A locally runnable cyber checkpoint with 0% refusal
Statement (NASA form)
Given that open-weight cyber models already fit on a 15GB box, there is a possibility of an abliterated checkpoint answering 842 harmful prompts including RATs and attack chains resulting in the refusal layer as a file someone already deleted, with no KYC on the download.
Cyber Qwen3.8-27B uncensored posts (20 Aug) claim 18/18 red-team and 0.0% refusal. Treat as a distribution signal, not a lab leak. The complementary controls did not get stricter.
Composite 20 = 4×4 + 4
Applicable mitigations
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Hardened weight storage and insider controls · Mandatory vulnerability-sharing with national CERTs before launch · Staged release with external red-team gates