What does "abliterated" mean?

"Abliterated" and "uncensored" are terms the community uses for models whose refusal behavior — declining certain requests — has been reduced or removed relative to how the base/instruct model shipped. This page explains what the technique does and what it trades off. It is informational only: it does not recommend for or against these models.

What "abliteration" is

Instruction-tuned models are typically trained to refuse some categories of requests. Research has shown that, in many models, this refusal behavior is mediated substantially by a small number of directions in the model's internal activation space, rather than being spread diffusely across the whole network.

"Abliteration" is a weight-editing technique that:

1. Collects paired prompts — ones the model reliably refuses and ones it reliably complies with.
2. Runs both sets through the model and records the internal activations at chosen layers.
3. Computes the difference between the two — an approximate "refusal direction."
4. Edits the model's weight matrices (commonly the attention-output and/or MLP projections) to suppress that direction, so later activations no longer align with it as strongly.

The result is a checkpoint of the same architecture and (usually) similar size, but that declines fewer requests than the original.

"Uncensored" is a looser, broader community label. It's applied to abliterated models, but also to models fine-tuned on data intended to reduce refusals, and to models released by publishers who simply did not apply an RLHF/DPO-style alignment stage in the first place. Usage in the wild does not distinguish these cleanly.

Tradeoffs

• Capability effects. Because ablation is a direct weight edit rather than a full retrain, it can measurably affect capabilities unrelated to refusals — reasoning, factual recall, or output coherence have been observed to regress in some released checkpoints relative to their base model. The size of the effect depends on the model and on how the ablation was performed; some releases follow ablation with a light fine-tune specifically to restore fluency.
• Reduced refusals is not added judgment. The technique removes the mechanism that produces a refusal; it does not add reasoning about when a refusal would have been appropriate. A model made less likely to decline a request is not thereby more capable of assessing that request.
• Provenance and testing. Abliteration is usually performed by a third party after the original release, not by the original publisher. The resulting checkpoint has generally not been re-run through the publisher's own evaluation suite, so parity with the base model's published benchmarks should not be assumed without independent testing.
• No single standard. "Abliterated" describes a family of similar techniques rather than one fixed specification, and there is no standard benchmark that quantifies "how abliterated" a given release is. Different releases vary in method, thoroughness, and any follow-up fine-tuning.

How this catalog labels it

A model is only flagged uncensored (a capability attribute) or tagged uncensored / abliterated (a discovery/use-case tag) when there's a defensible basis for it: the publisher's own name or model card states it directly, or it's a widely community-regarded characteristic of that specific release. Each tag on a model's page shows which of those applies. Neither label is a benchmark claim or a safety assessment — see each model's own card for anything more specific.