turbovec — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited turbovec (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Rust vector index on Google's TurboQuant quantizer. 10M float32 docs (31GB) fit in ~4GB. Faster than FAISS. No train step: add vectors, they are indexed. Fully local — nothing leaves the machine.
pip install turbovec==0.7.0Create a dedicated venv and install there; do not pip-install into a system Python.
import numpy as np
from turbovec import TurboQuantIndex
idx = TurboQuantIndex(dim=1536, bit_width=4)
idx.add(vecs) # 2D float32, C-contiguous: np.ascontiguousarray(x.astype(np.float32))
scores, ids = idx.search(q, k=10) # q must be 2D (batch): vecs[7:8], not vecs[7]
# returns 2D arrays (one row per query)
mask = np.zeros(len(idx), dtype=bool) # filtered search: bool mask over slots
mask[allowed_slots] = True
scores, ids = idx.search(q, k=10, mask=mask)
idx.write("index.tq") # persistence round-trips exactly
idx = TurboQuantIndex.load("index.tq")Gotchas:
TypeError: 'ndarray' object cannot be cast as 'ndarray'.mask is a bool array of length len(idx) (slot-based), not an id allowlist. The README's IdMapIndex.add_with_ids/allowlist= API is newer than the 0.7.0 wheel.bit_width=4 is the standard memory/recall tradeoff; pair with any local embedding model for an air-gapped RAG stack.mask~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.