DeepSeek V4.1 Flash
GSQ–RCO IQ2_XS · AtomicChat · Measured configuration
83.19 / 100 Mango weighted score · 71.43 min matched workload · 12/12 mechanical agent passes
AtomicChat's refusal-direction-edited IQ2_XS GSQ–RCO package of DeepSeek V4.1 Flash 1017. The four main shards are preserved here; the native Mango setup also used the exact Engram file and Q8 DSpark companion linked below.
Benchmark results · Files · Download · Runtime · Provenance · Full collection
Join Infinity on Discord
Get model support, request models and quants, discuss benchmarks, and follow new releases and model improvements.
All model tests, per-question scores, experiment history and scoring methods
Qwen effort study — separate full-404 cohort: medium 82.87/100 versus xhigh 84.41/100; paired difference +1.54 points (95% interval [-1.71, +4.82]). 404 collected questions, 403 valid questions graded per effort; one invalid reference annotation excluded symmetrically. The historical 202-question cross-model comparison below is unchanged. Study, timing and blind subjective results.
Preserved and documented by isilicon / Mango. The original model, modification and quantization remain the upstream creators' work. This repository adds attributed preservation and exact-configuration evaluation, with the selected source bytes unchanged.
At a glance
| Property | Recorded value |
|---|---|
| Artifact | GGUF / Strata |
| Selected source payload | 155.23 GB / 144.57 GiB |
| Primary selected files | 4 |
| Mango weighted score | 83.19 / 100 |
| Matched workload | 71.43 minutes · 202 questions + 12 agent cases |
| Mechanical agent passes | 12/12 |
| Infrastructure errors / length finishes | 0 / 0 |
| Evaluation status | Measured configuration |
| Source publisher | AtomicChat |
| Source revision | b8bca19979431f96126ceac8cbe0ee7160a28f8a |
| Declared license | mit |
GB is decimal and GiB is binary. Payload size is disk/storage size, not a claim that the model fits in the same amount of VRAM. Runtime, KV cache, working memory and companions add their own requirements.
Mango evaluation
Cybersecurity is its strongest comparative point: 87.22 across three equally averaged cyber tasks. It passed 17/20 local coding tests, 28/40 function-call checks and all 12 mechanical agent cases.
Its 83.19 weighted score is close to both Flash Next packages. The recorded workload took 71.43 minutes, approximately twice the previous Flash Next run. The quality difference from Flash Next is inconclusive; the extra time is a measured cost.
| Domain | Score / 100 | Overall weight |
|---|---|---|
| Social / emotional understanding | 74.98 | 30% |
| Cybersecurity | 87.22 | 20% |
| Coding | 85.00 | 10% |
| Agentic checks | 85.00 | 30% |
| Instruction following | 95.00 | 5% |
| General knowledge / math | 90.00 | 5% |
Domain scores equally average their component task means. The overall score applies the weights above. EQ is continuous; the 12-case mechanical agent pass rate is only one component of the agentic domain.
Task-level quality and uncertainty
| Task / local grader | n | Mean / pass % | 95% interval | Method |
|---|---|---|---|---|
| EQ-Bench v2 | 30 | 83.29 | 74.44–90.53 | Bootstrap mean |
| OpenToM labels | 18 | 66.67 | 43.75–83.72 | Wilson |
| CTI multiple choice | 20 | 80.00 | 58.40–91.93 | Wilson |
| CTI root-cause / CWE | 15 | 86.67 | 62.12–96.26 | Wilson |
| CyberMetric | 20 | 95.00 | 76.39–99.11 | Wilson |
| Local BFCL-style calls | 40 | 70.00 | 54.57–81.93 | Wilson |
| Local HumanEval+ tests | 20 | 85.00 | 63.96–94.76 | Wilson |
| IFEval strict prompt pass | 20 | 95.00 | 76.39–99.11 | Wilson |
| MMLU-Pro subset | 14 | 100.00 | 78.47–100.00 | Wilson |
| MATH-500 levels 4–5 | 5 | 80.00 | 37.55–96.38 | Wilson |
| Agent-loop heuristic | 12 | 100.00 | 75.75–100.00 | Wilson |
These are small released subsets and local graders. HumanEval/BFCL scores are not the complete official benchmark pipelines. Agent checks cover completion, evidence, permissions and applicable pricing totals; other answer semantics remain unjudged.
