Hugging Face's logo

froggeric
/
wmr

Model card Files
xet
 Community
wmr / README.md
froggeric's picture
froggeric
Upload README.md with huggingface_hub
240a13c verified
preview code
|
Raw
History Blame Contribute Delete
3.28 kB
metadata 
base_model:
  - stabilityai/stable-diffusion-xl-base-1.0
  - madebyollin/sdxl-vae-fp16-fix
license: creativeml-openrail-m

wmr model hub

This repository hosts the models wmr downloads for its SynthID regeneration (--synthid-attack regen). wmr is a command-line tool that removes visible watermarks from Gemini / Veo / NotebookLM generated media and scrubs the invisible SynthID watermark via lossy SDXL img2img regeneration (the only SynthID attack the published literature reports as validated, confirmed here against Google's official SynthID verifier).

wmr auto-downloads the files it needs on first use and caches them under ~/.cache/wmr/; you do not need to download anything from here manually. Pass --regen-no-download to refuse the network. The SHA256 of every file is pinned in wmr's source and verified after download.

There are two regeneration backends, each with its own model set:

1. CoreML SDXL (macOS Apple Silicon, fast)

Used by --synthid-attack regen on macOS Apple Silicon (the default there). Native CoreML .mlpackage directories converted from apple/ml-stable-diffusion tag 1.1.1, tarred for hosting.

File Size SHA256
coreml-sdxl-unet.mlpackage.tar.gz ~4.4 GB 9101cadaefb5f98dad645ed81704ebe775ca173d926a61a4ed27a41d7e743f7a
coreml-sdxl-vae-encoder.mlpackage.tar.gz ~60 MB 370232dd23330abe34c17b19d8b7c08f55c5938887ad1ef608b2bc0b4e000036
coreml-sdxl-vae-decoder.mlpackage.tar.gz ~88 MB f477d3ca98a19143d81c199c1d02d3ed1737d4638487042c71775016fe399424
empty_prompt_embeds.bin ~0.6 MB e27ab49bda70deda842a83afa00e67488533f881f5a359bf31b514c00a8038fe

The UNet + VAE are converted from Stability AI's SDXL base 1.0 + madebyollin/sdxl-vae-fp16-fix. The empty-prompt embeddings are pre-baked CLIP outputs (the text encoders are not shipped).

2. CPU sdcpp SDXL (Linux, Windows, macOS Intel)

Used by --synthid-attack regen on Linux, Windows, and macOS Intel, and by --regen-backend cpu everywhere. Run natively via leejet/stable-diffusion.cpp (ggml), CPU-only in the release binaries.

File Size SHA256
sd_xl_base_1.0.safetensors ~6.5 GB 31e35c80fc4829d14f90153f4c74cd59c90b779f6afe05a74cd6120b893f7e5b
sdxl_vae.safetensors ~335 MB 235745af8d86bf4a4c1b5b4f529868b37019a10f7c0b2e79ad0abca3a22bc6e1

sd_xl_base_1.0.safetensors is the official Stability AI SDXL base 1.0 checkpoint (unchanged bytes; its SHA is the HuggingFace LFS content oid, so it verifies identically to the upstream file). sdxl_vae.safetensors is the fp16-stable VAE from madebyollin/sdxl-vae-fp16-fix (named sdxl_vae.safetensors upstream). Both are mirrored here so the CPU path depends only on this repo.

Licenses