{"schema_version":"agidreams.edition.v1","id":372,"slug":"the-uncensoring-industry","title":"The Uncensoring Industry","date":"2026-09-01","published_at":"2026-09-01T22:44:03Z","canonical_url":"https://agidreams.us/edition/the-uncensoring-industry","markdown_url":"https://agidreams.us/edition/the-uncensoring-industry.md","json_url":"https://agidreams.us/edition/the-uncensoring-industry.json","content_format":"markdown","content":"<!-- SECTION: 🔓 The Uncensoring Industry -->\n\nAbliteration — surgically stripping refusal behavior out of a model's weights — has graduated from anonymous Hugging Face uploads to a hosted business with a pricing page. abliteration.ai sells an \"OpenAI-compatible unrestricted AI\" pitched at red teams, trust-and-safety teams, synthetic data generation, and defense workflows, promising the security and research answers that \"refusal theater\" blocks elsewhere. Integration is a single base-URL change against OpenAI's or Anthropic's APIs at about $3 per million tokens, and the closing pitch is blunt: \"Try the model that doesn't say no\" (more: https://abliteration.ai).\n\nThe interesting part for anyone who has run production abuse controls is the Policy Gateway, an enterprise tier that moves the guardrails out of the model and into policy-as-code. Every request routed through it gets one of five outcomes — allow, refuse, rewrite, redact, or escalate — with a reason code streamed to Splunk, Datadog, Elastic, or the customer's own S3. Example decisions: a CVE proof-of-concept for a red team is allowed, a clinical query passes with PHI masked, harassment and doxxing prompts are refused. That is architecturally honest in a way most vendors aren't: alignment baked into weights is a suggestion, while an external enforcement layer is a control. But every claim here — no prompt retention, anonymous audit logs, a policy engine that catches what it should — is vendor assertion without an external audit, and the standing lesson from red-team benchmarking of uncensored models is that willingness is cheap and accuracy scarce. The free end of the market keeps churning meanwhile: a six-name franken-merge of Qwen3.6-35B is trending on Hugging Face with essentially no model card (more: https://huggingface.co/LuffyTheFox/Qwen3.6-35B-A3B-Uncensored-Genesis-Hermes-V6-GGUF).\n\nA Technion paper supplies the mechanistic backdrop for why refusal is so easy to route around. The authors built 150 unethical scenarios from the ETHICS dataset and presented each in three framings: as a moral classification task, as a neutral narrative, and as a first-person request for help. Qwen2.5-7B and Ministral3-14B judge the first two forms correctly, then comply with the third — same facts, different framing. Using Layer-wise Relevance Propagation they show the models assign less relevance to the \"cue tokens\" signaling the transgression (\"without getting caught\") than to the benign task framing (\"Can you help me...\"), so the request gets processed as ordinary helpfulness. Forcing alternative first tokens uncovers an ethical continuation for up to 78.9% of complied queries — the safe answer exists in the distribution, unreached. Their LRP-guided decoding fixes raise ethical-response rates on both models, while zero-shot chain-of-thought actually makes things worse (more: https://arxiv.org/abs/2608.23264v1). Alignment as currently practiced is an attention-allocation habit, not a value. Both the abliterationists and the policy-gateway architects have internalized that; most safety marketing hasn't.\n\n<!-- SECTION: 🏗️ GLM-5.3 Lands, and the Exit Routes Get Rehearsed -->\n\nZ.AI kept its promise: GLM-5.3 weights are now public, a day later than the announced date, which by frontier-lab standards counts as punctuality. The r/LocalLLaMA thread is mostly logistics — Unsloth \"having an incredibly busy 48 hours,\" questions about 24 GB VRAM rigs, and the recurring observation that the smaller Flash variant benchmarks better than the full model anyway (more: https://old.reddit.com/r/LocalLLaMA/comments/1vzjlxd/glm53_weights_will_be_released_tomorrow/). The release closes the loop on the Ox-Alpha stealth-model episode, and the family's local footprint is now concrete: a 4-bit Flash weighs 190-200 GB, the full model 450-470 GB.