Nov 07, 2026
Static Spectral Trojan Auditing and Pre-Load Checkpoint Sanitization
How trust boundaries, C++/CUDA kernel failure classes, and spectral weight audits fit together, with measurements from a 46-file local inventory (2,619 analyzed weight matrices across 14 full-model reads and 16 scoped variants) and 186.8M GGUF quantized blocks.
Nov 05, 2026
The Illusion of Safe Tensors: Why Valid Model Files Still Need Numerical Checks
SafeTensors guarantees that deserializing a model file cannot execute pickle code. It does not guarantee that the numbers inside are safe for the C++ and CUDA kernels that consume them.