SeisoLocalAI v0.4.0
SeisoLocalAI v0.4.0
Since v0.3.0 (2026-07-21). 7 PRs focused on NeMo RL integration, slime multi-GPU / GRPO correctness, training-config floors, and Forge red-team hardening.
Highlights
NVIDIA NeMo RL
- New external training method
method: nemo_rl(no vendoring): launches NVIDIA-NeMo/RL viauv runwith recipesgrpo,dpo,distillation,smoke(#387). - CLI (
seiso nemo-rl), Forge Train Studio picker, example/smoke configs, andSEISO_NEMO_RL_ROOTsetup docs (#387).
Slime / GRPO / multi-GPU correctness
- DDP
no_syncduring grad accumulation with flush/average before mid-window optimizer steps; round-robin SGLang/vLLM generate across engine URLs (#390). - Drop vacuous GRPO groups (<2 non-truncated rollouts); refuse biased
vllm_weight_mode=full+ LoRA; requirevllm_base_urlfor cloud GPU + slime + vLLM (#390). - Example microbatches kept as multiples of
rollouts_per_promptso GRPO groups stay intact (#388). - HTTP rollouts honor
finish_reasonand server token ids; managed vLLM liveness/model probing hardened (#391).
Training-config invariants
- Validate-time product slime floors (
data_gen_count, held-out auto-split), refuse empty/offdata_gen, require local JSONL (orSEISO_ALLOW_TEMPLATE_SLIME), ban CI fixtures on NeMo product configs (#389). - Held-out eval uses greedy HF generate; NeMo GRPO
num_generations_per_promptalways overridden (default 4) (#389).
Forge security (red-team)
- Non-overridable security system prompt with tools; quarantine instruction-like KB chunks; Compat inference API keys are chat-only (tools need session JWT) (#392).
- Refuse remote + code-exec entirely (no ACK override); redacted chat/tool audit hashes (#392).
Dependencies & audit sweep
pyasn1≥ 0.6.4 for REAL/OID DoS advisories; lock refresh (#386).- Broader Critical/High audit fixes across compress/export/distill-RL/DPO/kernels/MoE DDP (#391).
Upgrade notes
- NeMo RL requires a recursive NeMo RL checkout and
SEISO_NEMO_RL_ROOT(plusuv); not bundled in this repo. - Product slime configs without
SEISO_ALLOW_TINY_RLenforce real-data floors; template/code examples may need operator JSONL orSEISO_ALLOW_TEMPLATE_SLIME. - Remote Forge +
SEISO_ALLOW_CODE_EXECtogether refuse startup; Compat/v1tools require a session JWT (inference API keys stay chat-only). - Multi-engine slime HTTP rollouts round-robin generate; weight sync still fans out to all engines.
Full changelog: v0.3.0...v0.4.0