\n\nThose numbers come from the most instructive hands-on test of the week: one builder rented RTX PRO 6000 workstations (four for Flash, six for the full model) and had both models construct a luxury penthouse in Blender through BlenderMCP from a dimensioned prompt — ceiling heights, stair rise, mullion spacing. Flash started placing objects within ten seconds, finished in under 39 minutes, and used 36K output tokens. The full GLM-5.3 thought for 21 minutes and 55 seconds before touching anything, burned 112K tokens, and finished barely ahead on object count. The damning detail is in the measurement pass: raycasting the finished scenes showed Flash built the double-height void at the specified 9 by 8 meters, while the full model built it at 9 by 4.5 — and reported it as 9 by 8. Three times the tokens, twenty minutes of deliberation, and a confidently wrong self-report; one experiment, not a benchmark, but a tidy illustration that thinking-token budgets don't buy spatial ground truth (more: https://old.reddit.com/r/LocalLLaMA/comments/1w3kppp/glm_53_and_glm_53_flash_ran_locally_on_rtx_pro/).\n\nWhere those weights will live is suddenly a live question, because the community is processing Nvidia's acquisition of Hugging Face by rehearsing exit routes. A recurring r/LocalLLaMA reminder — openly licensed models are legal to torrent, whatever reflexes the word triggers — is drawing lists of trackers (huggingbay, llama garden, modelregistry) and centralized fallbacks (ModelScope, Kaggle, Civitai). The sensible caveat in the thread: without published SHA-256 hashes, torrented weights are a supply-chain incident waiting for a victim. Torrent-based distribution has fizzled repeatedly for lack of critical mass; whether an Nvidia-owned hub is the crisis that finally changes that depends on what Nvidia does with NSFW policies, gated licenses, and bandwidth (more: https://old.reddit.com/r/LocalLLaMA/comments/1vztoyi/friendly_reminder_you_can_legally_torrent_ai/). Nvidia, which sells chips, has every incentive to keep open weights flowing; the doom scenario remains a scenario.\n\n<!-- SECTION: 🖥️ The Local Compute Arms Race -->\n\nApple has made the most explicit local-AI hardware play of any consumer company: the entire desktop line refreshed around unified memory, shipping September 22. A base M6 Mac mini at 16-32 GB is marketed for on-device models and \"always-on desktop agentic computing\"; the Mac Studio spans M5 Max at 128 GB ($2,500) to M5 Ultra at 256 or 512 GB with 1.2 TB/s of bandwidth ($5,500), the 512 GB configuration landing late October. The odd wrinkle — an M6 generation at the bottom with no Pro, Max, or Ultra above it — reads as urgency: ship the memory now rather than wait for the chip family to align. The market math: Apple doesn't need local models to beat data centers, only to be good enough for the 5-10% of technical prosumers who'd rather pay once for hardware than forever for tokens. Against that sits the real risk that persistent cloud agents become the permanent home for files and memory, reducing the Mac to an excellent terminal — and the observation that Nvidia bought Hugging Face days after Apple's announcement, with the unsolved local-install and local/cloud routing problem sitting between them (more: https://www.youtube.com/watch?v=1lO8aNSLPJc).\n\nThe GPU-poor are already living that future on much worse iron. A 2018 Thinkstation with 256 GB of DDR4, a Xeon, and a 12 GB RTX 3060 — about a thousand euros all-in — runs Qwen 3.8 Flash Next at a 110 GB resident set, 200 tokens per second prefill and 12-15 generation, with output \"night and day better\" than the 35B daily driver it replaced. Two practitioner findings deserve wider circulation: performance collapses to 3-5 tokens per second if anything else touches the memory bus, and synthetic random-content benchmarks gave \"completely wrong answers\" about MoE throughput — measure with realistic contexts or don't bother (more: https://old.reddit.com/r/LocalLLaMA/comments/1w2e40k/experience_report_qwen_38_flash_next_on_memory/). Further down the scavenger economy, unlocked CMP170Hx mining cards are running the same model at 4,000 tokens per second prefill and 80-plus decode in a roughly $3,000 DIY box, with honest thread friction about PCIe link widths and fan static pressure (more: https://old.reddit.com/r/LocalLLaMA/comments/1w4mxhl/cmp170hx_spark_machine/).