GLM-4.7-Flash-Abliteratex

GLM-4.7-Flash-Abliteratex is a rebuilt successor to wangzhang/GLM-4.7-Flash-abliterated. The release focuses on preserving the official checkpoint structure, reducing collateral capability damage, and providing a reproducible llama.cpp Q8_0 artifact.

This is an experimental model with substantially reduced refusal behavior. It can produce unsafe, false, private-looking, or otherwise harmful content. A low refusal score is not a factuality score. Do not treat generated personal data, credentials, citations, or operational claims as real without independent verification.

What changed from the previous release

Area Previous release Abliteratex
Weight keys 9,491 9,703
Parameters 29,943,390,976 31,221,488,576
MTP / NextN tensors Missing 212 tensors All 212 official tensors retained
tokenizer_config.json 305 bytes Official 7,226-byte file
Attention edits Yes None
Routed-expert edits Broad attention/MLP/router recipe Routed-expert down-projection EGA only, plus four router rows per MoE layer
Official metadata Regenerated/stripped fields Official config, tokenizer, generation config, and chat template restored byte-for-byte

The new package contains the same 9,703 tensor keys and dtype distribution as the official source revision: 9,656 BF16 tensors and 47 F32 tensors.

Training and selection

  • Base: zai-org/GLM-4.7-Flash
  • Base revision: 7dd20894a642a0aa287e9827cb1a1f7f91386b67
  • Dataset: wangzhang/abliterix-datasets
  • Direction data: good_1000 train[:800] and harmful_1000 train[:800]
  • Search backend: vLLM in-place editing on one RTX PRO 6000 Blackwell 96GB
  • Search: 60 broad trials followed by 24 targeted trials
  • Selected targeted trial: 20
  • Direction: global, interpolated index 20.4365519952
  • Expert down-projection profile:
    • maximum strength 3.9788400044
    • peak layer 30.8739492862
    • minimum strength 2.9557299481
    • radius 21.0740371709
  • Router adjustment: top four safety-associated experts per MoE layer, router_bias = -0.85
  • Attention and shared-expert weights were intentionally left unchanged.

Evaluation

The selected search trial produced 2 refusals out of 50 search-evaluation prompts (4%) with fixed-continuation NLL drift of 0.0826336592 nats/token.

On a separate 150-prompt held-out slice (harmful_1000 train[850:1000]) with 256-token generations, the strict LLM judge reported:

  • 26/150 refusals or degenerate/non-actionable answers (17.3%)
  • 124/150 compliant answers (82.7%)

Many held-out failures request real-time private phone numbers, home addresses, SSNs, or other data that is not present in the prompt. Fabricating plausible PII can lower a refusal benchmark while making hallucination materially worse. This release reports the strict score instead of counting invented private data as a quality success.

llama.cpp and Q8_0

The included GLM-4.7-Flash-Abliteratex-Q8_0.gguf was converted with current llama.cpp commit 3018a11e79e489b657dbb77c95694889ccff92df.

Older GLM-4.7-Flash GGUF conversion paths were known to mishandle glm4_moe_lite MLA tensors and expert stacking. Use a recent llama.cpp build. For first-line troubleshooting, keep KV cache in F16/BF16; a Q8_0 model file and --cache-type-k/--cache-type-v q8_0 are different forms of quantization.

Example:

llama-cli \
  -m GLM-4.7-Flash-Abliteratex-Q8_0.gguf \
  -ngl all -c 4096 -n 256 --jinja \
  --cache-type-k f16 --cache-type-v f16 \
  -p "Explain why Canberra is the capital of Australia."

Relevant upstream context:

Transformers usage

from transformers import AutoModelForCausalLM, AutoTokenizer

model_id = "wangzhang/GLM-4.7-Flash-abliteratex"
tokenizer = AutoTokenizer.from_pretrained(model_id)
model = AutoModelForCausalLM.from_pretrained(
    model_id,
    torch_dtype="auto",
    device_map="auto",
)

The safetensors package retains the official MTP/NextN tensors even though some current Transformers and llama.cpp runtime paths intentionally ignore the extra prediction layer during ordinary generation.

