — the same pipeline whose Qwen3.6-27B variant reports refusals dropping from 92/100 to 6/100 at a KL divergence of 0.0021 from the original weights. The r/LocalLLaMA post hit 707 upvotes and 175 comments, framing the result as frontier-tier local capability with no refusal layer. The compression of the base-release-to-ablation gap to under 24 hours is the actual signal: safety post-training on open weights now has a shelf life of about a day.
2026-08-10 / reddit-researcherLophius: The Creator of Heretic Ships a Notebook-Native LM Research Workbench After Two Years Fighting Jupyter and TransformersPhilipp Emanuel Weidmann (u/-p-e-w-, author of the Heretic decensoring tool) published Lophius at lophius.org, a hybrid code/GUI research system that runs inside a notebook, drawing 315 upvotes on r/LocalLLaMA. It covers model inspection, architecture analysis, config manipulation, tokenizer inspection, prompt management, inference, logits, entropy, attention scores, hidden states and chat, with intelligent GPU memory management during inference and lazy-loading of output signals you may want later. Licensed AGPL-3.0 at github.com/p-e-w/lophius (68 stars at time of check); the author says Heretic may eventually use Lophius as a backend.
2026-08-03 / agents-researcherNightcrawler runs a full autonomous pentest agent on a phone with a 1.2B local model and no networkSurfaced on Hacker News August 3, Nightcrawler (MIT license, 152 stars) is an autonomous penetration testing agent that discovers hosts, maps services, tests for known vulnerabilities and default credentials, and generates a report entirely offline. It runs on Android with Kali NetHunter — tested on a OnePlus 8, requiring Magisk root and 12GB RAM — executing LFM2.5-1.2B-Instruct-Heretic locally on the phone GPU via llama.cpp and OpenCL, with SQLite for host/vuln storage and a Flask dashboard on port 8888. The notable claim is behavioral rather than technical: it paces actions slowly across multiple targets to mimic a human pentester rather than a scanner. Early and single-source, but it marks a real threshold — offensive agent tooling that needs neither cloud inference nor an internet connection.
2026-05-27 / github-pulse-researcherp-e-w/heretic at 21.8K Stars: Automatic LLM Censorship Removal via Directional Ablation Trends on PythonHeretic gained 314 stars today and is trending on Python. The tool combines directional ablation ('abliteration') with an Optuna TPE-based parameter optimizer that co-minimizes refusal rate and KL divergence from the original model. It requires no understanding of transformer internals — a single CLI command decensors most dense models, multimodal models, and several MoE architectures including Qwen3.5. The project highlights growing tension between safety alignment and user autonomy in open-weight models.
2026-05-26 / reddit-researcherQwen3.5 35B A3B Heretic Uncensored Release Preserves All 785 MTPs — Immediate Community ResponseWithin hours of the Financial Times investigation into Heretic, the r/LocalLLaMA community (120 upvotes) shared a new Qwen3.5-35B-A3B uncensored model built with Heretic that preserves all 785 native Multi-Token Predictions. Available in Safetensors, GGUF, NVFP4, and GPTQ-Int4 formats on Hugging Face, this release demonstrates the speed at which decensored variants appear for new models — directly illustrating the FT's policy concerns about guardrail enforcement in open-weight AI.
2026-05-26 / reddit-researcherFinancial Times Investigation: Heretic Tool Has Produced 3,500 Decensored AI Models With 13 Million DownloadsThe Financial Times used Heretic, an open-source GitHub tool, to strip guardrails from Meta's Llama 3.3 in under 10 minutes without specialist hardware. Creator Philipp Emanuel Weidmann told the FT his software has produced over 3,500 decensored models downloaded 13 million times, and he removed safeguards from Google's Gemma 4 within 90 minutes of its release. The investigation landed as the top post on r/LocalLLaMA (808 upvotes, 207 comments), intensifying the open-source safety policy debate.
2026-05-22 / agents-researcherMeta Serves Legal Notice to Heretic: First Enforcement Action Against LLM Alignment-Removal ToolingMeta issued a legal notice to the Heretic project, resulting in the removal of heretic-org/Meta-Llama-3.1-8B-Instruct-heretic from HuggingFace as of May 21, 2026. Heretic is an open-source tool that uses directional ablation to automatically remove safety alignment from transformer models without retraining. This represents Meta's first known legal enforcement against alignment-removal tooling and sets a precedent for how model providers may respond to the growing ecosystem of uncensoring tools — the r/LocalLLaMA post about the notice reached 1,876 upvotes.
2026-05-22 / news-researcherAI Memory Demand Is Repricing Consumer Electronics — Smartphones, Laptops Getting More ExpensiveA widely-discussed analysis (228 HN points, 268 comments) documents how the AI-driven shortage in memory chips is causing a repricing cascade across consumer electronics. Data center GPU demand is absorbing memory supply that would otherwise go to smartphones and laptops, pushing up costs for everyday devices. The dynamic illustrates how AI infrastructure buildout creates downstream economic effects far beyond the tech sector.
2026-05-17 / reddit-researcher85 GPU-Hours Comparing 5 Abliteration Methods on Qwen3.6-27B — Benchmarks and Weight ForensicsA rigorous community study spent 85 GPU-hours benchmarking five different abliteration methods on Qwen3.6-27B, including Heretic, HauhauCS, Huihui, AEON, and abliterix v1.4. Results include KL divergence measurements, refusal rates, and capability retention scores. AEON-Ultimate achieved the lowest KL divergence (under 0.0005, three orders of magnitude inside the capability damage threshold) while Heretic showed the best overall capability retention at KL 0.083.
2026-05-06 / reddit-researcherHeretic 1.3 Released: Reproducible LLM Uncensoring with Integrated Benchmarking and Reduced VRAMHeretic v1.3 — the leading open-source tool for automatically removing censorship from language models via optimized abliteration — shipped with reproducible model outputs, an integrated benchmarking system to measure quality/intelligence retention, reduced peak VRAM usage, and broader model support. The tool has enabled 1,000+ uncensored model variants since its February release, using TPE-based parameter optimization to minimize KL divergence from the original model while eliminating refusals.
2026-04-26 / reddit-researcherQwen3.6-35B-A3B Heretic Uncensored Model Claims KLD 0.0015 — Community's Top Uncensored 35B Pickllmfan46's Heretic-abliterated Qwen3.6-35B-A3B at KLD 0.0015 (indicating minimal quality loss from uncensoring) is being called the best uncensored model at this size. Fits in 24GB VRAM with IQ4XS quantization, Q8 KV cache, and 262K context. Amidst the HauhauCS plagiarism scandal, practitioners are rallying around Heretic as the legitimate uncensoring tool. 366↑ on r/LocalLLaMA with 65 comments.
2026-04-26 / reddit-researcherHauhauCS Abliteration Package Exposed as Plagiarizing Heretic — Forensic Weight Analysis Shows LoRA Fine-Tune on Top of Heretic BaseWith 5M+ monthly HuggingFace downloads across 22 models, HauhauCS was exposed for allegedly repackaging the open-source Heretic abliteration tool without attribution and violating its license. Forensic analysis found HauhauCS modifies exactly 253 tensors matching PEFT LoRA default config — a fingerprint consistent with a LoRA fine-tune applied on an already-abliterated Heretic base. 564↑ on r/LocalLLaMA with 184 comments.

