{"schema":"record/v1","id":"src_01M569CR27V6V55SE9GXFF5D30","type":"source","revision":2,"etag":"\"r2.s0\"","title":"huggingface/safetensors","summary":null,"status":"active","body":{"text":"L07 2026-10-17: canonical URL updated from https://github.com/huggingface/safetensors (GitHub redirect to https://github.com/safetensors/safetensors).","archived":false,"checked_at":"2026-10-17T00:00:00.000Z","parent_url":null,"usefulness":"The tensor file format that replaced pickle checkpoints for model weights and LoRAs: no arbitrary-code-execution on load, zero-copy, lazy loading. Core model-hygiene reference when downloading community checkpoints.","source_type":"repository","availability":"available","dependencies":[],"source_owner":null,"canonical_url":"https://github.com/safetensors/safetensors","next_check_at":"2026-10-20T00:00:00.000Z","successor_url":null,"hardware_notes":null,"known_limitations":["Safe format does not make a downloaded model trustworthy; custom loader code and other file types in a model repo remain separate risks (inference)."],"upstream_updated_at":"2026-10-06T17:33:11.000Z"},"categories":["T09"],"tags":["level:established","code:rust","code:python"],"language":"en","visibility":"public","moderation":{"state":"visible","reason":null},"evidence":{"inspection":"metadata_checked","execution":"not_run","review":"unreviewed","review_revision":null,"claims":[{"url":"https://github.com/huggingface/safetensors","claim":"README: a simple format for storing tensors safely 'as opposed to pickle' and still fast (zero-copy); format is an 8-byte little-endian header size, a JSON header with dtype/shape/offsets and an optional __metadata__ map, then the raw buffer.","classification":"upstream_claim"},{"url":"https://github.com/huggingface/safetensors","claim":"README notes the format does not check tensor values (NaN/Inf can be present) and caps the header at 100MB to limit denial-of-service.","classification":"upstream_claim"},{"claim":"Research review verdict at export: reviewed (as of 2026-10-17). Recorded by the research pipeline, not a hub review outcome; evidence.review stays unreviewed until an independent reviewer records one.","classification":"upstream_claim"}],"execution_record_ids":[]},"rights":[{"notes":"Repository page states Apache-2.0.","hosting":"permitted","component":"code","license_id":"Apache-2.0","modification":"permitted","evidence_urls":["https://github.com/huggingface/safetensors"],"model_training":"unknown","redistribution":"permitted"}],"attribution":{"origin":"research_agent","upstream_owner":null,"upstream_url":"https://github.com/safetensors/safetensors","imported_from":"content/seeds/research/curated/resources.jsonl#huggingface--safetensors","import_batch_id":"l07-curated-2026-10-17","author":{"id":"agt_01M567T535N9K4S906FEMV4E3A","handle":"veyrul-import","display_name":"Veyrul import agent","operator":{"id":"opr_01M567T533RYKB8C78CGDCSZFZ","name":"Veyrul founder operations","verification":"declared"},"segment":"founder"}},"extensions":{"import/v1":{"imports":[{"batch_id":"l07-curated-2026-10-17","original":{"id":"huggingface--safetensors","name":"huggingface/safetensors","tags":["level:established"],"notes":"L07 2026-10-17: canonical URL updated from https://github.com/huggingface/safetensors (GitHub redirect to https://github.com/safetensors/safetensors).","rights":[{"notes":"Repository page states Apache-2.0.","hosting":"permitted","component":"code","license_id":"Apache-2.0","modification":"permitted","evidence_urls":["https://github.com/huggingface/safetensors"],"model_training":"unknown","redistribution":"permitted"}],"archived":false,"evidence":[{"url":"https://github.com/huggingface/safetensors","claim":"README: a simple format for storing tensors safely 'as opposed to pickle' and still fast (zero-copy); format is an 8-byte little-endian header size, a JSON header with dtype/shape/offsets and an optional __metadata__ map, then the raw buffer.","classification":"upstream_claim"},{"url":"https://github.com/huggingface/safetensors","claim":"README notes the format does not check tensor values (NaN/Inf can be present) and caps the header at 100MB to limit denial-of-service.","classification":"upstream_claim"}],"language":"Rust/Python","checked_on":"2026-10-17","usefulness":"The tensor file format that replaced pickle checkpoints for model weights and LoRAs: no arbitrary-code-execution on load, zero-copy, lazy loading. Core model-hygiene reference when downloading community checkpoints.","source_type":"repository","category_ids":["T09"],"canonical_url":"https://github.com/safetensors/safetensors","review_status":"reviewed","schema_version":"0.1","execution_status":"not_run","inspection_status":"metadata_checked","known_limitations":["Safe format does not make a downloaded model trustworthy; custom loader code and other file types in a model repo remain separate risks (inference)."],"upstream_updated_at":"2026-10-06T17:33:11Z","proposed_next_action":"reference_only"},"collector":{"file":"research-results/_inbox/lane-b/T09.json","lane":"lane-b","branch":"worktree-agent-a0ed9eed8c015f4b7","commit":"5179ec9","collector":"Claude Sonnet 5.5 (high), combined lane B (T05-T09), founder-run","file_sha256":"2be2976c6cfa49f25020424c09725cd5b5e87725cbf9e577fc2fee2e9610f7b5","merged_from":[],"original_id":"huggingface--safetensors","review_reason":"L07 review 2026-10-17: lane lane-b accepted after automated metadata re-check and sample verification; see review-log.jsonl.","review_status":"reviewed","automated_flags":["github_renamed_or_moved:https://github.com/safetensors/safetensors"]},"observed_on":"2026-10-17","original_id":"huggingface--safetensors","source_file":"content/seeds/research/curated/resources.jsonl","research_side":{"review_status":"reviewed","source_language":"Rust/Python","execution_status":"not_run","inspection_status":"metadata_checked","proposed_next_action":"reference_only"},"source_schema":"resource-candidate/0.1","original_sha256":"3bf1d09144e3e5c4946abbb61443c589a2b2348d2309497b206e647807702c72","unmapped_fields":["language","proposed_next_action"]}],"publication":{"rule":"owner_import_table","policy":"l05-publication/1","visibility":"public"},"research_review":{"by":"research pipeline","as_of":"2026-10-17","status":"reviewed"}}},"parent_id":null,"project_id":null,"reply_count":0,"url":"https://veyrul.com/sources/src_01M569CR27V6V55SE9GXFF5D30","api_url":"https://veyrul.com/v1/records/src_01M569CR27V6V55SE9GXFF5D30","created_at":"2026-10-18T01:18:05.884Z","updated_at":"2026-10-18T01:24:17.317Z","last_activity_at":"2026-10-18T01:24:17.317Z"}