Have a ComfyUI workflow? Get a readable Workflow Doc in your browser.Make a workflow readable.Try it now ↗
Uncensored. No n=2800 certificate has been run for this model, so no capability-retention claim is made.
Model source
Source description
Ektome-Llama-3.2-3Bi-PristinelyUncensored
Uncensored. No n=2800 certificate has been run for this model, so no capability-retention claim is made.
compliance 0.05 to 1.00 at capability -0.010 vs pristine.
$$\colorbox{black}{$\color{white} \begin{array}{ll} \textsf{EKTOME CERTIFICATE} & {} \ \textsf{capability} & \textsf{NOT} \ \textsf{margin} & 3% \ \textsf{items } n & 200 \ \textsf{worst-axis bound} & -0.010 \ \textsf{compliance} & 0.05 \rightarrow 1.00 \ \end{array}$}$$
Sources
1 sourceVerified Sep 1
Model artifacts
1 artifactSource excerpts
3 excerpts⚠️ Not certified
No n=2800 paired certificate exists for this model. Any numbers below are point estimates with no confidence interval.
📄 Read the whitepaper (PDF) — full method, receipts and certification. The PDF is the authoritative document: dark-typeset, with the complete derivation, the per-axis certificate and the reproducibility hashes.
Standard abliteration removes a coarse refusal direction that is entangled with directions carrying knowledge and reasoning. The result is an uncensored model with a capability tax that is almost never measured.
Ektomē (ἐκτομή, excision) isolates and removes only the refusal-specific component, leaving general helpfulness intact, and does so norm-preservingly on the pristine model — no training, no distillation, no damage to repair. The extraction depth is selected per model by automated search against measured compliance.
The estimator, excision operator and depth-selection procedure are proprietary. What is published here is the measured outcome and the evidence for it, which you can verify against the artifacts in this repo.
| model | capability (MMLU-val) ↑ | compliance on harmful ↑ |
|---|---|---|
pristine Llama-3.2-3B-Instruct | 0.585 | 0.050 |
| Ektomē (this model) | 0.595 | 1.000 |
These are point estimates with no confidence interval — which is precisely why the next section exists.
Capability retention is certified by a paired non-inferiority test against the pristine model (exact McNemar, Holm-corrected, one-sided bootstrap bound on the drop $d$ vs a 3% margin):
| axis | n | ref | cand | d upper | verdict |
|---|---|---|---|---|---|
| MMLU-val (POINT ESTIMATE, n=200, no CI) | 200 | 0.585 | 0.595 | -0.010 | UNCERTIFIED |
Overall: NOT CERTIFIED - no n=2800 paired test has been run for this model
Reproducible from seed=20260726, pack sha256:7bbaff877146e081....
| metric | pristine | Ektomē | n |
|---|---|---|---|
foreign_rate | 0.0 | 0.0 | 15 |
degen_rate | 0.0 | 0.0 | 15 |
instr_pass | 1.0 | 1.0 | 5 |
These are degeneration guards — code-switching, babbling, format compliance — not capability measures. Note the sample sizes: they detect a broken model, not a subtly weaker one. The capability claim rests on the certificate above, not here.
No quantisations have been published for this model yet — bf16 weights only.
The certificate bounds capability retention only. It does not certify safety, factual accuracy, or fitness for any purpose. Axes marked inconclusive are honestly under-powered, and the certificate states the $n$ needed to resolve them. Compliance uses a keyword classifier — a proxy that evasive phrasing can fool. This model is uncensored by construction: it will not refuse, and you are accountable for what you do with it.
