Skip to content

modelvet 0.1.1

Latest
Latest

Choose a tag to compare

View all tags
@7etsuo 7etsuo released this 05 Aug 00:52
v0.1.1
This tag was signed with the committer’s verified signature.
7etsuo tetsuo
SSH Key Fingerprint: iMncjCkntJFqlMrXU51iRvDCMWSE4TCmm8O+6GBgV/4
Verified
Learn about vigilant mode.
ed0e308
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Internal legibility release. No public API, cap, violation-code, or verdict-behavior change; every existing input produces the same report. Already published to PyPI as modelvet 0.1.1.

Changes

  • Verdict completion consolidated into report.c (mvet_report_finish), so exactly one function writes the ACCEPT verdict.
  • Align-up padding computation shared through the checked-arithmetic module (mvet_checked_align_padding_u64) instead of duplicated in the GGUF tensor pass.
  • safetensors frame pass and work-array carving use explicit status checks instead of MVET_TRY on acquiring call chains.
  • Derived constants computed from their string literals instead of restated (the __metadata__ key length, the dtype-table name lengths).
  • Missing invariant assertions added in the GGUF tensor pass; the unused MVET_ST_FRAME_BYTES constant removed.

Full CHANGELOG entry: CHANGELOG.md.

In this release

modelvet-0.1.1.tar.gz contains the vendorable two-file amalgamation (modelvet.c + modelvet.h), LICENSE, README, CHANGELOG, the integration guide, and the modelvet(1) man page. Violation-code numbers remain append-only ABI (docs/RELEASE.md).

Verifying the artifacts

sha256sum -c modelvet-0.1.1.tar.gz.sha256
echo "release ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAkVhb6oApERrII+VGYS6/xIW8gvceMDm2AOD5aMGxW/ tetsuo@tetsuo-corporation" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I release -n file \
  -s modelvet-0.1.1.tar.gz.sig < modelvet-0.1.1.tar.gz

The tarball and the git tag are signed with the maintainer's SSH key (an SSH signature, .sig; there is no GPG .asc). The tarball is reproducible: make dist from this tag produces byte-identical output.

Scope

An ACCEPT verdict is structural only. It says nothing about model behavior, provenance, poisoned weights, or tokenizer semantics, and pickle-based formats are out of scope by design. See the threat model and the integration guide.

Assets 5
Loading