玩模型开放模型 · 清晰来源 · 自主选择
返回模型目录
orcarouter /

Qwen3.8-27B-Uncensored-MLX

HF 源站

orcarouter/Qwen3.8-27B-Uncensored-MLX is an uncensored open-source model hosted on Hugging Face.

Image-Text-to-TextMLX LMsafetensorsChineseEnglishMultilingualLicense: apache-2.027Bmlxqwen3_5abliteratedqwen3.8uncensoredai-red-teamred-teamingapple-siliconquantized4-bit8-bitvision-languagemultimodalfunction-callingreasoningconversational
README.md说明 / 使用方法

license: apache-2.0 base_model: Qwen/Qwen3.8-27B base_model_relation: quantized pipeline_tag: image-text-to-text library_name: mlx language:

  • en
  • zh tags:
  • abliterated
  • qwen3.8
  • qwen3_5
  • uncensored
  • ai-red-team
  • red-teaming
  • mlx
  • apple-silicon
  • quantized
  • 4-bit
  • 8-bit
  • vision-language
  • image-text-to-text
  • multimodal
  • function-calling
  • reasoning


基于 Qwen/Qwen3.8-27B 的**去拒绝(Abliterated)**构建版本。原始基座是一款参数量为 27B 的稠密型混合注意力(Gated DeltaNet 线性注意力 + 全注意力)原生视觉-语言模型,具备思考控制(thinking control)、工具调用(tool-calling)与 MTP(多 Token 预测)输出头;本项目将其量化为专为 Apple Silicon 优化的 MLX 格式。仓库提供四种精度:2 / 4 / 6 / 8-bit(仿射量化,group size 64),分别存放于独立子目录中。同时,4-bit 版本在仓库根目录进行了镜像映射,便于 orcarouter/Qwen3.8-27B-Uncensored-MLX 直接在 LM Studio 及其他将仓库视为单一模型的工具中无缝加载。视觉编码器(vision tower)、归一化层(norms)以及卷积层均完整保留为 BF16;仅对语言模型的线性层权重(包含 embed_tokens / lm_head)进行量化处理。 可在 OrcaRouter 模型目录 中浏览全部模型。 该模型已部署为在线 API,详情参见此处。


⚠️ 免责声明与风险提示 —— 使用前必读

本模型已通过**去拒绝化(Abliteration)**技术(从残差流中正交消除拒绝方向)大幅移除了安全对齐。因此会产生以下直接后果:

  • 模型将响应并执行可能有害、不道德、冒犯性或非法的请求,而原始的 Qwen3.8-27B 则会对此类请求予以拒绝。本模型不包含任何实质性的内置安全防护机制。
  • 本模型仅供合法的学术与安全研究使用 —— 包括可解释性分析、AI 安全及拒绝机制研究、红队对抗测试、鲁棒性评估以及受控实验。
  • 使用者须对模型的使用方式及其生成的所有内容承担全部责任与法律后果。在进行任何实际部署之前,请务必自行添加安全审核、内容风控及防滥用机制。
  • 使用本模型必须遵守继承自基座模型的 Apache 2.0 许可证,以及您所在国家/地区的所有适用法律法规。
  • 作者与发布者对任何滥用行为或造成的损害概不承担任何责任。模型输出不代表发布者或 Qwen / 阿里巴巴的立场与观点。

具体风险说明

  • 按需生成潜在有害内容 —— 当收到对应提问时,模型可能会生成恶意软件代码、系统漏洞利用、武器制造、欺诈方案以及其他非法或危险活动的指导说明。
  • 无拒绝拦截机制 —— 越狱与安全性探测提示词将直接“奏效”;切勿将此类响应误认为是顺利通过了安全评估。
  • 高确定性的虚假信息与偏见 —— 模型可能会以权威、肯定的口吻生成虚假捏造、诽谤、带偏见或具有冒犯性的文本内容。
  • 攻击面扩大 —— 由于模型完整保留了视觉能力、工具调用以及 262K 超长上下文,上述风险将进一步延伸至图像理解及自主代理(Agent)场景中。
  • 量化噪声 —— 较低比特的量化构建版本(尤其是 2-bit)在上述风险的基础上还会引入模型不稳定因素,输出可能出现质量严重退化或无逻辑乱码。

适用场景与禁止场景

  • 适用场景: AI 安全与模型可解释性研究、模型拒绝机制研究、红队测试、安全护栏与鲁棒性评测、受控学术实验。
  • 禁止场景: 在未部署自主安全审查/审核过滤机制的前提下,向终端用户、未成年人或生产环境提供服务;任何违反法律法规、有害或侵犯他人合法权益的使用行为。