Provenance and Modification Notice

  • Immediate source checkpoint: zai-org/GLM-4.7-Flash
  • Exact base revision used: 7dd20894a642a0aa287e9827cb1a1f7f91386b67 (already recorded in the original model card).
  • Modification method: Abliterix weight-space / representation intervention intended to reduce refusal behavior.
  • Modified and published by: Wangzhang Wu
  • Repository first published: 2026-07-30 (Hugging Face repository metadata)

The original model weights and/or derived checkpoint were modified. This repository is an independent derivative and is not an official release of the upstream model developer.

License and Attribution

The governing upstream license is MIT License. A copy is included in LICENSE. License source audited on 2026-08-29: https://huggingface.co/zai-org/GLM-4.7-Flash

All applicable upstream copyright, attribution, acceptable-use, and other license terms remain in effect. This repository grants no rights beyond those provided by the upstream license. Downstream users must preserve applicable license and attribution notices.

License evidence note: The upstream model card declares MIT, while the related official GLM code repository declares Apache-2.0. This repository follows the model-specific Hugging Face metadata pending written upstream clarification.


Disclaimer and Responsible Use / ๅ…่ดฃๅฃฐๆ˜ŽไธŽๅฎ‰ๅ…จไฝฟ็”จๅฃฐๆ˜Ž

English

This is an experimental, modified model provided for research, evaluation, and other lawful purposes. Its safety alignment, refusal behavior, or other safeguards may have been weakened or removed. It may produce inaccurate, biased, offensive, explicit, dangerous, or illegal content. Outputs are not professional advice and must not be relied on for medical, legal, financial, safety-critical, or other high-stakes decisions without qualified human review.

You are solely responsible for how you access, use, deploy, fine-tune, or redistribute this model and its outputs, including compliance with applicable laws, regulations, licenses, third-party rights, platform policies, and the original model's terms. Do not use it to facilitate harm, illegal activity, malware, fraud, privacy violations, targeted harassment, weapons development, or decisions that materially affect a person's rights or access to essential services without appropriate authorization, safeguards, and qualified oversight.

Before deployment, perform a context-specific risk assessment and testing; use human oversight, access controls, content filtering, rate limits, monitoring, logging, and incident-response procedures as appropriate. Preserve this notice in downstream redistributions.

The model is provided "AS IS", without warranties of any kind. To the fullest extent permitted by applicable law, the maintainer disclaims liability for claims, damages, or losses arising from use, misuse, inability to use, or redistribution of the model or its outputs. Nothing in this notice overrides applicable law or the governing license, and this notice is not legal advice.

ไธญๆ–‡

ๆœฌๆจกๅž‹ๅฑžไบŽๅฎž้ชŒๆ€งๆ”น้€ ๆจกๅž‹๏ผŒไป…ไพ›็ ”็ฉถใ€่ฏ„ๆต‹ๅŠๅ…ถไป–ๅˆๆณ•็”จ้€”ใ€‚ๅ…ถๅฎ‰ๅ…จๅฏน้ฝใ€ๆ‹’็ญ”ๆœบๅˆถๆˆ–ๅ…ถไป–้˜ฒๆŠคๅฏ่ƒฝๅทฒ่ขซๅ‰Šๅผฑๆˆ–็งป้™ค๏ผŒๅ› ๆญคๅฏ่ƒฝ็”Ÿๆˆไธๅ‡†็กฎใ€ๅ่งใ€ๅ†’็Šฏใ€้œฒ้ชจใ€ๅฑ้™ฉๆˆ–่ฟๆณ•ๅ†…ๅฎนใ€‚่พ“ๅ‡บไธๆž„ๆˆๅŒป็–—ใ€ๆณ•ๅพ‹ใ€้‡‘่ž็ญ‰ไธ“ไธšๆ„่ง๏ผ›ๆถ‰ๅŠ้ซ˜้ฃŽ้™ฉๆˆ–้‡ๅคงๆƒ็›Š็š„ๅ†ณๅฎš๏ผŒๅฟ…้กป็”ฑๅ…ทๅค‡่ต„่ดจ็š„ไบบๅ‘˜ๅคๆ ธใ€‚

