Views
No views yet
model.safetensors.enc.part.* — the encrypted Stage-1 weights, split into
40 MB parts (concatenate in sorted order to reassemble; the decrypt script does this).model.safetensors.enc — the full encrypted Stage-1 weights (optional; kept for compatibility).aes_key.enc — the AES key, wrapped with the RSA public key.model.enc.meta.json — algorithm, nonce, GCM tag, the plaintext SHA-256, and the part count.public_key.pem — the RSA public key.tokenizer.json, tokenizer_config.json — plaintext.decrypt_weights.py — decryption script (handles the parts automatically).model.safetensors with AES-256-GCM (streamed). The AES key
is wrapped with RSA-4096 (OAEP, SHA-256) under public_key.pem. The matching RSA private
key is held by the authors and is not distributed, so the binary cannot be decrypted from
this repository alone.private_key.pem from the authors, then:python decrypt_weights.py --bundle . --private /path/to/private_key.pem --out model.safetensorsmodel.enc.meta.json. The
decrypted model.safetensors, together with the tokenizer here and the Qwen3.5-0.8B-Base
backbone, loads through stage1_gai_classifier/modeling_gai_classifier.py in the
replication package.