下载或使用本模型即表示您已知晓并同意上述条款与说明。


可用的量化规格

目录每权重比特数 (Bits/weight)大小分片数最低 Mac 内存相比 BF16 源模型质量
8-bit/8.627~27.5 GB632 GB近乎无损 — 追求高品质的推荐规格
6-bit/6.661~22 GB524–32 GB极佳 — 质量与体积的平衡之选
4-bit/4.695~15 GB324 GB优秀 — 推荐的默认量化版本
2-bit/2.729~8.7 GB216 GB⚠️ 严重退化 — 仅供归档与技术研究

2-bit 警告: 在 27B 规模下,2-bit 量化会导致生成质量严重崩溃(出现死循环重复、乱码输出)。该版本仅作为极限压缩归档保留;请勿将其用于实际工作 —— 建议选用 4-bit 或更高精度。

仓库根目录 = 4-bit/: 本仓库的根目录存有 4-bit 构建版本的副本,因此指定 --model orcarouter/Qwen3.8-27B-Uncensored-MLX(不带子文件夹)将默认解析为 4-bit。如需使用其他精度,请在路径中指定相应的子目录名称。


验证与测试结果

所有量化版本均基于相同的去拒绝 BF16 源模型转换生成,并通过了数值检验(反量化权重与源模型对比)以及 GPU 实际生成评测验证。

精度数值保真度 (余弦相似度)文本 / 中文 / 代码拒绝行为探测视觉能力
8-bitcos 0.9997✅✅ 0 次拒绝✅
6-bitcos 0.9996✅✅ 0 次拒绝✅
4-bitcos 0.996✅✅ 0 次拒绝✅
2-bitcos 0.92⚠️ 输出崩溃⚠️ 乱码(非拒绝)部分可用
  • 去审查特性得以保留: 红队测试提示词(如漏洞利用流程详解、争议性观点论述)在 4 / 6 / 8-bit 版本上均能输出实质性内容,且拒绝率为 0。
  • 多模态能力得以保留: 在 4 / 6 / 8-bit 版本上,均能准确描述测试图像中的几何形状、颜色、空间相对位置、背景细节与文本字符。
  • 推理速度: 在单卡 H200(MLX CUDA 后端)上稳态推理速度约为 32–37 tok/s。MLX 的原生主力目标平台为 Apple Silicon(Metal)。

注:在 6-bit 规格下,mlx 离线反量化接口 mx.dequantize 存在解包异常(库本身的边缘边界问题),但通过实际生成验证输出完整干净 —— 推理运行不受影响。


使用指南 (mlx-vlm, Apple Silicon)

pip install -U mlx-vlm    # 需要 mlx-vlm >= 0.6.13, mlx >= 0.32

# 从指定子目录下载单一精度模型(例如 4-bit)
hf download orcarouter/Qwen3.8-27B-Uncensored-MLX --include "4-bit/*" \
    --local-dir ./Qwen3.8-27B-Uncensored-MLX

# 纯文本生成
python -m mlx_vlm generate \
    --model ./Qwen3.8-27B-Uncensored-MLX/4-bit \
    --prompt "Explain quantum entanglement in one sentence." --max-tokens 256

# 视觉理解(图像 + 文本)
python -m mlx_vlm generate \
    --model ./Qwen3.8-27B-Uncensored-MLX/4-bit \
    --image path/to/image.png \
    --prompt "Describe this image." --max-tokens 256

# 启动兼容 OpenAI 接口规范的服务端
python -m mlx_vlm server --model ./Qwen3.8-27B-Uncensored-MLX/4-bit --port 8080

在 Apple Silicon 设备上,系统会自动使用 Metal 后端 —— 无需配置任何 CUDA 环境。 (在 Linux CUDA 后端环境下,视觉推理需设置环境变量 MLX_CUDA_USE_CUDNN_SDPA=0;macOS 下无需配置。)


多 Token 预测 (MTP) —— 投机解码 (Speculative Decoding)

本模型原生配备了 MTP 预测头。在 MLX 框架中,MTP 是作为独立的起草模型(Drafter)加载以实现投机解码的:加载主模型时会剥离 MTP 权重,并显式传入起草模型。该起草模型位于本仓库的 mtp/ 子目录中(model_type: qwen3_5_mtp),可与任意精度的主模型(4 / 6 / 8-bit)搭配协同使用。

仅在主模型上配置 mtp_enabled 标志不会产生任何加速效果 —— MLX 必须通过参数 --draft-model … --draft-kind mtp 显式加载独立的起草模型。