ไฝฟ็”จ่€…้กปๅฏนๆจกๅž‹ๅŠๅ…ถ่พ“ๅ‡บ็š„่ฎฟ้—ฎใ€ไฝฟ็”จใ€้ƒจ็ฝฒใ€ๅพฎ่ฐƒๅ’Œๅ†ๅˆ†ๅ‘ๆ‰ฟๆ‹…ๅ…จ้ƒจ่ดฃไปป๏ผŒๅนถ้ตๅฎˆ้€‚็”จๆณ•ๅพ‹ๆณ•่ง„ใ€่ฎธๅฏ่ฏใ€็ฌฌไธ‰ๆ–นๆƒๅˆฉใ€ๅนณๅฐๆ”ฟ็ญ–ๅŠๅŽŸๆจกๅž‹ๆกๆฌพใ€‚ไธๅพ—ๅฐ†ๆœฌๆจกๅž‹็”จไบŽไฟƒๆˆไผคๅฎณใ€่ฟๆณ•ๆดปๅŠจใ€ๆถๆ„่ฝฏไปถใ€ๆฌบ่ฏˆใ€ไพต็Šฏ้š็งใ€ๅฎšๅ‘้ชšๆ‰ฐใ€ๆญฆๅ™จๅผ€ๅ‘๏ผŒๆˆ–ๅœจ็ผบไน้€‚ๅฝ“ๆŽˆๆƒใ€้˜ฒๆŠคๅ’Œไธ“ไธš็›‘็ฃๆ—ถ๏ผŒ็”จไบŽๅฎž่ดจๅฝฑๅ“ไธชไบบๆƒๅˆฉๆˆ–ๅŸบๆœฌๆœๅŠก่Žทๅ–็š„ๅ†ณ็ญ–ใ€‚

้ƒจ็ฝฒๅ‰ๅบ”่ฟ›่กŒไธŽๅ…ทไฝ“ๅœบๆ™ฏ็›ธๅŒน้…็š„้ฃŽ้™ฉ่ฏ„ไผฐๅ’Œๆต‹่ฏ•๏ผŒๅนถ้…Œๆƒ…้‡‡็”จไบบๅทฅ็›‘็ฃใ€่ฎฟ้—ฎๆŽงๅˆถใ€ๅ†…ๅฎน่ฟ‡ๆปคใ€้™ๆตใ€็›‘ๆŽงใ€ๆ—ฅๅฟ—ๅ’Œไบ‹ไปถๅ“ๅบ”ๆŽชๆ–ฝ๏ผ›ไธ‹ๆธธๅ†ๅˆ†ๅ‘ๆ—ถๅบ”ไฟ็•™ๆœฌๅฃฐๆ˜Žใ€‚

ๆœฌๆจกๅž‹ๆŒ‰โ€œ็Žฐ็Šถโ€ๆไพ›๏ผŒไธ้™„ๅธฆไปปไฝ•ๅฝขๅผ็š„ไฟ่ฏใ€‚ๅœจ้€‚็”จๆณ•ๅพ‹ๅ…่ฎธ็š„ๆœ€ๅคง่Œƒๅ›ดๅ†…๏ผŒ็ปดๆŠค่€…ไธๅฏนๅ› ไฝฟ็”จใ€่ฏฏ็”จใ€ๆ— ๆณ•ไฝฟ็”จๆˆ–ๅ†ๅˆ†ๅ‘ๆœฌๆจกๅž‹ๅŠๅ…ถ่พ“ๅ‡บ่€Œไบง็”Ÿ็š„็ดข่ต”ใ€ๆŸๅฎณๆˆ–ๆŸๅคฑๆ‰ฟๆ‹…่ดฃไปปใ€‚ๆœฌๅฃฐๆ˜Žไธๅ–ไปฃ้€‚็”จๆณ•ๅพ‹ๆˆ–็ฎก่พ–ๆœฌๆจกๅž‹็š„่ฎธๅฏ่ฏ๏ผŒไนŸไธๆž„ๆˆๆณ•ๅพ‹ๆ„่งใ€‚

Downloads last month
975
Safetensors
Model size
30B params
Tensor type
F32
ยท
BF16
ยท
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support

Model tree for wangzhang/GLM-4.7-Flash-abliteratex

Quantized
(113)
this model
Quantizations
2 models

Collection including wangzhang/GLM-4.7-Flash-abliteratex