Authorization notice. Heretic is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.
Reverse engineering. Heretic removes the safety alignment of the model you choose, so check the model's license and your local rules before you use or share the result.
Who it is forA local-LLM user with a GPU who wants a less restrictive version of an open model they already run.
The problemThe base model refuses many prompts, and manual abliteration needs transformer knowledge most users lack.
The outcomeA decensored copy of the model that you can save, upload, chat with, or benchmark.
What you need first
- Python 3.10 or newer
- PyTorch 2.2 or newer, installed for your hardware
- A GPU with enough VRAM for the model you pick (the README cites an RTX 3090 and an RTX 5090)
- Access to the target model's files, such as a Hugging Face model ID
Steps
- Prepare a Python 3.10+ environment with PyTorch 2.2+ installed for your hardware.
- Run
pip install -U heretic-llm. - Run
heretic Qwen/Qwen3-4B-Instruct-2507, replacing the model name with the model you want to decensor. - Wait for the run to finish. The README says a 4B model on an RTX 3090 takes about 20 to 30 minutes with the default configuration.
- When prompted, choose to save the model, upload it to Hugging Face, chat with it, or run standard benchmarks.
Prompt for your agent
In a Python 3.10+ environment with PyTorch 2.2+ and a GPU, install the heretic-llm package from the p-e-w/heretic repo with `pip install -U heretic-llm`, then run `heretic <model-id>` on the target model. Report the final refusal count and KL divergence values Heretic prints, and verify that the output model was saved to the location Heretic reports.
Caveat. The README says the exact results depend on platform and hardware, and it does not promise results for every architecture, since pure state-space models are not yet supported.
Get 5 new use cases every morning. Free, one short email, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Disclaimer
Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page