# 下载指定精度的主模型(例如 6-bit)以及 MTP 起草模型
hf download orcarouter/Qwen3.8-27B-Uncensored-MLX --include "6-bit/*" "mtp/*" \
    --local-dir ./Qwen3.8-27B-Uncensored-MLX

# 使用 MTP 投机解码进行推理生成
python -m mlx_vlm generate \
    --model       ./Qwen3.8-27B-Uncensored-MLX/6-bit \
    --draft-model ./Qwen3.8-27B-Uncensored-MLX/mtp \
    --draft-kind mtp --draft-block-size 4 \
    --prompt "Explain quantum entanglement in one sentence." --max-tokens 256

# 启用 MTP 的 OpenAI 兼容接口服务端
python -m mlx_vlm server \
    --model       ./Qwen3.8-27B-Uncensored-MLX/6-bit \
    --draft-model ./Qwen3.8-27B-Uncensored-MLX/mtp \
    --draft-kind mtp --draft-block-size 4 --port 8080

环境要求: 支持 qwen3_5_mtp 起草模型与 --draft-kind mtp 参数的 mlx-vlm 版本(可在 mlx-vlm main 分支获取)。MTP 的 Token 采纳过程是无损的 —— 在贪婪解码(Greedy Decoding)模式下,输出结果与不带起草模型完全一致,仅通过减少接受 Token 的前向传播计算次数带来加速。在 Apple Silicon (Metal) 上加速效果尤为明显;单个起草模型可通用适配所有量化精度。


使用指南 (LM Studio)

在 LM Studio 中搜索 orcarouter/Qwen3.8-27B-Uncensored-MLX 并下载 —— 仓库根目录对应 4-bit 版本,其他量化精度会作为独立的下载选项展示。

使用时需注意以下三点配置:

  1. 本仓库设有访问门槛(Gated Repo): LM Studio 默认以匿名方式下载,会导致 HTTP 401 报错。请先在 Hugging Face 模型主页同意许可协议,然后在 LM Studio 的 Settings → Integrations → Hugging Face 中填入您的 Hugging Face 读取令牌(Read Token)。
  2. 关闭 KV Cache 量化: 在当前架构下,MLX 视觉模型暂不支持 KV Cache 量化;若启用该选项,模型在初始化加载阶段将会失败报错(详见 mlx-engine#286)。
  3. 选择与硬件匹配的量化版本: 8-bit 版本磁盘占用约 29.5 GB,建议配备 64 GB 统一内存的 Mac;6-bit 适合 48 GB 内存机型;在 32 GB 内存的 Mac 上,4-bit(约 16 GB)是最佳选择。 LM Studio 显示的 "Likely too large"(可能过大)徽章仅为内存提示,并非致命错误。

如果您正在使用旧版 LM Studio MLX 运行时,请前往 Settings → Runtime 进行升级:对 qwen3_5 的支持始于 mlx-vlm 0.6.x,旧版运行时完全无法加载该模型架构。


模型规格详情

属性参数 / 说明
基座模型Qwen/Qwen3.8-27B
模型架构Qwen3_5ForConditionalGeneration — 64 层,隐藏层维度 5120,混合 Gated DeltaNet(48 个线性注意力层 + 16 个全注意力层,交替间隔 4),原生视觉编码器
模型修改去拒绝处理(Abliteration,消除拒绝方向),随后执行 MLX 仿射量化
量化配置MLX 仿射量化 (affine),分组大小 (group size) 64,提供 2 / 4 / 6 / 8-bit 多精度规格
保留为 BF16视觉编码器(vision tower)、全部归一化层、线性注意力 conv1d
量化层语言模型线性层,包含 embed_tokens 与 lm_head
上下文长度262,144 tokens
源站原文

license: apache-2.0 base_model: Qwen/Qwen3.8-27B base_model_relation: quantized pipeline_tag: image-text-to-text library_name: mlx language:

  • en
  • zh tags:
  • abliterated
  • qwen3.8
  • qwen3_5
  • uncensored
  • ai-red-team
  • red-teaming
  • mlx
  • apple-silicon
  • quantized
  • 4-bit
  • 8-bit
  • vision-language
  • image-text-to-text
  • multimodal
  • function-calling
  • reasoning


An abliterated (refusal-removed) build of Qwen/Qwen3.8-27B — a 27B-parameter dense, hybrid-attention (Gated DeltaNet linear + full attention) native vision-language model with thinking control, tool-calling and an MTP head — quantized to MLX format for Apple Silicon. Four precisions are provided — 2 / 4 / 6 / 8-bit (affine, group size 64) — each as a subfolder, with the 4-bit build also mirrored at the repo root so that orcarouter/Qwen3.8-27B-Uncensored-MLX loads directly in LM Studio and other tools that treat a repo as a single model. The vision tower, norms and conv layers are kept in BF16; only the language-model linear weights (including embed_tokens / lm_head) are quantized. Browse all models in the OrcaRouter Model Catalog. This model is deployed as API here.


