News · 2026-09-21

Pirate Face launches a model-torrent layer, but catalog scale is not archive scale

Pirate Face has launched a BitTorrent-and-checksum layer intended to keep Hugging Face model files available after an upstream page disappears. The idea is technically credible, but its 669,000-plus catalog count is an eligibility number rather than proof that hundreds of thousands of model weights are durably backed up.

Key facts

• Pirate Face uses Hugging Face web seeds, BitTorrent magnets, SHA-256 records and peer distribution.
• Its public catalog advertises more than 669,000 eligible repositories, while its provenance record reports roughly 6,000 witnessed revisions.
• The project added a tracker and DHT discovery layer on 20 September.
• A disabled 2.3 TB offensive-cyber model is indexed, but its record says “No torrent yet.”

The system has four layers. First, it observes Hugging Face metadata, revisions, licences and SHA-256 hashes and adds them to a provenance chain. Second, an eligible model can receive a BitTorrent magnet that points to Hugging Face as a web seed while the original files are still online. Third, the project’s tracker and DHT help BitTorrent clients find other peers. Finally, if Hugging Face stops serving the file, peers that kept the exact torrent can continue providing it. Pirate Face calls that surviving state “Rescued.”

That is a useful design, but it is conditional. Imagine a library card catalogue, a cryptographic fingerprint of each book, and a neighbourhood photocopy network. The catalogue and fingerprint can tell you what should exist and whether a copy matches. They cannot produce a copy if no neighbour still owns the book. Pirate Face’s own seeding guide says that proof of a live seed is not yet an attribution system, and public peer counts do not prove every peer has a complete file.

The difference matters for safety as well as preservation. Hugging Face disabled audnai/penclaw-GLM-5.3-abliterated-for-offensive-cyber, saying its content violated the Content Policy. Pirate Face records the 2.3 TB repository’s metadata and checksums but explicitly says it has no torrent. The evidence is therefore of an indexed high-risk artifact, not a successfully preserved high-risk artifact. It also does not prove that Hugging Face has a blanket rule against “abliterated” models; the policy does not name abliteration as its own category.

Abliteration is relevant because it can remove refusal behavior by changing weights without full retraining. The paper “Refusal in Language Models Is Mediated by a Single Direction” showed a refusal-related direction across 13 open chat models; that research does not validate every derivative labelled abliterated or establish that it is safe. A faithful checksum only says the downloaded artifact is the one someone recorded. It cannot tell a user whether a model includes harmful capabilities, poisoned code, rights they lack, or unsafe provenance.

The strongest positive case is real: a web-seeded torrent is more resilient than one HTTP endpoint, and timestamped hashes are helpful when upstream content changes. The strongest counterargument is equally real: dead torrents, version fragmentation, bandwidth costs, licensing risk and unreviewed high-risk models turn preservation into a governance problem. Pirate Face’s own terms say that users remain responsible for redistribution rights. For AI teams, this is a supply-chain signal: obtain weights from controlled sources, verify hashes, inspect licences, isolate execution and do not mistake integrity checking for a safety audit.

Primary source, verified: read the paper →

Ground Truth. (2026, September 21). Pirate Face launches a model-torrent layer, but catalog scale is not archive scale. Ground Truth. https://groundtruth.day/news/pirate-face-model-torrents-preservation-security.html

@misc{groundtruth:pirate-face-model-torrents-preservation-security,
  title  = {Pirate Face launches a model-torrent layer, but catalog scale is not archive scale},
  author = {{Ground Truth}},
  year   = {2026},
  month  = {sep},
  url    = {https://groundtruth.day/news/pirate-face-model-torrents-preservation-security.html}
}

Topics: open-weights · cybersecurity · supply-chain · model-security · torrenting