safetensors holding the identical float32 values as the pickled JAX checkpoints, verified byte-for-byte. safetensors executes no code on load and is read with numpy alone, so opening the weights needs neither JAX nor PyTorch. thresholds.pkl becomes thresholds.json, removing the last pickle from the load path.
Running the JAX backend from these files reproduces a pickle-based run bit-identically.
The .pkl files are removed. HiDRA versions predating this change resolve them by name; upgrade, or pin the last revision that carried them:
hidra-download-models --format pkl --revision 4147d4fce1c46f7d56fdbf5dcc3e1e3b2888ba00
