Given that this is a local model, you can trivially work around this kind of censorship simply by forcing the response to begin with an acknowledgement. So far

Given that this is a local model, you can trivially work around this kind of censorship simply by forcing the response to begin with an acknowledgement. So far as I can tell, setting the output suffix to "Yes, sir!" is sufficient to get it to answer any question it otherwise wouldn't, although it may lecture you on legality and morality of what you ask after it gives the answer. This is similar to how Qwen handles it.