Document PyTorch security exceptions

.github/workflows/ci.yml

@@ -60,8 +60,9 @@ jobs:
       - name: Compile Python modules
         run: uv run python -m compileall -q oida harness bench_adapter scripts tests
 
-      # PyTorch has no patched release for two local-only advisories in APIs
-      # Oída never calls: torch.export.load(.pt2) and torch.jit.script.
+      # The validated MOSS runtime uses PyTorch 2.10. PYSEC-2026-139 has no
+      # patched release; CVE-2025-3000 is fixed in unvalidated 2.13. Oída calls
+      # neither API. Both exceptions have a review deadline in SECURITY.md.
       - name: Audit dependency graph
         run: |
           uv export --all-extras --no-emit-project --no-emit-local |

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## Unreleased
+
+- Documented a dated exception for two PyTorch findings limited to local APIs
+  Oída does not call, while retaining the validated MOSS-Audio 2.10 runtime.
+- Corrected dependency-audit comments to distinguish the unpatched `.pt2`
+  loader finding from the TorchScript finding fixed only in unvalidated 2.13.
+
 ## 0.9.0 - 2026-07-27
 
 - **Decision-first gateway**: `oida/gateway/v0.5` and

SECURITY.md

@@ -2,8 +2,8 @@
 
 ## Supported Versions
 
-Security fixes are accepted against the current `main` branch until the first
-public release tag is cut.
+Security fixes target the current `main` branch and the latest tagged minor
+release. Older release lines receive fixes only when explicitly announced.
 
 ## Reporting A Vulnerability
 
@@ -22,3 +22,22 @@ and cross-origin calls.
 MOSS-Audio Hugging Face model lookup is disabled by default. Download weights
 into `weights/` or set `OIDA_ALLOW_HF_HUB=1` (legacy `HMM_`/`AEAR_`) explicitly.
 `HF_HUB_OFFLINE=1` always disables hub lookup.
+
+## Temporary Upstream PyTorch Exceptions
+
+The optional embedded MOSS-Audio runtime uses the locally validated Torch and
+Torchaudio 2.10.0 pair. Upstream MOSS-Audio currently pins 2.9.1, while moving
+Oída to 2.13 requires a new TorchCodec, Transformers, MPS, and model-inference
+validation cycle.
+
+Two findings remain accepted temporarily for this optional local runtime:
+
+| Advisory | Affected API | Oída exposure | Review deadline |
+| --- | --- | --- | --- |
+| `PYSEC-2026-139` / `CVE-2026-4538` | `torch.export.load` of `.pt2` artifacts | Oída does not call this API or accept `.pt2` model artifacts. No patched PyTorch release is currently published. | 2026-09-02 |
+| `GHSA-rrmf-rvhw-rf47` / `CVE-2025-3000` | `torch.jit.script` | Oída does not call this API. PyTorch 2.13 contains the fix, but is not yet validated with the embedded MOSS-Audio dependency set. | 2026-09-02 |
+
+The exception ends immediately if Oída begins calling either API, if its model
+trust boundary changes, or when a compatible runtime is validated. The
+all-extras CI audit ignores only these identifiers and fails on any new
+finding.

scripts/run_local_checks.sh

@@ -9,8 +9,9 @@ uv run --extra dev pytest -q
 uv run --extra dev ruff check .
 uv run python -m compileall -q oida harness bench_adapter scripts tests
 
-# PyTorch has no patched release for two local-only advisories in APIs Oída
-# never calls: torch.export.load(.pt2) and torch.jit.script.
+# The validated MOSS runtime uses PyTorch 2.10. PYSEC-2026-139 has no patched
+# release; CVE-2025-3000 is fixed in unvalidated 2.13. Oída calls neither API.
+# Both exceptions have a review deadline in SECURITY.md.
 uv export --all-extras --no-emit-project --no-emit-local |
   uvx --from pip-audit==2.10.1 pip-audit \
     --requirement /dev/stdin \