Harden model validation: reject setstate hooks and forbid inductor::_reinterpret_tensor - #3078

Merged

edsavage merged 13 commits into

elastic:mainfrom

edsavage:security/setstate-load-timing

Jul 27, 2026

Commits on Jul 20, 2026

Reproduce __setstate__ load-time execution gap in model validation

edsavage
and
cursoragent
committed
2d5be13
Reject forbidden ops in serialised code before load (__setstate__ gap)

edsavage
and
cursoragent
committed
1700b14
Update docs/changelog/3078.yaml
edsavage
committed
4438b8a
Formatting
edsavage
committed
f58df05
Merge branch 'security/setstate-load-timing' of github.com:edsavage/ml-cpp into security/setstate-load-timing
edsavage
committed
31be59a
Tighten setstate load-timing probe to require a clean load

edsavage
and
cursoragent
committed
5957acd

Commits on Jul 21, 2026

Reject TorchScript custom state hooks before load

edsavage
and
cursoragent
committed
e88f958
Drop redundant pre-load forbidden-op scan

edsavage
and
cursoragent
committed
2770954
Align setstate timing repro message with hook-ban fix

edsavage
and
cursoragent
committed
4b828ab

Commits on Jul 23, 2026

[ML] Forbid inductor::_reinterpret_tensor (as_strided heap-OOB bypass, #12242)

edsavage
and
cursoragent
committed
ece0c5d
[ML] Remove public-to-private security-tracker references

edsavage
and
cursoragent
committed
8a97b48
[ML] Harden pre-load hook scan against per-record failures; louder test diagnostics

edsavage
and
cursoragent
committed
7b2b58e

Commits on Jul 27, 2026

Merge remote-tracking branch 'upstream/main' into security/setstate-load-timing
edsavage
committed
a0ffd70