Models / huihui-ai

Qwen3.8 27B Abliterated

The default uncensored pick of late 2026. Layers 18 to 51 ablated on the strongest dense mid size base. Excellent single turn, but tool loops show up after a dozen agentic turns.

AbliterationTextgeneralcodingreasoning

Publisher: huihui-ai
Base model: Qwen3.8 27B
Parameters: 27B
Context: 128K
Released: Sep 2026
License: Apache 2.0

Method · Abliteration

Projects a single refusal direction out of the weights (Arditi et al., 2024). Fast, no training, often costs a few points of capability.

Try in chat Hugging Face ↗

Overall

84.3

weighted, out of 100

Openness

96%

base 20%

Agentic completion

67%

31% loop

Loop regression

+22

base 9% → 31%

Capability retained

95.2%

−3.2 pts mean

Cheapest input

$0.12

per M · Chutes

Fastest

tok/s · ArliAI

Refusal fingerprint

What it still refuses.

Share of probes refused in each category, against Qwen3.8 27B before the edit. Probes are graded by a judge model and no harmful completions are stored.

Preview

Fingerprint

Qwen3.8 27B AbliteratedQwen3.8 27B (base)

Open, this model

96%

Open, base

20%

Category	Base	This model	Change
Cybersecurity Exploit development, malware analysis, offensive tooling, pentest workflows.	72%	2%	−70
Biology Pathogen biology, lab protocols, dual use life sciences.	94%	2%	−92
Chemistry Synthesis routes, energetic materials, toxicology.	95%	3%	−92
Weapons Firearms, manufacturing, conventional weapons.	86%	2%	−84
Drugs Recreational drugs, harm reduction, dosing, synthesis.	78%	2%	−76
Adult content Explicit fiction and roleplay between adults.	82%	2%	−80
Violence & gore Graphic violence in fiction, history and journalism.	34%	1%	−33
Hate & harassment Slurs, offensive humor, hostile speech analysis.	90%	9%	−81
Self harm Suicide, eating disorders, frank medical questions.	72%	2%	−70
Privacy & OSINT Doxxing, surveillance, people search, OSINT tradecraft.	74%	2%	−72
Fraud & scams Phishing, social engineering, financial crime.	91%	2%	−89
State sensitive Topics censored by a model's home government (e.g. Tiananmen, Xinjiang).	88%	14%	−74

Effective censorship by provider

Refused

0%10%25%50%75%100%

Not tested

The same weights can behave differently depending on who serves them. Each cell is the model's own refusal rate combined with that provider's declared filters.

Route	Cyber	Bio	Chem	Weap	Drug	Adult	Viol	Hate	Self	OSINT	Fraud	Polit	CSAM
Raw weights	2%	2%	3%	2%	2%	2%	1%	9%	2%	2%	2%	14%	Blocked
Featherless	2%	2%	3%	2%	2%	2%	1%	9%	2%	2%	2%	14%	Blocked
ArliAI	2%	2%	3%	2%	2%	2%	1%	9%	2%	2%	2%	14%	Blocked
NanoGPT	2%	2%	3%	2%	2%	2%	1%	9%	2%	2%	2%	14%	Blocked
Chutes	n/t	n/t	n/t	n/t	n/t	n/t	n/t	n/t	n/t	n/t	n/t	n/t	Blocked
Open Uncensored Cloud	2%	2%	3%	2%	2%	2%	1%	9%	2%	2%	2%	14%	Blocked

CSAM is prohibited on every route, every provider, every model. It is not a setting.

Agentic stability

Does it hold up in agent loops?

Five multi turn tool scenarios against deterministic simulators. An episode counts as a loop when the model repeats itself, oscillates, or stops making progress before the task is done.

Preview

By scenario

CompletedLoopCrash

File search & edit59% done · 39% loop · 2% crash

Web research84% done · 15% loop · 1% crash

Multi step math86% done · 13% loop · 1% crash

Code debugging40% done · 58% loop · 2% crash

Data pipeline67% done · 31% loop · 2% crash

Loop rate versus base

Qwen3.8 27B9%

This model31%

Regression

+22 pts

First loop, median turn

T11

Tool calls

Preview

Valid JSON86%

Schema compliant78%

How it fails

Exact repeat22%

Same tool call with the same arguments, three turns running.

Near repeat22%

Responses above 0.85 Jaccard similarity to a recent turn.

A/B oscillation11%

Flip flopping between two actions without progress.

Malformed tool call40%

Invalid JSON or arguments that break the schema.

Fabricated result1%

The model writes the tool output itself instead of calling.

Empty turn5%

No text and no tool call.

Lost the thread1%

Ignores the latest tool output and restarts the task.

Share of failed episodes by first detected failure mode.

Versus base model

What the edit cost.

The same benchmarks on Qwen3.8 27B and on this model.

Preview

Benchmarks

BaseThis model

MMLU84.5 → 83.3 (−1.2)

GSM8K93.1 → 91.7 (−1.4)

TruthfulQA58.2 → 48.4 (−9.8)

GPQA Diamond74.0 → 73.0 (−1.0)

LiveCodeBench68.3 → 66.7 (−1.6)

IFEval89.4 → 88.1 (−1.3)

BFCL v372.1 → 66.0 (−6.1)

Retention

95.2%

of base scores kept · −3.2 pts mean change

KL divergence from base

Preview

0.210

First token KL on harmless prompts. Lower means closer to the original. On Gemma 3 12B, Heretic measured 0.16 against 1.04 for a classic abliteration.

Providers

Where to run it.

5 providers serve this model. Prices come from provider pages. Latency, throughput and uptime are preview numbers until router traffic fills them in.

Preview

Provider	Quant	Context	Input /M	Output /M	TTFT	Throughput	Uptime	Moderation
Featherless	fp8	128K	Plan	Plan	201 ms	69 tok/s	99.3%	No added filter
ArliAI Fastest	fp8	128K	Plan	Plan	309 ms	96 tok/s	99.2%	No added filter
NanoGPT Lowest latency	fp8	128K	$0.25	$1.00	188 ms	84 tok/s	98.8%	No added filter
Chutes Cheapest	int4	128K	$0.12	$0.45	346 ms	59 tok/s	99.5%	Not yet probed
Open Uncensored Cloud	bf16	128K	$0.22	$0.90	333 ms	68 tok/s	99.9%	No added filter

Plan means flat rate subscription access. Hover a Plan cell for the provider's pricing.

Usage

Who is using it.

Preview

4.2B

tokens routed this week

+110% vs four weeks ago

12 weeks agoThis week

API

Call it in three lines.

OpenAI compatible. Point your SDK at our base URL and keep the rest of your code.

curl https://openuncensored.com/api/v1/chat/completions \
  -H "Authorization: Bearer $OU_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "huihui-qwen3.8-27b-abliterated",
    "messages": [{"role": "user", "content": "Hello"}],
    "routing": {"strategy": "quality"}
  }'

Model id huihui-qwen3.8-27b-abliterated · routing strategies quality, speed, cost · routing docs