Deterministic PyTorch ZIP-archive & Python Pickle protocol 2..5 static stack-machine disassembler + GLOBAL/STACK_GLOBAL/REDUCE/BUILD allowlist verifier against non-tensor callable imports engine (.pt, .pth, .ckpt, .bin) built for PyTorch, Hugging Face, Automatic1111, MLSecOps — zero-upload ephemeral Wasm RAM execution.
Running ephemeral Wasm verification…