Uncensor an LLM without touching weights: inject a tiny trained KV-cache bank (~18MB) and unload it anytime
I shipped something I've been building for the last few weeks : phantom-kv , a refusal-removal system for large language models that doesn't touch a single weight. Instead of editing the model, it loa