PyTorch Foundation Bets on Infrastructure While Creators Distrust Open Licenses

What the PyTorch Foundation built this week addresses the threat model that engineers worry about — malicious payloads embedded in model files, execution risks at inference time, portability gaps across hardware targets. Safetensors' admission into the foundation formalizes a format that the community had already largely adopted informally, putting governance behind a widely used AI model format that previously lacked it. That matters for enterprise adoption and for the agentic use cases the Foundation is explicitly targeting.