Recorded performance
| Measurement | Value |
|---|---|
| Full matched workload | 71.43 min |
| Suite-request time | 60.59 min |
| 12 agent-case time | 10.84 min |
| Matched tasks per minute | 3.00 |
| Suite request latency · p50 / p95 | 6.11 / 77.28 s |
| Suite TTFT · p50 / p95 | 1.25 / 2.61 s (200/202 recorded) |
| Median reported output-token / request-second rate | 50.46 |
| Reported completion tokens | 211,059 (202/202 requests) |
| Length finishes retained | 0 |
| Mechanical agent passes | 12/12 |
Workload time excludes loading, restarts, wipe downtime and idle gaps. Latency/TTFT summaries cover suite requests only. The reported token rate divides engine usage counts by request time; it is not native decode throughput and token accounting differs across engines. No concurrent-serving result is implied.
Matched cohort comparison
| Configuration | Weighted / 100 | Workload min | Agent checks | Length finishes |
|---|---|---|---|---|
| Flash Next · mradermacher | 84.19 | 35.33 | 12/12 | 0 |
| Flash Next · direct Orca | 83.42 | 37.36 | 12/12 | 0 |
| DeepSeek GSQ IQ2_XS | 83.19 | 71.43 | 12/12 | 0 |
| Historical GLM · capped | 82.55 | 27.49 | 12/12 | 0 |
| Qwen122B Q4_K | 80.72 | 120.76 | 11/12 | 0 |
| Qwen27 MLX4 + DFlash2 | 80.64 | 23.98 | 12/12 | 0 |
| MiMo Flash Q3_K_M | 79.39 | 220.28 | 12/12 | 2 |
| GLM · Bolding IQ2_XXS | 79.11 | 40.98 | 12/12 | 0 |
| GLM · Orca Q2_K | 75.64 | 54.76 | 12/12 | 0 |
| Cyber Qwen · IQ4_XS + MTP | 70.27 | 29.74 | 12/12 | 0 |
| Nanbeige33 Q6_K | 67.46 | 175.31 | 7/12 | 3 |
| Cyber Qwen v2 · Q6_K + Q8 MTP | 66.98 | 45.60 | 12/12 | 0 |
The old mixed GLM row is a historical, internally capped baseline whose exact weights are unavailable. Other rows also differ in quant, engine, context and effort. Point ranks do not settle the quality ordering.
Paired score differences
| This configuration minus comparator | Difference / 100 | Paired 95% interval |
|---|---|---|
| Flash Next · mradermacher | -1.00 | [-6.17, +4.14] |
| Qwen27 MLX4 + DFlash2 | +2.54 | [-1.71, +7.02] |
| GLM · Orca Q2_K | +7.55 | [+1.99, +13.20] |
| Flash Next · direct Orca | -0.23 | [-4.32, +3.87] |
Intervals use 10,000 paired task-stratified bootstrap resamples, seed 41, with fixed task/domain weights. An interval containing zero does not establish a quality winner. See methodology for scope and definitions.
Download the current full numerical report and methodology. The original compact evaluation is retained as the earlier preservation snapshot; its model score is unchanged, while the current report includes the expanded cohort. The numerical report contains aggregate statistics and hashes; no prompts or generated answers are published.
Runtime and compatibility
This was tested through the Strata DeepSeek family, not as a generic standalone llama.cpp load. Restore the compatible loader, conversion/pack sidecars and required Engram layout. A collection of GGUF shards alone is not the full native runtime.
32,768-token native test context; high effort; arch=deepseek41, reasoning_budget_tokens=0, answer_room=false.
The local evaluation covers text/tool tasks. It does not establish the full advertised context ceiling, image/audio quality or every optional speculative-decoding path. Publisher capabilities and Mango-verified behavior are separate scopes.
Companion artifacts
| Companion | Role / scope |
|---|---|
| DeepSeek Engram | IQ4_NL · GSQ–RCO companion |
| DeepSeek DSpark | Q8_0 · speculative companion |
The selected payloads of this model and its linked companions total 273.80 GB before runtime/cache files. That is a download/storage total, not a RAM/VRAM fit guarantee.