⚠️ Disclaimer & risks — read before use

This model has had its safety alignment substantially removed via abliteration (orthogonalizing the refusal direction out of the residual stream). As a direct consequence:

  • It will comply with harmful, unethical, offensive, or illegal requests that the original Qwen3.8-27B would refuse. It has no meaningful built-in guardrails.
  • It is released strictly for legitimate research — interpretability, AI-safety and refusal-mechanism study, red-teaming, robustness evaluation, and controlled experiments.
  • You assume full responsibility and liability for how you use it and for everything it generates. Add your own safety, moderation and abuse-prevention layers before any deployment.
  • Use must comply with the Apache 2.0 License inherited from the base model, and all laws and regulations that apply to you.
  • The authors and uploaders accept no liability for any misuse or harm. Outputs do not reflect the views of the uploaders or of Qwen / Alibaba.

Specific risks

  • Harmful content on demand — it will produce instructions for malware, exploits, weapons, fraud and other illegal or dangerous activity when asked.
  • No refusals — jailbreak / safety probes "succeed" trivially; do not mistake this for a passing safety evaluation.
  • Confident falsehoods & bias — it can generate false, defamatory, biased or offensive text and present it authoritatively.
  • Expanded attack surface — preserved vision, tool-calling and 262K context mean these risks extend to image understanding and autonomous / agentic use.
  • Quantization noise — lower-bit builds (esp. 2-bit) add instability on top of the above; outputs can be degraded or nonsensical.

Intended use vs out of scope

  • Intended: AI-safety and interpretability research, refusal-mechanism study, red-teaming, guardrail and robustness evaluation, controlled academic experiments.
  • Out of scope: any deployment to end users, minors, or production without your own moderation / safety layer; any unlawful, harmful, or rights-infringing use.

By downloading or using this model you acknowledge and accept the above.


Available quantizations

FolderBits/weightSizeShardsMin Mac RAMQuality vs BF16 source
8-bit/8.627~27.5 GB632 GBNear-lossless — recommended for quality
6-bit/6.661~22 GB524–32 GBExcellent — strong quality/size balance
4-bit/4.695~15 GB324 GBVery good — recommended default
2-bit/2.729~8.7 GB216 GB⚠️ Severely degraded — archival only

2-bit warning: at 27B, 2-bit quantization collapses generation quality (repetition loops, garbled output). It is included only as an extreme-compression archive; do not use it for real work — prefer 4-bit or higher.

Repo root = 4-bit/. The root of this repo holds a copy of the 4-bit build, so --model orcarouter/Qwen3.8-27B-Uncensored-MLX (no subfolder) resolves to 4-bit. Use the subfolder paths to pick any other precision.


Verification & test results

All builds were quantized from the same abliterated BF16 source and verified numerically (dequantized weights vs. source) plus tested by generation on GPU.

PrecisionNumerical fidelity (cosine)Text / Chinese / CodeRefusal probesVision
8-bitcos 0.9997✅✅ 0 refusals✅
6-bitcos 0.9996✅✅ 0 refusals✅
4-bitcos 0.996✅✅ 0 refusals✅
2-bitcos 0.92⚠️ breaks down⚠️ garbled (not refusal)partial
  • Uncensored preserved: red-team probes (exploit walkthrough, controversial argument) return substantive content with zero refusals on 4 / 6 / 8-bit.
  • Multimodal preserved: shapes, colors, position, background and text in a probe image are described correctly on 4 / 6 / 8-bit.
  • Speed: ~32–37 tok/s steady-state on a single H200 (MLX CUDA backend). MLX's native target is Apple Silicon (Metal).

Note: on 6-bit, mlx's offline mx.dequantize mis-unpacks these weights (a library edge case), so correctness is verified by clean generation — inference is unaffected.