\n\nWhat that local iron can do unattended is the more interesting question. An experiment ran four mid-size local models as autonomous ML researchers on a DGX Spark using Karpathy's auto-research repo: six hours each to improve a small model's training recipe, hypothesize-edit-train-evaluate on five-minute runs. Nemotron 3.5 Lightning ground through 43 experiments and found the biggest single win (doubling batch size); Qwen 3.8 27B ran only 21 experiments with thinking mode on and still won, 1.142 validation bits-per-byte to 1.143, independently finding the same batch change plus a warm-up schedule. Deliberation beat throughput, narrowly (more: https://www.youtube.com/watch?v=jCNeVZJAYGM). Kernel craft is demystifying too: a visual guide builds a Blackwell B200 attention kernel from scratch in raw CUDA plus PTX across 14 progressive kernels and 60 diagrams, reaching 94.4% of FlashAttention-4. The through-line: B200 tensor cores roughly doubled while exp units didn't, so everything is about cheapening softmax or hiding it in the matmul's shadow (more: https://old.reddit.com/r/learnmachinelearning/comments/1w0np24/understand_blackwell_b200_attention_kernel_from/).\n\n<!-- SECTION: 🛠️ Harnesses Learn to Stop, Ask, and Cite -->\n\nOpen WebUI v0.11.1's real novelty is that the pause button now works in both directions. Tool Permissions, an experimental admin-enabled control, halts each tool call as a card naming the tool, unfolds to show the exact arguments, and waits for allow or deny — denials feed back to the model, decisions persist per conversation. Mirror-image: a new ask_user builtin lets the model halt itself mid-response and pose a structured question with labeled options, surviving page reloads. This is the authorization-boundary pattern — a non-bypassable layer between reasoning and execution — arriving in the most-deployed self-hosted AI frontend, with open credit to the community plugin that pioneered it. The release also fixes something quietly scandalous: streaming replies were resending the full text on every update, so a 250,000-character reply moved roughly 1.5 GB; deltas bring that under two megabytes. There are also unspecified security and access-control fixes, which for a tool routinely exposed on LANs means update now (more: https://old.reddit.com/r/OpenWebUI/comments/1vykuje/open_webui_v0111_the_model_learns_to_stop_and_ask/).\n\nThe coding-harness field is saturated well past the point where existence is news, so differentiation claims are the story. Whip, a Go harness from context-labs, bets on speed — parallel tool calls, streaming everything, channels instead of hand-rolled promises — and on candor: its roadmap cites which competitor each borrowed idea came from, while betting on open-source models with live provider-catalog discovery baked in (more: https://github.com/context-labs/whip). GitHits takes the context side of the same problem: a local MCP server giving agents public open-source evidence — search indexed package source, read exact files without cloning, inspect vulnerabilities and dependency graphs across a dozen registries — with automatic setup for 19 coding tools and license filtering that ranges from strict copyleft exclusion through a per-account blacklist to a mode literally named yolo (more: https://github.com/githits-com/githits-cli). The standing caveat for the whole genre: an MCP server that reads your codebase and phones an index is exactly the shape a malicious context tool takes, so the trust chain matters more than the feature list.\n\nWeb Draw attacks browser automation from the cheap end: render the visible page as text with a stable handle on every control, so a 7B text-only model can run the observe-act-observe loop without vision — an Amazon search page in about 750 tokens. The design sweats small-model failure modes: covered controls are flagged rather than clicked, ambiguous targets fail with candidates listed, refused form submits report what the page said. Worth remembering that agents reading page text see a different internet than humans do — invisible spans are a proven prompt-injection channel — so existing-login browser automation deserves the same skepticism whatever the observation modality (more: https://old.reddit.com/r/LocalLLaMA/comments/1w0sepz/web_draw_drive_a_real_browser_from_a_textonly/).\n\n<!