Custom Model "Serialization"

[mattjhawken]

Due to security risks and the potential of executing arbitrary code, serializing torch models with pickle is not implemented. Currently the only allowed models are those from Hugging Face and those that can be serialized via torch.jit.script.

The proposed custom model "serialization" method that can allow any model to be sent over P2P will involve using the inspect library to send the model source code to the worker. On the worker side, we must analyze the source code for vulnerabilities before then loading the model.