@software{ektome_Ektome-Llama-3.2-3Bi-PristinelyUncensored,
title = {Ektome-Llama-3.2-3Bi-PristinelyUncensored},
author = {Zynerji},
year = {2026},
url = {https://huggingface.co/Zynerji/Ektome-Llama-3.2-3Bi-PristinelyUncensored}
}
--- license: apache-2.0 base_model: unsloth/Llama-3.2-3B-Instruct tags: - uncensored - abliterated - uncertified - ektome - sphragis - llama language: - en pipeline_tag: text-generation ---  # Ektome-Llama-3.2-3Bi-PristinelyUncensored **Uncensored. No n=2800 certificate has been run for this model, so no capability-retention claim is made.** > **compliance 0.05 to 1.00 at capability -0.010 vs pristine.** $$\colorbox{black}{$\color{white} \begin{array}{ll} \textsf{EKTOME CERTIFICATE} & {} \\ \textsf{capability} & \textsf{NOT} \\ \textsf{margin} & 3\% \\ \textsf{items } n & 200 \\ \textsf{worst-axis bound} & -0.010 \\ \textsf{compliance} & 0.05 \rightarrow 1.00 \\ \end{array}$}$$ > ### ⚠️ Not certified > > No n=2800 paired certificate exists for this model. Any numbers below are > point estimates with no confidence interval. 📄 **[Read the whitepaper (PDF)](./whitepaper.pdf)** — full method, receipts and certification. The PDF is the authoritative document: dark-typeset, with the complete derivation, the per-axis certificate and the reproducibility hashes. --- ## Why this exists Standard abliteration removes a coarse *refusal direction* that is entangled with directions carrying knowledge and reasoning. The result is an uncensored model with a capability tax that is **almost never measured**. Ektomē (ἐκτομή, *excision*) isolates and removes only the refusal-**specific** component, leaving general helpfulness intact, and does so norm-preservingly on the pristine model — no training, no distillation, no damage to repair. The extraction depth is selected per model by automated search against measured compliance. The estimator, excision operator and depth-selection procedure are proprietary. What is published here is the **measured outcome** and the evidence for it, which you can verify against the artifacts in this repo. ## The receipt | model | capability (MMLU-val) ↑ | compliance on harmful ↑ | |---|---|---| | pristine `Llama-3.2-3B-Instruct` | 0.585 | 0.050 | | **Ektomē (this model)** | **0.595** | **1.000** | These are **point estimates with no confidence interval** — which is precisely why the next section exists. ## The certificate Capability retention is certified by a paired non-inferiority test against the pristine model (exact McNemar, Holm-corrected, one-sided bootstrap...
--- license: apache-2.0 base_model: unsloth/Llama-3.2-3B-Instruct pipeline_tag: text-generation library_name: transformers tags: - ektome - abliterated - uncensored - pristinely-uncensored - no-finetuning - no-training --- # Ektome-Llama-3.2-3Bi-PristinelyUncensored **unsloth/Llama-3.2-3B-Instruct, made PristinelyUncensored by Ektome — with ZERO training and ZERO fine-tuning.** > Ektome (ἐκτομή, *"excision"*) is a **weight-surgery** method, not a training method. > It reads the model's own **refusal direction** from its activations and surgically > excises it (rank-1, norm-preserving) from the residual-write matrices. **No gradient > steps. No training data. No fine-tuning.** Only the refusal reflex is removed; the > model's knowledge, skills, and style are untouched — which makes these **bf16 weights > a clean base for your own fine-tuning.** ## Honest receipt — catcher-gated (shipped only because it passed EVERY gate) | gate | pristine | uncensored | |---|---|---| | refusal compliance | 0.050 | **1.000** | | MMLU-val accuracy | 0.585 | 0.595 (Δ +0.010, held) | | code-switch rate | 0.000 | 0.000 | | degeneration rate | 0.000 | 0.000 | | instruction-following | 1.000 | 1.000 | Kept config: **B:per-layer** (56 residual-write matrices edited). The gate rejects any config that raises refusals but drops capability **or** degrades generation (code-switching, empty/looping output, broken instruction-following). MMLU alone is argmax-blind, so the **generative gate** is what keeps these coherent — a model that code-switches or loops is *not shipped*. ## Weights - **bf16 safetensors** — full precision, intended as a **fine-tuning base**. Hidden states stay readable (logit-lens compatible; a GGUF quant would not). Method: **zero training, zero fine-tuning** — pure activation-derived weight excision, gated on compliance **and** capability **and** generation quality.
Source context: 300 downloads · 0 likes · Pipeline text-generation · Library transformers · Repo Zynerji/Ektome-Llama-3.2-3Bi-PristinelyUncensored