A "human-sounding rewrite" model that never saw a detector: behind 774 stars sits 340k downloads on Hugging Face

One person took "make AI text sound human" from a prompt-engineering problem to a dedicated 12B small model, with a double-click desktop app on top. On GitHub it has only 774 stars; the real heat is on Hugging Face: 2,251 likes and 30k downloads in 340 days. Below: what it is, why now, where the people came from, who is already copying it, and where to start if you want an open-source project that gets the same attention.

210 essays, 11 caught

On Oct 2 2026, a developer named sgaofen fed 210 AI-written English articles through a model he trained to rewrite them, then ran the output through Originality.ai at its strictest setting (AI Allowance 0%). 11 of them were still flagged as AI. The previous version got 26. He put that number, the test date, and the weights used right at the top of the README, along with 44 failed samples where the facts had been changed.

The project is called humanizer-local-model. The README's first line is plain: it is a 12B model that rewrites AI-drafted emails, essays, reports, and forum posts so they read as human-written, in Chinese or English, "keeping every number, unit, date, name, and quote, adding nothing", and it runs on your own computer.

An earlier Hugging Face blog post (Sep 16) was titled "We built an AI humanizer and never let it see a detector". Its opening paragraph reads:

The obvious way to build a model that fools AI detectors is to put the detector into the reward and optimize against it. We deliberately did not do that.

What it actually is

A rewrite model fine-tuned from Gemma 4 12B, plus a Mac / Windows desktop app. You double-click to open it; the app checks how much memory your computer has, recommends a model size to download once, and then runs fully offline. On the left you paste text; on the right the rewrite streams out, with swapped words underlined. The author says it takes 3.6 seconds to rewrite a hundred-odd word email on an M5 Max.

The training method is also a selling point. The blog explains it in detail:

• The paired data is generated in reverse: take a human-written original, have a large model "reverse-engineer" an AI-flavored draft, and train the model to go from draft back to original. The human side is left untouched. Per third-party summaries, there are 28,598 pairs in total, sourced from papers, government reports, emails, Reddit, and Hacker News.
• First SFT to learn "sounds human", then DPO, then GRPO to reinforce "facts unchanged": a large model acts as judge, deducting 3 points for changing numbers, names, or dates, 1 points for flattening colloquial tone into standard register, and also penalizing copying the original sentence structure.
• The detector is tested only once at the end and does not enter any step of training.

There is also something the local-LLM crowd really appreciates: it does quantization-aware training itself. For the same 3.9 GB 2-bit file, ordinary quantization matches the original model's next-token predictions 70% of the time, while theirs does 87% (the author's own test), and it runs on machines with 8 GB of memory.

Why it caught fire now

Three things converged.

The demand was proven long ago, but open source had a gap. Students, job seekers, and email writers have long paid monthly fees for web tools like Undetectable.ai, StealthGPT, and WriteHuman. The most popular "remove AI flavor" project on GitHub, blader/humanizer, has 65k stars (11-06), and the Chinese version op7418/Humanizer-zh has 22k, but both are rule lists that a general-purpose LLM follows to rewrite. In the README the author ran a same-input comparison: of 60 essays, blader's rules applied via Claude got 60 caught by Originality.ai; his model got 4 (author's own test). Before it, the slot "a dedicated, evaluated, installable open-source humanizer model" on Hugging Face held only small models with single-digit likes.

Gemma 4 12B had just come out. 12B is just the size consumer computers can run while still being clever enough for rewriting. The earliest release in September was based on the smaller Gemma 4 E4B; between Oct 2 and 11, the app went from 0.1 to the 0.3.4,12B v2 and was released alongside its own quantized versions.

The evaluation was written so honestly it can be cited directly. Failure cases are fully disclosed, listing where it still errs by genre, and it states plainly that Chinese is weaker than English (204 Chinese rewrites, 149 had no factual issues). Nearly every outlet that later covered it repeated these numbers verbatim. The line "never let it see a detector" is both a hook and something that keeps it from looking like a "cheating tool": the early repo description read "help you bypass every AI detector", later changed to the current "keeps the facts".

Where the users come from

The main channel was the Hugging Face trending list: its likes there (2,251) are three times its GitHub stars, and people mostly found it there. Then AI news accounts, tutorial sites, and YouTube relayed it in turn. No big X account broke it, its top X post had 212 likes, it didn't appear on Hacker News, and on GitHub it never entered trending, gaining a steady 18 to 24 stars a day, with its biggest day (10-15) at only 37 stars (GitHub, 10-16 to 11-06).

It also has a "spread the volume" tactic of its own: the same weights are published in several GGUF, MLX, and safetensors formats, with AGENTS.md and llms.txt written so coding agents can install it themselves, and LM Studio, Ollama, and vLLM each get steps you can copy. The result: 19 community quantizations and derivatives are built on it (Hugging Face, 11-06), and each one is an entry point pointing back. featherless.ai also hosts it as a pay-per-use inference endpoint.

