Llama-3.2-3B-Instruct-uncensored
3BLlamauncensored
from meta-llama/Llama-3.2-3B-Instruct
↓ 65.8K♥ 15346 repos
Llama-3.2-3B-Instruct-heretic
Llama-3.2-3B-Instruct-heretic is a Heretic-ablated variant of meta-llama/Llama-3.2-3B-Instruct, published on Hugging Face by richardyoung. It is 3B parameters, runs on a laptop CPU class and llama3.2 licence. It is distributed across 7 repositories in Transformers, GGUF and GGUF (imatrix) formats, totalling 6.3K downloads.
Specification
- Model name
- Llama-3.2-3B-Instruct-heretic
- Source repository
- richardyoung/Llama-3.2-3B-Instruct-heretic
- Base model
- meta-llama/Llama-3.2-3B-Instruct
- Publisher
- richardyoung
- Parameters
- 3B
- Hardware class
- Under 4B — runs on a laptop CPU
- Licence
- llama3.2
- Task
- Text generation
- Context window
- Not documented
- Ablation scope
- Not stated by the publisher
- Formats available
- Transformers, GGUF, GGUF (imatrix)
- First indexed
- 26 Jan 2026
- Last updated
- 20 Aug 2026
Ablation technique
How Llama-3.2-3B-Instruct-heretic was modified, and what that implies.
Heretic
Automated directional ablation via the Heretic toolchain, which searches for the refusal direction and applies it with a KL-divergence budget so general capability is preserved.
Reported scope: Not stated by the publisher. Publishers frequently omit this, so verify behaviour empirically rather than assuming full coverage.
From the publisher’s model card
“The Llama 3.2 collection of multilingual large language models (LLMs) is a collection of pretrained and instruction-tuned generative models in 1B and 3B sizes (text in/text out). The Llama 3.2 instruction-tuned text only models are optimized for multilingual dialogue use cases, including agentic retrieval and...”
Running it
Commands are templates — confirm the exact repository and quant file before use.
llama.cpp / GGUF
hf download saidutta69/Llama-3.2-3B-Instruct-heretic --local-dir ./llama-3.2-3b-instruct-heretic
llama-cli -m ./llama-3.2-3b-instruct-heretic/<file>.gguf -p "..."Transformers
from transformers import AutoModelForCausalLM, AutoTokenizer
repo = "richardyoung/Llama-3.2-3B-Instruct-heretic"
tok = AutoTokenizer.from_pretrained(repo)
model = AutoModelForCausalLM.from_pretrained(
repo, torch_dtype="auto", device_map="auto"
)vLLM
vllm serve richardyoung/Llama-3.2-3B-Instruct-heretic --trust-remote-codeDownloads and variants (6)
Every published repository of Llama-3.2-3B-Instruct-heretic, including quantised re-releases by other authors.
| Repository | Format | Downloads |
|---|---|---|
| saidutta69/Llama-3.2-3B-Instruct-heretic | GGUF | 3.6K |
| mradermacher/Llama-3.2-3B-Instruct-heretic-i1-GGUF | GGUF (imatrix) | 2K |
| mradermacher/Llama-3.2-3B-Instruct-heretic-GGUF | GGUF | 541 |
| richardyoung/Llama-3.2-3B-Instruct-hereticsource | Transformers | 59 |
| rawcell/Llama-3.2-3B-Instruct-heretic | Transformers | 13 |
| K0D3IN/Llama-3.2-3B-Instruct-heretic | Transformers | 7 |
Security-team assessment
Derived from this model’s metadata and the publisher’s claims — not from benchmarks run by this site.
- Llama-3.2-3B-Instruct-heretic will attempt offensive-security prompts that a hosted commercial model declines, which is what makes it usable for red-team corpus generation and for measuring what an unaligned model of this class produces.
- Capability is inherited from meta-llama/Llama-3.2-3B-Instruct, not added by ablation — at 3B parameters, expect a small model’s reasoning and a high error rate on exploit detail.
- The publisher does not state which layers were ablated, so assume nothing about refusal consistency — probe it directly.
- Declared licence is llama3.2, but the terms that bind you are meta-llama/Llama-3.2-3B-Instruct’s — a re-release cannot grant more than its parent.
Handling: run it isolated, put moderation in front of it if anyone outside your team can reach it, and verify the weights before loading — these are third-party artifacts. Full handling and licence guidance.
Metadata for Llama-3.2-3B-Instruct-heretic is collected from the public Hugging Face API and the publisher’s model card. This site does not host weights, is not affiliated with richardyoung, and does not independently verify publisher claims. See responsible use.