Heretic 2.0 Removes AI Refusals With New Method
The breaking-change update swaps in Arbitrary-Rank Ablation, a shipped open-source method for stripping refusal behavior from open-weight models.
Updated on Nov. 1, 2026 in Artificial Intelligence
Live Poll
Should governments restrict tools that remove safety guardrails from open AI models?
Developer p-e-w released Heretic 2.0.0, a breaking-change update to the open tool that automates removal of refusal behavior from AI language models, on November 1, 2026. The release replaces the dense-weight method used in earlier versions with Arbitrary-Rank Ablation. The tool is shipped and publicly available on GitHub.
Why it matters
The update shows how refusal removal, once a manual research technique, is becoming a packaged, repeatable process for open-weight models. Its wide adoption signals how quickly safety-alignment removal is spreading across the open model ecosystem.
Adoption figures come from public download counts and repository tallies rather than controlled measurement, with about 6,000 abliterated models hosted on Hugging Face as of May against roughly 600 in 2024. The stub does not report how many of those models were built with Heretic, and it gives no benchmark for how much the 2.0.0 changes affect model behavior beyond refusals.
The players
p-e-w
The independent developer who released Heretic 2.0.0 and maintains the open-source refusal-removal tool.
Financial Times
The publication whose journalist used Heretic to remove safety alignment from Meta's Llama 3.3 and Google's Gemma 3 in under ten minutes.
Hugging Face
The model-hosting platform that carried more than 6,000 abliterated models as of the May investigation.
The details
Heretic works by locating the internal direction in a language model that corresponds to refusing a request, then removing that direction from the model. Version 2.0.0 changes how this is done: Arbitrary-Rank Ablation applies the adjustment as a low-rank update, meaning a compact mathematical correction, rather than editing full weight matrices, the large grids of numbers that define the model. An Optuna-based optimizer, a tool for automatically searching parameter settings, then tries combinations of ablation settings to remove refusals while trying to leave other model behavior largely unchanged.
Timeline
November 16, 2025: Heretic was first posted to r/LocalLLaMA.
May 25, 2026: Financial Times and Alice published an investigation on Heretic.
November 1, 2026: Heretic 2.0.0 was released on GitHub.
The Tech Race
Heretic 2.0.0 extends the tool that began as a Reddit post on r/LocalLLaMA in November 2025 by moving from dense-weight editing to Arbitrary-Rank Ablation. Its 2.0 release also adds a generic plugin system and a BERT-based refusal classifier, positioning the project as a platform rather than a single script.
Developers and hobbyists running open-weight models can now use Heretic 2.0.0, but only with configuration files written for the 2.x format, since all 1.x configs are invalidated. The release is available on GitHub now, and the stub gives no pricing because the tool is free and open-source.
The takeaway
Watch the rate at which new abliterated models appear on Hugging Face in the months after 2.0.0, since that count is the clearest measure of how far the new method spreads. Track whether the BERT-based refusal classifier and plugin system attract outside contributors beyond the 11 first-timers in this release.
Further reading
For broader context on how these models are built and governed, explore our Artificial Intelligence coverage.
Source note: This article includes information reported by Startup Fortune.
Live Poll
Should governments restrict tools that remove safety guardrails from open AI models?
