v0.4.0

Changelog

Features

• feat(cli): pack a safetensors model directory
• feat(pack): pack a safetensors model whole, or refuse it
• feat(safetensors): read config.json and the shard index
• feat(safetensors): read the tensor header, parameter count and dtype

Fixes

• fix(pack): record a safetensors dtype as the config precision
• fix(serve): refuse an artifact whose weights llama.cpp cannot read

Documentation

• docs(roadmap): safetensors distribution is exercised end to end
• docs: record the distribution path as the README demonstration
• docs(pack): record why a shared weight does not trip the shard-size check
• docs(roadmap): narrow the safetensors validation gap to what is still open
• docs(roadmap): record format-neutral distribution and the gaps it leaves
• docs(readme): name safetensors where the README described GGUF alone
• docs(adr): record that distribution is format-neutral and serving is not
• docs(comparison): split distribution from serving
• docs(readme): lead with distribution and name the two audiences
• docs: move the tool comparison to a dated page and correct it
• docs: describe third-party marks and name the image vendor
• docs: route questions to the Discussions Q&A category
• docs: add NOTICE with third-party attribution

Other

• refactor(pack): read model metadata through a format-neutral type
• build: generate NOTICE and gate it on the module graph
• build(release): ship LICENSE and NOTICE with the archives and the image

---

Binaries are static (CGO disabled). The checksum file is signed with
cosign (keyless); see .goreleaser.yaml for the verify command.