Tensorseed

A signed catalog and a swarm for Hugging Face models.

What it is

Tensorseed is a tool that mirrors Hugging Face models and datasets and verifies them. Bytes move over BitTorrent v2 and hybrid torrents, plus HTTP and S3-compatible mirrors. A signed catalog sits on top, so you can find a revision, check its signature, and fetch the same files from more than one place.

Chia DataLayer is the source of truth for the catalog: every catalog revision is anchored on Chia mainnet first, and the signed file tree served over HTTPS is a cache that clients check against the chain.

Signed catalog

Each revision publishes a signed head, an append-only delta, and periodic snapshots. Clients pin a publisher key, walk a hash chain, and reject rollback, forks, and stale heads. The catalog for this project is served from catalog.tensorseed.dev.

BitTorrent v2

Model and dataset bytes are published as BitTorrent v2 or hybrid torrents, with HTTP webseeds so a pull still works when the swarm is quiet. Operators can seed what they already verified.

HTTP and S3 mirrors

Named, repeatable provider blocks describe R2, B2, S3, and other HTTP mirrors. A signed mirrors.toml is published with the catalog so clients can discover sources without a chain.

Status

The software is under active development. Version 0.2.0 is an early release; see Download for binaries. The signed catalog is live at catalog.tensorseed.dev. The catalog is at revision 4, with nine official entries (the first model, TunedChaos/ChaosNexus_Tuned_v1-GGUF, plus eight models and datasets added in this revision). Object bytes are mirrored under /t/ on mirror.tensorseed.dev. See the catalog README for the file layout. Browse the catalog in the browser at explore.tensorseed.dev.

Verify the catalog

Pin this publisher public key (minisign, key id CE1E0E3D543DFFB8) in catalog.publisher_pubkey. Clients reject any catalog file that is not signed by it.

RWS4/z1UPQ4ezmjrcpKqDYpqyn5h1WUS2oDs1B73Dh91kVzzNIZd03xd

Pin the Chia mainnet DataLayer store that anchors the catalog in chia.catalog_store_id. Clients accept a catalog head only when the chain anchors it.

3dcd43dced47a32f8e38e8ec77f583d8d1bafe1ab24e381538e50a36034b7a76

Client config:

[catalog]
backend = "file"
name = "tensorseed"
publisher_pubkey = "RWS4/z1UPQ4ezmjrcpKqDYpqyn5h1WUS2oDs1B73Dh91kVzzNIZd03xd"
chain_check = "strict"

[file]
base_url = "https://catalog.tensorseed.dev/"

[chia]
catalog_store_id = "3dcd43dced47a32f8e38e8ec77f583d8d1bafe1ab24e381538e50a36034b7a76"
chain_source = "light"
coin_api_urls = ["https://api.coinset.org"]

Then run tensorseed catalog chain-status, catalog info, list, show, pull, and verify. No Chia software is needed: the client checks the published chain-proof.json against a public Chia full node API.

Download

Tensorseed 0.2.0 is an early release for volunteer seeders and anyone who wants to pull and verify a published model. Formats and commands may still change before 1.0.

Binaries, checksums, the signature, and the release public key are on the v0.2.0 GitHub release.

There is no macOS build. The source archives are the tracked files from tag v0.2.0 and are listed in SHA256SUMS. You can also build from a checkout with cargo build --release or cargo install --locked --path crates/tensorseed-cli (Rust 1.87 or newer), or from GitHub with cargo install --locked --git https://github.com/TunedChaos/TensorSeed.

Also download SHA256SUMS, SHA256SUMS.minisig, and tensorseed-release.pub, then verify as below.

Verify a release

Release archives ship with SHA256SUMS and SHA256SUMS.minisig, signed by the release key (minisign, key id F5D2D3C4C27D459D). This is a different key from the catalog publisher key above. Do not verify binaries with the catalog key.

RWSdRX3CxNPS9Vl1JNjDnZ04OmM/3xrfp9vqG5FO8TNpK8Sbg6ENAI4P

Check a download:

minisign -Vm SHA256SUMS -P RWSdRX3CxNPS9Vl1JNjDnZ04OmM/3xrfp9vqG5FO8TNpK8Sbg6ENAI4P
sha256sum -c --ignore-missing SHA256SUMS

Support

Tensorseed is an open source project by Tuned Chaos, and support for it goes through the studio. Support pays for object storage and the always-on seeder that keeps published models available. Support is not a tax-deductible donation.

GitHub Sponsors Support with a card All ways to support

GitHub Sponsors covers monthly support. The card form is for one-time support through Stripe; pick Tensorseed under "Which project would you like to support?" to send it here.

You can also send support in Chia (XCH) to the Tuned Chaos address. Click the address to select it, then copy:

xch1mjuydgpt8ggtdg4aga3jytg97sr92zyxzp50j4kyldyexegva4pq9vfqdu

Or scan this QR code with a Chia wallet:

QR code for the Tuned Chaos XCH support address

Thank you

Thank you for supporting Tensorseed. Your support helps keep storage and the official seeder running. See everyone who supports Tuned Chaos on the supporters page.

Source and license

Tensorseed is licensed under AGPL-3.0-or-later. Copyright Tuned Chaos.

Source is at github.com/TunedChaos/TensorSeed.