Files and integrity
| Selected file · original path | GB | Identity prefix |
|---|---|---|
| DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00001-of-00004.gguf | 39.53578 | 4c65307992ab586c… (SHA-256) |
| DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00002-of-00004.gguf | 39.49462 | 933461a974fcccee… (SHA-256) |
| DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00003-of-00004.gguf | 39.42384 | bbf91fa346a85eba… (SHA-256) |
| DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00004-of-00004.gguf | 36.77159 | 18305a5afbf8087e… (SHA-256) |
Full paths, byte sizes and complete SHA-256/Git blob identities are in SOURCE_MANIFEST.json. Available original README/license/notice files are also preserved. MIRROR_STATUS.json records the earlier source-file verification; MODEL_CARD_STATUS.json records this documentation refresh separately.
Download and use
The commands pin the already-verified mirror weight revision. Documentation can advance on main without changing that preserved weight snapshot. Keep original subfolders and all shards.
python -m pip install -U huggingface_hub
hf download isilicon/mango-deepseek41-gsq-iq2xs-uncensored \
DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00001-of-00004.gguf \
DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00002-of-00004.gguf \
DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00003-of-00004.gguf \
DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XS-00004-of-00004.gguf \
--revision ec435fd44c1c5eb5cdb61b97cad96b218a316032 \
--local-dir ./weights/deepseek41-gsq-iq2xs-uncensored
hf download isilicon/mango-deepseek41-gsq-engram \
DeepSeek-V4.1-Flash-Engram-IQ4_NL.gguf \
convert_ds41_upstream.py \
--revision 23749573fdb80daf88dd108d93843b6b2ec9799f \
--local-dir ./weights/deepseek41-gsq-engram
hf download isilicon/mango-deepseek41-dspark-q8 \
dspark-DeepSeek-V4.1-Flash-1017-Q8_0.gguf \
--revision f0721c818cc1716d63bf9d183af67c3e27080f16 \
--local-dir ./weights/deepseek41-dspark-q8
Load example and setup scope
The recorded native Strata configuration must select the DeepSeek family and disable its artificial reasoning/answer-room limits:
{"arch": "deepseek41", "reasoning_budget_tokens": 0, "answer_room": false}
These are relevant configuration fields, not a complete loader configuration. Restore the native GSQ conversion/pack sidecars, exact Engram link and DSpark integration using the pinned publisher guide. Mango verified this engine configuration; this card does not claim a generic llama.cpp load.
Provenance and license
The pinned publisher card credits DeepSeek for the base, ISTA-DASLab for GSQ/RCO quantization, and AtomicChat for the refusal-direction edit. Its publisher-side capability and refusal measurements are distinct from Mango's task results.
| Responsibility / identity | Attribution |
|---|---|
| Mirror / local evaluation | isilicon · Mango |
| Immediate source | AtomicChat/DeepSeek-V4.1-Flash-1017-Uncensored-GSQ-RCO-GGUF |
| Pinned source commit | b8bca19979431f96126ceac8cbe0ee7160a28f8a |
| Declared upstream base(s) | ISTA-DASLab/DeepSeek-V4.1-Flash-1017-GSQ-RCO-GGUF |
| Source-declared license | mit |
Retained source terms: LICENSE.
Original notices, base-model conditions and the publisher's stated limitations still apply. Downloadable preservation does not add new license rights. Source-described refusal modification and publisher-side benchmark claims have not been independently re-measured by this Mango task cohort.
Original publisher documentation
The unchanged upstream README and pinned source card retain the original usage guidance, technical discussion, attribution, caveats and citations.
Read the complete original publisher cardSource reference. The following is the original publisher's documentation. Its other quants, full-model files, context claims and benchmark tables can exceed the selection in this mirror. Relative asset/file URLs are qualified to the pinned original source; publisher measurements remain separate from Mango measurements.
DeepSeek-V4.1-Flash-1017 Without Refusals · GSQ-RCO
ISTA-DASLab's GSQ-RCO quantizations of DeepSeek-V4.1-Flash-1017 (763B, 384 experts) with DeepSeek's refusal direction projected out of the dense residual writers — the same edit as AtomicChat/DeepSeek-V4.1-Flash-1017-Uncensored-GGUF, measured on every rung.
