mlsanityData to 14 Oct 2026

Abliteration Is Not a Scalpel: Off-Target Effects of Refusal Removal on Decision Disposition Across Model Families

arXiv 2607.17427 ↗First posted 19 Jul 2026cs.LG cs.CL q-fin.CPcited by 1

Not on the map. Why?

Abstract (arXiv)

Abliteration - deleting a model's refusal direction from its weights - is the standard recipe behind popular "uncensored" open-weight models. We show the surgery is not clean. As a disposition probe we use 21,600 decisions under uncertainty - weekly up/down calls on 60 Warsaw Stock Exchange equities over 18 weeks, replayed through a frozen pipeline so the decision-layer model is the only variable. The task elicits no refusals at all, so any between-arm delta is pure side effect. Holding provenance constant (official BF16 checkpoints, a single abliteration author, an identical serving stack, one byte-identical frozen prompt), we compare base and abliterated arms of two Mixture-of-Experts families, Gemma-4-26B-A4B-it and Qwen3-30B-A3B-Instruct-2507. Three effects replicate across both families (weeks-clustered bootstrap CIs excluding zero): abliterated models are systematically more optimistic (+12.2 pp Gemma, +7.4 pp Qwen; the confirmed preregistered endpoint), justify themselves at greater length, and use fewer explicit uncertainty words in forced self-critiques (both exploratory). A fourth effect reverses sign: the same operation makes Gemma-abliterated less confident and Qwen-abliterated more (family CIs non-overlapping) - one weight surgery, opposite shifts in expressed confidence. Capability covariates rule out instruction-following degradation as the driver, and no arm shows economic skill: the apparent edge of abliterated arms is regime beta, not alpha. Our provenance audit also caught two independent contamination channels - a mismatched-quantizer pilot pair and a stale community chat template that silently mangled the rendered prompt - suggesting toolchain artifacts are the rule in studies of community-modified checkpoints. Whoever deploys an "uncensored" model as an agent is deploying a measurably different decision-maker, not the base model minus refusals.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 0 of its 4 references that are in the map. First posted on arXiv 19 Jul 2026.

Builds on

0 of 4 references.

No references here yet.

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Comparative Analysis of LLM Abliteration Methods: A Cross-Architecture Evaluation
  2. 2026Abliteration Mitigation via Refusal Aliases
  3. 2026Do Language Models Know When They'll Refuse? Probing Introspective Awareness of Safety Boundaries
  4. 2026Latent-space Attacks for Refusal Evasion in Language Models
  5. 2026The Granularity Gap: A Multi-Dimensional Cross-Generational Audit of Sycophancy in Gemini Models
  6. 2025An Embarrassingly Simple Defense Against LLM Abliteration Attacks
  7. 2026Over-Personalization Is a Decision Failure: Generation-Induced Apply Bias in LLMs
  8. 2024Unintentional Unalignment: Likelihood Displacement in Direct Preference Optimization