Commit History
9 days ago
-
Squash history to remove the Pickle checkpoint from all revisions
model_ema_bf16.pt was deleted from main but stayed downloadable at earlier revisions. Pickle weights can execute arbitrary code on load and are prohibited for distribution by NVIDIA policy (Model Scanning for Releases SRD 4.3), so delisting was not enough. Weights unchanged: model_ema_bf16.safetensors holds the same 697 tensors, verified bitwise identical.08a27cb
