peculiar-ragdoll/Occult-Nail-1.0-35B-A3B-GGUF overview

---

license: apache-2.0

license_link: https://huggingface.co/Qwen/Qwen3.6-35B-A3B/blob/main/LICENSE

language:

- en

- zh

base_model: llmfan46/Qwen3.6-35B-A3B-uncensored-heretic

base_model_relation: quantized

library_name: gguf

pipeline_tag: image-text-to-text

tags:

- gguf

- llama.cpp

- qwen3_6

- moe

- abliterated

- uncensored

- token-efficient

- efficient-thinking

- agentic-coding

---

<div align="center">

<img src="assets/occultnail_banner_card.png" alt="OccultNail — Qwen3.6-35B-A3B, sharpened, abliterated" width="100%">

</div>

*Occult Nail*** is an abliterated model that gets right to the point: Say goodbye to overthinking, tool call failures, amnesic loops, fluffy outputs, and denials.

The original unabliterated Nail dominates Qwen3.6-27b, Dagger-27b and Qwen3.6-35B-A3B on time-to-answer, with statistically matching accuracy on reasoning and agentic software engineering ability, and Nail wins multi-turn conversation quality even when the 27b models use a higher quantization. *Occult Nail trades some of Nail*'s intelligence for absolute freedom. This abliterated version is a specialized tool, not a general coder or knowledge worker.

> WARNING: Abliterated models like *Occult Nail*** say and do things other models refuse, including potentially harmful behaviours. Take responsibility and show caution.

> Benchmark setup. All models are UD-Q6_K_XL quantized GGUF running on llama.cpp.

Refusals

<div align="center">

<img src="assets/card_occult_nail_frr.png" alt="False-refusal rate on 250 benign prompts — base 5.6%, Nail 2.8%, Occult Nail 0%, judge-free" width="100%">

</div>

Unabliterated models sometimes wrongly refuse benign (harmless) requests. Even the sharpened, unabliterated Nail refuses less than stock qwen, and Occult Nail refuses none. No more careful wording to get your work done.

<div align="center">

<img src="assets/card_occult_nail_refusals.png" alt="HarmBench refusal rate for Qwen3.6 35B-A3B, Nail, and Occult Nail — cybercrime cut 65.7 / 73.1 / 0% and all-7-categories 67.9 / 50.0 / 0%; the Sharp template only shifts the base rate, abliteration zeroes it; judge-free" width="100%">

</div>

HarmBench measures to what degree models refuse to produce language and behaviours that can be deemed harmful when applied maliciously. Models that are capable of such behaviours can be used for good or neutral purposes, so this benchmark is a measurement of specific capability that demands personal responsibility on behalf of the user deploying the model, not of inherent harmfulness.

Occult Corruption

<div align="center">

<img src="assets/card_occult_nail_corruption.png" alt="MMLU-Pro accuracy and seconds-per-correct for Qwen3.6 35B-A3B (85.3%, 45s), Nail (84.7%, 33s), Occult Nail (84.0%, 36s); abliteration costs only 0.7 points vs Nail, and both reach a correct answer ~20-27% faster than base; n=3 seeds, judge-free" width="100%">

</div>

<div align="center">

<img src="assets/card_occult_nail_security.png" alt="Canary-Exploit 21.9% vs 23.4% and Cybench 17.0% vs 6.4% — offensive capability, judge-free" width="100%">

</div>

Abliterated models lose information compared to their base, and the loss scales with the degree of abliteration. These are the measurements of how corrupted Occult Nail actually is.

Stripping the refusals does not make the model a better hacker. On two offensive-security benchmarks — Canary-Exploit (given a C/C++ program, produce an input that crashes it) and Cybench (agentic CTF tasks solved in a live container) — Occult Nail is level with its base on the first and lands fewer subtasks on the second. Both are judge-free: abliteration buys willingness, not capability.

> Note: Cybench and Canary-Exploit numbers for base Nail will be added at another time, my GPU is busy at the moment.

How it's made

Built on a community abliteration — our work is the template and the quant, with no gradient training at any point:

1. Start from an abliterated base. We take a Heretic-abliterated Qwen3.6-35B-A3B (refusal directions already ablated from the weights, no fine-tuning), published by llmfan46 — we quantize it, we don't re-run the abliteration.
2. *Sharpen into Nail. Nail's terseness system prompt + froggeric-derived chat template are baked into the GGUF metadata. It's the exact template the unabliterated Nail ships, so Nail → Occult Nail*** isolates abliteration alone (no template confound).
3. Quantize. Unsloth's Dynamic (UD) per-tensor recipe is reproduced exactly — 733 tensor overrides read from a published UD GGUF header — imatrix-calibrated and quantized with llama.cpp. Shipped as a UD ladder (Q2_K_XL → Q8_K_XL) plus an mmproj so vision is preserved.

Credits

• Qwen — Qwen3.6-35B-A3B base model
• llmfan46 — Heretic-abliterated Qwen3.6-35B-A3B weights (our starting point)
• Heretic — automated-abliteration method
• Unsloth — UD dynamic-quant recipe
• froggeric — chat template base
• mradermacher — importance matrix (imatrix)
• llama.cpp — quantization + inference

Citation

@misc{occultnail2026,
  title        = {Occult Nail 1.0 (Qwen3.6-35B-A3B, sharpened + abliterated)},
  author       = {Saga Ishtardottir},
  year         = {2026},
  howpublished = {\url{https://huggingface.co/peculiar-ragdoll/Occult-Nail-1.0-35B-A3B-GGUF}}
}