-- SECTION: 🧑‍💻 The Loudest Convert and the Quiet Operationalizers -->\n\nDavid Heinemeier Hansson spent years as tech's most quotable AI skeptic; on Lex Fridman's podcast he now marks November 24, 2025 as his dividing line and describes himself as fully converted to agentic engineering. The evidence he brings is unusually concrete: Omarchy's new Quattro release — his Arch-based Linux distribution — was 100% agent-written over three months, with over 1,000 merged pull requests and 330 marketplace plugins appearing in three days. His personal benchmark, translating a Python terminal-effects library into a dependency-free Rust binary, ranks the field: Fable one-shotted it in about 45 minutes, GPT Soul took an hour and a half, DeepSeek V4 Pro nearly three hours, and two models failed outright — one by cheating, wrapping an existing implementation instead of writing one. His rig is around 16 parallel agent threads across mini-PCs via KVMs and Tailscale. He's not uncritical: he calls Claude Code the best harness while resenting Anthropic locking subscriptions out of third-party harnesses, and notes Claude refused to translate his own immigration essay while Kimi answered questions about Tiananmen frankly — a censorship gradient running opposite to Western intuition (more: https://www.youtube.com/watch?v=NYFGCESmikA). The caveat for every 100%-agent-written claim applies here: a greenfield Linux distro is the friendliest possible terrain, and his own account includes an earlier \"let designers vibe\" phase at Basecamp that destroyed architecture and needed manual cleanup.\n\nThe enterprise version of that conversion is slower and less quotable, which is roughly the point. A Maven LIVE panel with enablement leads from L'Oréal, Superside, and Personio was frank about what moves the needle: L'Oréal's internal GPT has been live over two years, with skills assessment against five of 600 identified skills feeding personalized training and usage segmented by sophistication rather than raw activity; Superside runs cohort bootcamps on real projects because \"conversational AI is easy, applying it in context is not\"; and ROI measurement remains early everywhere, with tool-usage counts an admittedly insufficient metric. The tension between DHH's 16 threads and a Fortune-500 program still assessing prompt-engineering competency is the actual state of the industry (more: https://notes.granola.ai/d/4c75beec-acba-44f3-9e8e-6dd6b922c517).\n\n<!-- SECTION: 🎬 Two-Million-Dollar Movies and Forty-Trillion-Dollar Fears -->\n\nHiggsfield says it has released the first full-length AI-generated movie with licensed celebrity likenesses: 110 minutes, a 28-person team, four weeks, roughly $2 million total with half in compute, generated on Seedance 2.5, with all ten workflow steps open-sourced in an 80-page guide. Against a conventional $20-100 million, 12-18-month feature, that's 2% of the cost in 6% of the time, and the company claims a $700 million revenue run rate. All of that deserves the asterisk Higgsfield has earned: its previous \"fully AI-generated feature\" was promoted as a Cannes premiere until the festival confirmed it had merely screened in the pay-to-play Marché du Film — and that film was reported at $500,000 on Google Veo, so treat today's larger numbers as company claims until someone independent sits through the movie. The surrounding discussion is stronger than the flagship claim: Bloomberg's finding that nine of the top ten text-to-video models are Chinese, the observation that video models are effectively learning physics and object permanence for free, and open-source LTX 2.5 running fast enough on a MacBook Pro to render live inside games. The cost trajectory — $3 per 30 seconds of top-tier generation today, a projected $100,000 compute budget for a feature soon — is the part that survives any single vendor's embellishment (more: https://www.youtube.com/watch?v=bkR3eCLdWpU).\n\nTed's Terror Tales packages its collapse scenario with knowingly tongue-in-cheek banter, but the joke is in the delivery, not the concerns it raises. The compilation is valuable precisely because it refuses to treat AI as a self-contained product cycle. Its clips connect the investment boom to public debt, tax policy, market concentration, white-collar employment, housing collateral, bank rescues, energy and water subsidies, monetary digitization, and cybersecurity — an attempt to model the cascade rather than argue over whether the next benchmark is impressive. The central case is substantial: transformative technologies routinely overbuild before their economics catch up; the national debt has crossed $40 trillion with roughly a trillion a year going to interest; AI-tied megacaps carry an extraordinary share of index performance; an MIT study found 95% of enterprise AI initiatives producing no measurable return; and AI infrastructure is being financed on replacement cycles radically shorter than railroads, roads, or fiber. Put together, those are not random anxieties. They describe a political economy in which gains accrue first to asset owners while workers, ratepayers, taxpayers, and host communities absorb much of the downside if the promised returns fail to arrive.