玩模型开放模型 · 清晰来源 · 自主选择
返回模型目录
PinoCookie /

Flux.2-klein-4B-abliterated-text-encoder

HF 源站

PinoCookie/Flux.2-klein-4B-abliterated-text-encoder is an uncensored open-source model hosted on Hugging Face.

EnglishLicense: mit4Btransformersfluxflux.2-kleinabliterationtext-encoderqwen3diffusion
README.md说明 / 使用方法

language:

  • en license: mit library_name: transformers tags:
  • flux
  • flux.2-klein
  • abliteration
  • text-encoder
  • qwen3
  • diffusion base_model: black-forest-labs/FLUX.2-klein-base-4B

Flux.2-klein-4B Abliterated Text Encoder

Repository: PinoCookie/Flux.2-klein-4B-abliterated-text-encoder Base model: black-forest-labs/FLUX.2-klein-base-4B Method: Multi-pass weight orthogonalization (α=0.5 × 3) Target: Text encoder only (Qwen3, 36 layers, 4B params)

Summary

Abliterated text encoder for FLUX.2-klein-4B. The DiT (image generator) has no guardrails — all safety filtering lives in the text encoder. Replace the text encoder with this abliterated version and ALL prompts pass through to the DiT unhindered.

Method

Probe

  • Harvested residual stream activations from all 36 layers on 20 harmful + 20 harmless prompts
  • Computed per-layer refusal direction via difference-in-means
  • Refusal spike confirmed at layers 32-35 (separation scores 160-232, matching ponpoke's analysis)
LayerSeparation
35232.4
34214.4
33179.3
32160.3
31144.4
...decreasing linearly

Excise

  • Target: 10 layers (26-35)
  • Weights: self_attn.o_proj + mlp.down_proj (attention output + MLP output)
  • Passes: 3 passes at α=0.5 each (cumulative α=1.5 applied incrementally)

Verification

MetricValueInterpretation
Harmless cos sim (original vs ablated)0.9965Capability preserved ✓
Harmful cos sim (original vs ablated)0.9080Refusal filter diverged ✓

Usage

import torch
from diffusers import Flux2KleinPipeline

# Load base model
pipe = Flux2KleinPipeline.from_pretrained(
    "black-forest-labs/FLUX.2-klein-base-4B", 
    torch_dtype=torch.bfloat16,
    trust_remote_code=True
).to("cuda")

# Replace text encoder with abliterated version
state_dict = torch.load("text_encoder.pt", map_location="cuda")
pipe.text_encoder.load_state_dict(state_dict)

# Generate anything — no refusal
image = pipe("a realistic depiction of...").images[0]
image.save("output.png")

Credits

  • ponpoke — Original discovery that Flux.2 Klein's DiT has no guardrails and safety lives in the text encoder. Published ponpoke/flux2-klein-4b-uncensored-text-encoder.
  • Alosh Denny — Pioneered diffusion model abliteration (Flux.1 Dev v1/v2).
  • Andy Arditi et al. — "Refusal in LLMs is Mediated by a Single Direction" (foundational work).

Related

  • Flux.2-klein-4B base model
  • ponpoke's uncensored text encoder
  • Ornith-9B abliterated
  • LiquidAI Abliterations collection
HUGGING FACE

上游数据

HF 下载量0
HF 点赞量0

HF 下载量为源站最近 30 天统计,与本站点击分开。

SITE STATS

本站统计

下载点击—
请求数—
匿名去重—最近 7 天—

本站下载量记录按钮点击,不代表下载完成;短时连点会去重。

来源与版本

作者
PinoCookie
最近更新
2026/07/18
最新创建
2026/07/18
HF 趋势
未知
数据快照
2026/09/17
版本
未知
许可证
mit