serialization

Serialization utilities for secure checkpoint saving and loading.

Functions

safe_load	Load a checkpoint securely using weights_only=True by default.
safe_save	Save a checkpoint after sanitizing known types for weights_only=True compatibility.

safe_load(f, **kwargs)

Load a checkpoint securely using weights_only=True by default.

NOTE: We dont set default weights_only (interpret as True for torch>=2.6) so you can override it with export TORCH_FORCE_NO_WEIGHTS_ONLY_LOAD=1 if you see pickle.UnpicklingError and trust the checkpoint.

Parameters:

f (str | PathLike | BinaryIO | bytes)

Return type:

Any

safe_save(obj, f, **kwargs)

Save a checkpoint after sanitizing known types for weights_only=True compatibility.

Parameters:

• obj (Any)

• f (str | PathLike | BinaryIO)

Return type:

None