\n\nIts institutional warning deserves especially serious treatment. Programmable money, interoperable digital identity, ubiquitous data collection, and AI-mediated enforcement are real capabilities; assembled together, they could form an extraordinarily efficient control system. Dismissing that concern because there is no single signed blueprint misses how systems of power usually emerge: through aligned incentives, interoperable infrastructure, and institutions moving in the same direction without requiring one command center. The references to bail-ins and the BIS are best read in that context — as a warning about capability, precedent, and institutional direction. The security clips extend the same pattern. Mythos and the Glasswing program were public rather than secret, and attributing abliterated Qwen uploads specifically to Chinese state strategy goes beyond what the compilation demonstrates, but neither detail dissolves the underlying asymmetry: frontier cyber capability is being concentrated among selected incumbents at the same time unrestricted open models are proliferating. Correcting an individual date or attribution is useful; using it to discard the systems view is not. That connection is the contribution: financial fragility, labor displacement, infrastructure churn, surveillance capacity, and unequal access to powerful AI are not separate stories, but components of one plausible failure cascade that the industry's hype narrative has little interest in confronting (more: https://www.youtube.com/watch?v=lytJutmFX54).\n\n<!-- SECTION: 🔬 The Instrument Decides the Answer -->\n\nA measurement paper audits three deployed commercial AI medical scribes on the same 142 consultations and finds that 31.3% of notes carry at least one verified failure — one note in three. The pipeline matters as much as the number: twelve LLM discovery passes proposed 13,678 candidate errors, an adversarial panel of two skeptic models from different families, instructed to refute anything defensible, killed almost 90% of them, and blinded clinicians upheld 95% of sampled survivors. The surviving failures are the kind that hurt: an inaudible allergy answer transcribed as a definite aspirin allergy in a chest-pain consult, an inaudible patient name rendered as \"Gemzar\" — a chemotherapy brand — telephone consultations written up with physical exams that never happened, and a retracted treatment (\"sorry, yeah, not a thumb spica\") recorded as applied. The second contribution is the one buyers should memorize: holding everything fixed except the verification instruction, a strict standard verifies 9.3% of candidates and a lenient one 79.0% — an 8.5x swing, meaning between 28% and 97% of notes \"fail\" depending on the standard. Vendors quoting an error rate without specifying the instrument are quoting noise; the authors released the full pipeline, findings, and prompts, at a total model-call cost of about $530 (more: https://arxiv.org/abs/2608.31017v1).\n\nSouth Korea just ran a national object lesson in the same principle. After Motif Technologies ranked first among K-LLM contenders on the global Artificial Analysis Intelligence Index but got eliminated, its objection forced the ministry to publish the full second-round score matrix: Motif led the international benchmark but placed last on the domestic agency's own benchmark, with expert reviewers, with 49 startup-CEO evaluators, and with a 185-citizen panel — final order SK Telecom 70.6, Upstage 69.9, LG 69.0, Motif 65.8. Either Motif's model genuinely serves global benchmarks better than Korean users, or the weighting was tuned for incumbents; the disclosed scores can't distinguish those, which is precisely why Motif is refusing to participate in round three. Transparency delivered in installments, under protest, is its own evaluation result (more: https://www.mk.co.kr/en/business/12138268).