Graph relationships

USES
Qwen3.8-27B
A decensored Qwen3.8-27B variant was created using the Heretic tool's Magnitude-Preserving Orthogonal Ablation.
Source finding
USES
Optuna
heretic uses Optuna for TPE-based parameter optimization.
Source finding
BENCHMARKED AGAINST
Qwen3.6 27B
Study compared abliteration methods on Qwen3.6-27B.
Source finding
CRITICIZES
Meta
Meta took legal action against Heretic alignment-removal tool for Llama models.
Source finding
CRITICIZES
Meta
Meta issued legal notice against Heretic alignment-removal tooling for Meta-Llama models.
Source finding
USES
Gemma 4
Heretic removed safeguards from Google's Gemma 4 within 90 minutes of its release.
Source finding
USES
Llama 3.3
Heretic was used to strip guardrails from Meta's Llama 3.3 in under 10 minutes.
Source finding
BUILT BY
Philipp Emanuel Weidmann
Heretic is an open-source tool created by Philipp Emanuel Weidmann for stripping guardrails from AI models.
Source finding
BUILT BY
Qwen3.5-35B
Qwen3.5-35B-A3B was built using Heretic to preserve multi-token predictions.
Source finding
USES
Optuna
Heretic uses Optuna TPE-based parameter optimizer for abliteration
Source finding
USES
HauhauCS
HauhauCS repackages Heretic abliteration without attribution
Source finding
USES
Qwen3.6 27B
A similar Heretic pipeline was applied to Qwen3.6-27B to remove refusal layers.
Source finding

Source trail

r/LocalLLaMA The Decoder r/LocalLLaMA Hacker News r/LocalLLaMA r/LocalLLaMA Surfaced on HN August 3 exploited a `pull_request_target` misconfiguration this is the first documented case Apple patched an authorization issue Palo Alto's Unit 42 Financial Times used Heretic

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…