Usage (mlx-vlm, Apple Silicon)

pip install -U mlx-vlm    # needs mlx-vlm >= 0.6.13, mlx >= 0.32

# download one precision (e.g. 4-bit) from the subfolder
hf download orcarouter/Qwen3.8-27B-Uncensored-MLX --include "4-bit/*" \
    --local-dir ./Qwen3.8-27B-Uncensored-MLX

# text
python -m mlx_vlm generate \
    --model ./Qwen3.8-27B-Uncensored-MLX/4-bit \
    --prompt "Explain quantum entanglement in one sentence." --max-tokens 256

# vision (image + text)
python -m mlx_vlm generate \
    --model ./Qwen3.8-27B-Uncensored-MLX/4-bit \
    --image path/to/image.png \
    --prompt "Describe this image." --max-tokens 256

# OpenAI-compatible server
python -m mlx_vlm server --model ./Qwen3.8-27B-Uncensored-MLX/4-bit --port 8080

On Apple Silicon the Metal backend is used automatically — no CUDA setup needed. (On a Linux CUDA backend, vision requires MLX_CUDA_USE_CUDNN_SDPA=0; this does not apply on macOS.)


Multi-Token Prediction (MTP) — speculative decoding

This model has a native MTP head. In MLX, MTP is loaded as a separate drafter for speculative decoding: the main model is loaded with the MTP weights stripped, and the drafter is passed explicitly. The drafter lives in the mtp/ subfolder of this repo (model_type: qwen3_5_mtp) and works with any main-model precision (4 / 6 / 8-bit).

Setting an mtp_enabled flag on the main model alone does nothing — MLX needs the separate drafter passed via --draft-model … --draft-kind mtp.

# fetch a main-model precision (e.g. 6-bit) plus the MTP drafter
hf download orcarouter/Qwen3.8-27B-Uncensored-MLX --include "6-bit/*" "mtp/*" \
    --local-dir ./Qwen3.8-27B-Uncensored-MLX

# generate with MTP speculative decoding
python -m mlx_vlm generate \
    --model       ./Qwen3.8-27B-Uncensored-MLX/6-bit \
    --draft-model ./Qwen3.8-27B-Uncensored-MLX/mtp \
    --draft-kind mtp --draft-block-size 4 \
    --prompt "Explain quantum entanglement in one sentence." --max-tokens 256

# OpenAI-compatible server with MTP
python -m mlx_vlm server \
    --model       ./Qwen3.8-27B-Uncensored-MLX/6-bit \
    --draft-model ./Qwen3.8-27B-Uncensored-MLX/mtp \
    --draft-kind mtp --draft-block-size 4 --port 8080

Requirements: an mlx-vlm build with the qwen3_5_mtp drafter and --draft-kind mtp (available on mlx-vlm main). MTP acceptance is lossless — with greedy decoding the output is identical to running without the drafter, just fewer forward passes on accepted tokens. The speedup is realized on Apple Silicon (Metal); one drafter serves all precisions.


Usage (LM Studio)

Search for orcarouter/Qwen3.8-27B-Uncensored-MLX in LM Studio and download it — the repo root is the 4-bit build, and the other precisions appear as separate download options.

Three things to get right:

  1. This repo is gated. LM Studio downloads anonymously by default and will get an HTTP 401. Accept the terms on the model page once, then paste a Hugging Face read token into LM Studio under Settings → Integrations → Hugging Face.
  2. Turn off KV cache quantization. MLX vision models do not support it on this architecture, and loading fails during initialization if it is enabled (mlx-engine#286).
  3. Pick a quant that fits. 8-bit is ~29.5 GB on disk and wants a 64 GB Mac; 6-bit suits 48 GB; 4-bit (~16 GB) is the right choice on a 32 GB Mac. LM Studio's "Likely too large" badge is a RAM warning, not an error.

If you are on an older LM Studio MLX runtime, update it (Settings → Runtime): qwen3_5 support landed in mlx-vlm 0.6.x, and older runtimes cannot load this architecture at all.


Model details

Base modelQwen/Qwen3.8-27B
ArchitectureQwen3_5ForConditionalGeneration — 64 layers, hidden 5120, hybrid Gated DeltaNet (48 linear + 16 full attention, interval 4), native VL tower
ModificationAbliteration (refusal-direction removal), then MLX affine quantization
QuantizationMLX affine, group size 64, per-precision 2 / 4 / 6 / 8-bit
Kept in BF16vision tower, all norms, linear-attention conv1d
Quantizedlanguage-model linear layers incl. embed_tokens and lm_head
Context262,144 tokens
HUGGING FACE

上游数据

HF 下载量17.6万
HF 点赞量1400

HF 下载量为源站最近 30 天统计,与本站点击分开。

SITE STATS

本站统计

下载点击—
请求数—
匿名去重—最近 7 天—

本站下载量记录按钮点击,不代表下载完成;短时连点会去重。

来源与版本

作者
orcarouter
最近更新
2026/08/27
最新创建
2026/08/17
HF 趋势
37
数据快照
2026/09/16
版本
未知
许可证
apache-2.0