No signs of inflated numbers: the star curve is flat, forks make up 15% (114), which looks like people are actually taking it and modifying it.

Real-world results aren't as good as the README claims

KDnuggets' October 28 hands-on test took an article of roughly two hundred words that GPTZero judged 100% AI and rewrote it, bringing it down to 49%. The author's conclusion was "quite luck-dependent, roughly a coin flip". A local-test post on r/learnmachinelearning on Reddit also reached the conclusion that results were mixed.

On the other side, that arXiv paper tested 11 commercial humanizers, and between 35% and 65% of documents had numbers, names, or quotes altered or dropped; it kept more than 97% of numbers and names, but rewrote quotes heavily. So it isn't necessarily the strongest at "fooling detectors"; "no errors after rewriting" is where its claim really holds up.

The author also wrote in the blog that the most common flaw is dropping qualifiers, about one in three: "an estimated 4.2%" becomes "4.2%", and "indicates" becomes "proves"; short texts under 120 words are less stable.

Who is competing with it, and who is already copying it

An AI company (Abacus.AI) built one using nearly the same method six weeks after it came out. That tells you two things: the approach works, and the moat is shallow.

Who is behind it

On GitHub it's sgaofen, whose bio points to research in biology, computer science and chemistry; on Hugging Face it's jialinyyzz (Stephen Yu). From the outside you can't tell whether these are the same person or whether it's a small team (inference: same person or group, with the two accounts linking to each other).

His other repos are telling: murmur (902 stars, turns WeChat and QQ chat logs into a 3D relationship graph), cli-in-wechat (328 stars), vibe-schooling (81 stars, with the tagline "Get 4.0 GPA without learning"), plus a Canvas quiz auto-answer plugin. He consistently builds tools that Chinese users and students actually want but that sit in a gray zone, so when humanizer came out, there was a ready-made Chinese audience to spread it.

If it were you

One-line verdict: The "human-sounding rewrite" slot is already taken by it and Abacus, so don't build the Nth English humanizer. What's worth copying is the template: pick a single rewriting task that people pay monthly for and that general models do poorly, train a dedicated small open model for it, pair it with a one-click app and honest evals, and publish on Hugging Face.

Who it's for: People who have trained models and can run SFT plus RL (GRPO on a 12B model takes several GPUs running for days, plus a large model as judge, so compute isn't cheap, by my estimate); people who can write their own evals and are willing to show their failure cases; ideally someone with a native language or a community they know well.

Who it's not for: Prompt-only builders (that slot is blader's 65k-star skill, already crowded); people who only watch GitHub stars (for this kind of project, the buzz shows up in Hugging Face likes and downloads, and GitHub stars are a small fraction); anyone aiming at "beating CNKI or Turnitin specifically" (media won't write about it, and platforms may take it down).

How to do it: Three directions, ranked by how easy they are to follow:

1. Do the parts it does poorly. It admits it's weak on Chinese, short text and qualifiers. A version built specifically for Chinese and for short text under 120 characters (resume bullets, social posts, email openers) has a clear gap to fill.
2. Change the task. The same method of pairing human originals with AI drafts can be applied to other rewrites people pay for: translation-ese cleanup, resume rewriting, paper de-duplication, tone changes for customer support replies. First confirm that people are paying monthly for a web tool for this task, then start building.
3. Change the language. Thai and Vietnamese already have versions. Languages with large student user bases like Japanese, Korean, Indonesian, Spanish and Arabic have no equivalent as of 11-06 (not verified one by one).

How to get users: Follow its playbook: a Hugging Face model page, an online demo page and a method blog post, all published the same day; release several quantization levels at once, write AGENTS.md and llms.txt, and let community quantizers spread it for you; write evals that a news account can quote in full: dates, sample sizes, failure cases, and side-by-side comparisons with the most popular open-source options on the same inputs. Then reach out to accounts like AlphaSignal, KDnuggets and YouTube creators who review local models. Those are the amplifiers for a project like this. In your messaging, say "the rewrite doesn't change the facts", not "bypasses detection".

When to be early: The first month after the next strong base model that runs on a laptop comes out. This project rode the window of "Gemma 4 12B just dropped and nobody has fine-tuned a dedicated model yet". When the base models turn over, the first mover can claim "the first one" again. Also, the news that Anthropic will watermark Claude's output starting Nov 3 is already everywhere, so demand for "de-AI-ifying" text will only grow.

What would mean I misread it: ① Before end of November, its 30-day downloads on Hugging Face drop below 100k, which would mean most of the 340k is quantization pipelines and mirrors pulling it, not real users; ② Abacus's Smaug-Humanizer, or a similar model from a big LLM company, overtakes it on likes within a month or two, which would mean this category is won by brand and infrastructure, not by an indie dev; ③ Hugging Face or GitHub start delisting "humanizer" models, which would make the platform risk on this path real.