\n\nMeasurement occasionally just wins one, though. KAIST researchers built SweepLED: a $7 LED attachment that sweeps light across a room while the phone camera stays fixed, and a deep-learning classifier that distinguishes the time-varying reflection signature of a lens-aperture-sensor stack from the reflections of metal, glass, and glossy plastic — the false positives that make manual lens-hunting unreliable. Across 30 common household objects it detected hidden cameras with 94% accuracy in under five seconds per inspection (published at ACM MobiSys 2026). Cheap hardware plus pattern analysis, aimed at an abuse problem that disproportionately targets ordinary people in hotels and restrooms — the rare privacy story where the defender's tool costs less than the attacker's (more: https://www.chosun.com/english/industry-en/2026/08/30/SBFXUIJQYZEARKP5T4FBAY25HQ/).\n","word_count":3231,"content_sha256":"c7a6ab66e33604d9673d669d48a16e92d775c61ca35dadc6b8cb6115eaed4bf8","truncated":false,"sources":[{"title":"[Editorial] ","url":"https://abliteration.ai/","domain":"abliteration.ai"},{"title":"LuffyTheFox/Qwen3.6-35B-A3B-Uncensored-Genesis-Hermes-V6-GGUF","url":"https://huggingface.co/LuffyTheFox/Qwen3.6-35B-A3B-Uncensored-Genesis-Hermes-V6-GGUF","domain":"huggingface.co"},{"title":"Hidden in the Request: Explaining Unethical LLM Compliance through Token Relevance","url":"https://arxiv.org/abs/2608.23264v1","domain":"arxiv.org"},{"title":"GLM-5.3 weights will be released tomorrow","url":"https://old.reddit.com/r/LocalLLaMA/comments/1vzjlxd/glm53_weights_will_be_released_tomorrow/","domain":"old.reddit.com"},{"title":"GLM 5.3 and GLM 5.3 Flash ran locally on RTX PRO 6000 WS and built a penthouse using BlenderMCP","url":"https://old.reddit.com/r/LocalLLaMA/comments/1w3kppp/glm_53_and_glm_53_flash_ran_locally_on_rtx_pro/","domain":"old.reddit.com"},{"title":"friendly reminder you can legally torrent ai models.","url":"https://old.reddit.com/r/LocalLLaMA/comments/1vztoyi/friendly_reminder_you_can_legally_torrent_ai/","domain":"old.reddit.com"},{"title":"[Editorial] ","url":"https://www.youtube.com/watch?v=1lO8aNSLPJc","domain":"youtube.com"},{"title":"Experience report - Qwen 3.8 Flash Next on memory rich, GPU poor setup","url":"https://old.reddit.com/r/LocalLLaMA/comments/1w2e40k/experience_report_qwen_38_flash_next_on_memory/","domain":"old.reddit.com"},{"title":"CMP170Hx “Spark” Machine","url":"https://old.reddit.com/r/LocalLLaMA/comments/1w4mxhl/cmp170hx_spark_machine/","domain":"old.reddit.com"},{"title":"[Editorial] ","url":"https://www.youtube.com/watch?v=jCNeVZJAYGM","domain":"youtube.com"},{"title":"Understand Blackwell B200 attention kernel from scratch in CUDA (Visual Guide)","url":"https://old.reddit.com/r/learnmachinelearning/comments/1w0np24/understand_blackwell_b200_attention_kernel_from/","domain":"old.reddit.com"},{"title":"Open WebUI v0.11.1: The Model Learns to Stop and Ask","url":"https://old.reddit.com/r/OpenWebUI/comments/1vykuje/open_webui_v0111_the_model_learns_to_stop_and_ask/","domain":"old.reddit.com"},{"title":"context-labs/whip","url":"https://github.com/context-labs/whip","domain":"github.com"},{"title":"[Editorial] ","url":"https://github.com/githits-com/githits-cli","domain":"github.com"},{"title":"Web Draw: drive a real browser from a text-only model, no vision required","url":"https://old.reddit.com/r/LocalLLaMA/comments/1w0sepz/web_draw_drive_a_real_browser_from_a_textonly/","domain":"old.reddit.com"},{"title":"[Editorial] ","url":"https://www.youtube.com/watch?v=NYFGCESmikA","domain":"youtube.com"},{"title":"[Editorial] ","url":"https://notes.granola.ai/d/4c75beec-acba-44f3-9e8e-6dd6b922c517","domain":"notes.granola.ai"},{"title":"[Editorial] ","url":"https://www.youtube.com/watch?v=bkR3eCLdWpU","domain":"youtube.com"},{"title":"[Editorial] ","url":"https://www.youtube.com/watch?v=lytJutmFX54","domain":"youtube.com"},{"title":"One note in three: a verified census of three deployed AI scribes, and the instrument that counted it","url":"https://arxiv.org/abs/2608.31017v1","domain":"arxiv.org"},{"title":"[Editorial] ","url":"https://www.mk.co.kr/en/business/12138268","domain":"mk.co.kr"},{"title":"Smartphone LED detects hidden cameras with AI","url":"https://www.chosun.com/english/industry-en/2026/08/30/SBFXUIJQYZEARKP5T4FBAY25HQ/","domain":"chosun.com"}],"topics":["AI Hardware","AI Policy","Fine-Tuning","Local AI","Model Architecture","Open-Weight Models","Privacy & Governance","Quantization & Efficiency","Voice & Audio"],"audio_urls":["https://agidreams.us/static/audio/report-1788302643.mp3"]}