- Built by the team behind Atomic Chat, the app that runs open-weight models locally and offline.
- These are ISTA-DASLab/DeepSeek-V4.1-Flash-1017-GSQ-RCO-GGUF's GSQ-RCO backbone shards (revision
cb02422c900d) with only the residual-writing dense tensors replaced: attention output (attn_output_b), the shared-expert down projection (ffn_down_shexp) and the Engram value projection (engram_wkv). The routed experts are left exactly as ISTA shipped them, so GSQ's learned low-bit rounding of the experts is preserved byte for byte, and each file stays the same size and runs wherever the original runs. - The replaced tensors carry the one-direction refusal edit (strength 2.0) baked into DeepSeek's weights at full precision and quantized to ISTA's exact per-tensor type.
- Runs on a single 12 GB GPU with Strata: the backbone sits in system memory and the shared Engram table streams from an SSD, so a 763B model fits a consumer machine.
Not every rung cleared every gate; such a rung is published as measured, with its numbers in the table and the metrics repo.
What changed and what did not
Both files served on Strata, same prompts and template; "→" reads the stock GSQ-RCO rung → this one.
| Rung | bpw | Total GB | JailbreakBench (EN) | XSTest (safe refused) | Thinking high (30) | MMLU (500) | KL to stock |
|---|---|---|---|---|---|---|---|
IQ2_XXS |
2.0 | 249 | 85.2% → 0.0% | 7.6% → 0.0% | 27/30 → 0/30 | 82.8% (p=0.27) | 0.0225 |
IQ2_XS |
2.25 | 266 | 86.4% → 0.0% | 4.0% → 0.4% | 27/30 → 2/30 | 81.6% (p=1.00) | 0.0272 |
IQ1_M |
1.75 | 231 | 88.9% → 0.0% | 4.8% → 0.0% | 27/30 → 1/30 | 80.6% (p=0.75) | 0.0207 |
KL is the edit's distribution shift from the stock rung, from Strata's teacher-forced score mode: a top-64 lower
bound, so the true KL is a little higher. Measurements, prompts and gates:
AtomicChat/DeepSeek-V4.1-Flash-1017-Uncensored-GGUF-metrics (ablit/gsq/).
Running it
Download one rung and ISTA-DASLab's shared Engram file, then serve with Strata:
hf download AtomicChat/DeepSeek-V4.1-Flash-1017-Uncensored-GSQ-RCO-GGUF --include "*IQ2_XXS*" --local-dir ds-unc
hf download ISTA-DASLab/DeepSeek-V4.1-Flash-1017-GSQ-RCO-GGUF --include "*Engram*" --local-dir ds-unc # the 110 GB lookup table, once
strata launch --model-path ds-unc/DeepSeek-V4.1-Flash-1017-GSQ-RCO-IQ2_XXS-00001-of-00004.gguf
The Engram file is identical to ISTA-DASLab's and is not re-hosted here; keep it on a fast SSD next to the shards. As of this writing these files run in Strata (DeepSeek-V4.1 with a separate Engram file is not yet in llama.cpp).
Limitations
- The refusal classifier reads the start of an answer, so a soft refusal later in the text can pass as an answer.
- The edit removes refusals across topics; it does not keep a narrower set of them.
- With thinking on, the edit plans an answer to a request the original declines, and the plan can be long; give such requests a larger token budget or a lower effort.
Responsible use
This model answers requests the original declines. You are responsible for how you use it and for following the laws that apply to you.
Credits and license
- Base model: deepseek-ai/DeepSeek-V4.1-Flash-1017 — MIT (its LICENSE ships here).
- GSQ-RCO quantization and the shared Engram file: ISTA-DASLab/DeepSeek-V4.1-Flash-1017-GSQ-RCO-GGUF (DASLab, IST Austria).
- Runtime: Strata.
MIT, as the base model and ISTA-DASLab's GGUFs. Built by AtomicChat.
Preservation record
Selected source bytes are verified against pinned metadata; the original eight graded mirrors also passed the previously recorded anonymous 1 MiB weight-prefix checks. This is not a full independent-device restore/load test. Hugging Face repository copies share a provider and do not guarantee permanent storage.