Stability & security
Stable Candidate, not LTS
Section titled “Stable Candidate, not LTS”ARTI 1.7.0 is published as a Stable Candidate. The supported 1.x surface is frozen for final compatibility verification. This label is a release stage, not a separate package version and not an LTS promise. UnFold belongs to the supported core; FusionPulse and inspectable Web runs are Alpha and their evolving surfaces are not frozen.
Compatibility policy
Section titled “Compatibility policy”- Patch releases fix defects without intentionally breaking supported APIs.
- Minor 1.x releases may add optional parameters and APIs with compatible defaults.
- Breaking supported APIs requires a new major release.
- Deprecation includes a runtime warning, a documented replacement, and test coverage before removal.
Support matrix
Section titled “Support matrix”| Component | Stable Candidate support |
|---|---|
| Python | 3.10, 3.11, 3.12 |
| PyTorch | 2.2 or newer |
| CPU | Supported |
| NVIDIA CUDA | Through CUDA-enabled PyTorch |
| JAX | Optional functional backend |
| Transformers, PEFT, Diffusers | Optional integrations |
| Artifact format | arti.st format version 1 |
Security boundaries
Section titled “Security boundaries”- Declarative pretrained loading rejects
trust_remote_code=True. - Treat
module:attributeCLI factories as executable local code. - Applications remain responsible for bounding inputs, sequence lengths, batch sizes, and user-selected dimensions.
- Downloaded models and optional dependencies remain external supply-chain inputs.
- Report suspected vulnerabilities privately without secrets, private weights, or sensitive data.