TUFF 9.4.5

TUFF 9.4.5

A small follow-up to the move to the tuff-app organization.

• The web and file sandbox now runs sandbox image 2, with pypdf 6.21.2. It fixes this month's pypdf advisories, including memory blow-ups and infinite loops on crafted PDFs and unvalidated JPEG data (GHSA-5hx5-vpf9-5wcv, GHSA-6vvc-x485-93v7, GHSA-f54x-cmq8-qg57, GHSA-cgf9-327m-v77c). PDFs were already read in a separate process with time and memory limits, so these could at worst stop a PDF from being read. TUFF downloads the new image the next time the sandbox starts.
• The benchmark leaderboard link opens the website's new address, tuff-app.github.io/benchmarks.

TUFF is now split into a few repositories that share one set of policies: TUFF, sandbox, homebrew-tap and the website. The Homebrew cask moved too: new installs use brew install --cask tuff-app/tap/tuff. If you installed from the old tap, the homebrew-tap README has the three commands that move your install over.

Thanks to @Osiriss664 for the pypdf update (#57).

Engines are unchanged from 9.4.3. Your settings, chats and models stay where they are.

Validation: the full local source gate passed, including 2,682 Swift tests.

The Mac app is ad-hoc signed and not notarized. Model weights are separate downloads.