Hugging Face Overhauls Kernels: First-Class Hub Repos, Code Signing, and Agentic Kernel Development

Summary

Hugging Face shipped a major revamp of its Kernels system, making custom compute kernels first-class Hub repositories with per-accelerator/OS/backend compatibility metadata. The security model tightens meaningfully: only kernels from "Trusted Publishers" load by default, with an explicit `trust_remote_code=True` opt-in required otherwise; releases are code-signed via Sigstore's cosign for ephemeral-key signing; and builds use Nix with embedded Git SHA1s for reproducibility verification. The CLI