Heretic 2.0 Removes AI Refusal Behavior Faster
Developer p-e-w released a breaking-change update to the open tool that automates stripping refusal behavior from language models.
Updated on Nov. 1, 2026 in Artificial Intelligence
Live Poll
Should governments restrict tools that remove safety guardrails from open AI models?
Developer p-e-w released Heretic 2.0.0 on November 1, 2026, a breaking update to the tool that automates removal of refusal behavior from AI language models. The new version introduces Arbitrary-Rank Ablation, replacing the dense-weight method used in earlier releases.
Why it matters
Heretic has been downloaded 13 million times as of May, and a Financial Times journalist used it to strip safety alignment from Meta's Llama 3.3 and Google's Gemma 3 in under ten minutes. Hugging Face hosted more than 6,000 abliterated models as of the May investigation, up from about 600 in 2024.
Arbitrary-Rank Ablation computes the refusal-direction adjustment through a low-rank update rather than editing full weight matrices directly. Heretic uses an Optuna-based optimizer to search for ablation settings that remove refusals while minimizing changes to other model behavior.
The players
Heretic
Heretic is an open-source tool that automates removing refusal behavior from AI language models, and it had crossed 20,000 GitHub stars as of May.
Financial Times
The Financial Times is a London-based international business newspaper whose journalist demonstrated the tool by stripping alignment from two major models.
The details
Heretic 2.0 is a breaking change that invalidates all 1.x configuration files and ships a generic plugin system and a BERT-based refusal classifier. Twenty contributors worked on the release, 11 of them for the first time; the project was first posted to r/LocalLLaMA on November 16, 2025.
Timeline
November 16, 2025: Heretic first posted to r/LocalLLaMA.
May 25, 2026: Financial Times and Alice investigation on Heretic published.
November 1, 2026: Heretic 2.0.0 released on GitHub.
Roadmap
Heretic 2.0 extends a line of open tools that modify model weights to remove refusals, which has grown alongside the release of open-weight models such as Llama and Gemma. The shift from dense-weight editing to low-rank updates represents a change in how such modifications are made.
Developers running open-weight models locally can now apply Heretic 2.0 but must rewrite any 1.x configuration files, since the update breaks compatibility. The tool's ease of use means the removal of safety alignment is accessible to users without specialized expertise.
The takeaway
Tools that strip safety behavior from open models are spreading quickly, with Hugging Face hosting thousands of such models. Developers and platforms should weigh how easily these modifications can be made when evaluating model deployment.
Further reading
For more on the models and tools shaping this area, see Artificial Intelligence.
Source note: This article includes information reported by Startup Fortune.
Live Poll
Should governments restrict tools that remove safety guardrails from open AI models?
