TiGrIS
Tiled Graph Inference Scheduler. An ahead-of-time compiler that tiles ML models to fit embedded devices with hard memory budgets.
Give it an ONNX model and a memory budget. It partitions the compute graph into stages, tiles spatial operations, and emits a flat binary plan that the tigris-runtime executes with zero dynamic allocation.
The problem
On an embedded device with a few hundred KB of SRAM, most interesting models simply don't fit. The usual answer is to shrink the model: quantize harder, prune, pick a smaller architecture, and hope the accuracy hit is acceptable.
TiGrIS takes the other approach. It keeps the model you trained and rearranges the computation so that only a small working set lives in SRAM at any moment. Weights and intermediate spills go to flash or PSRAM. What comes out is a binary plan that the runtime executes as a flat sequence of kernel calls, with no interpreter, no tensor allocator, and no dynamic memory at all.
Installation
pip install tigris-ml selects a wheel for the host. Native wheels include the
portable reference runtime for Linux x86-64 and ARM64 with glibc >= 2.28,
macOS x86-64 and ARM64, and Windows x86-64. The Linux wheels use
manylinux_2_28; older glibc, musllinux, Windows ARM, and 32-bit ARM Linux
install the pure Python wheel instead. A source distribution is also available.
The pure wheel supports inspection, compilation, analysis, code generation, and zoo downloads.
run reports "Bundled host runtime is unavailable" without the native
library. Neither installation nor execution downloads a runtime separately.
On platforms without a native wheel, build the host library from the matching
tigris-runtime release:
run cmake -S . -B build-host -DTIGRIS_BUILD_HOST=ON, then
cmake --build build-host --target tigris_host, and set TIGRIS_HOST_LIBRARY
to the resulting shared library file. tigris --version and tigris run --json
report the runtime's version and origin; an invalid override fails without falling back.
Quick start
pip install tigris-ml
# Will this model fit in 256KB SRAM + 16MB flash?
tigris analyze mobilenetv2.onnx -m 256K -f 16M
warning: input axis 0 (batch_size) is unset; using 1 (--input-shape overrides)
╭──────────────────────── TiGrIS - mobilenetv2 ────────────────────────╮
│ Operators 65 │
│ Tensors 244 (66 activations) │
│ Peak memory (naive) 5.74 MiB │
│ Largest tensor 1x96x112x112 (4.59 MiB) │
│ Dtype float32 │
│ Input input 1x3x224x224 float32 │
│ Output output 1x1000 float32 │
╰──────────────────────────────────────────────────────────────────────╯
╭──────────────────────────────── SRAM ────────────────────────────────╮
│ Budget 256.00 KiB │
│ Scheduled peak 252.00 KiB (4.3% of naive peak) │
│ Stages 58 │
│ Spill / reload I/O 26.21 MiB / 27.55 MiB │
│ │
│ Need tiling 47 of 58 stages │
│ tileable 11 (138 tiles, max halo 2) │
╰──────────────── PASS - tiling resolves all stages ─────────────────╯
╭─────────────────────────────── Flash ────────────────────────────────╮
│ Budget 16.00 MiB │
│ Weight data 13.30 MiB │
│ Plan overhead 0.01 MiB │
│ Plan (est.) 13.31 MiB │
│ Plan INT8 (est.) 3.34 MiB │
╰───────────────────────── PASS - plan fits ─────────────────────────╯
The naive peak is 5.74 MiB. TiGrIS schedules it into 256 KiB through temporal partitioning and spatial tiling. analyze runs on your laptop; no hardware required.
That model is a stock export with a free batch dimension. TiGrIS binds a dimension the model leaves open to 1 and says so; pass --input-shape input:4x3x224x224 to compile for a different one.
From ONNX to embedded
Three steps take a model from ONNX to a C file you can drop into your firmware project:
# 1. Analyze feasibility against a memory budget
tigris analyze model.onnx -m 256K -f 16M
# 2. Compile to a binary plan (weights read-in-place from flash)
tigris compile model.onnx -m 256K -f 16M --xip -o model.tgrs
# 3. Generate a backend-specific C harness for your target
tigris codegen model.tgrs --backend esp-nn -o model.c
The .tgrs plan is target-agnostic: the same file runs on an ESP32, a Cortex-M, or a POSIX host. The kernel backend is chosen at codegen time and decides which kernel library the generated C calls into. The operator and backend matrix shows which operators are native, which fall back, and which are rejected.
What you get
tigris compile writes a single .tgrs file holding the operator schedule, tile parameters, quantization tables, and the weights.
tigris codegen produces a C harness that loads the plan and hands it to the runtime: buffer and arena declarations, a target entry point, and the glue for reaching the plan bytes. --format app emits a standalone program. --format core emits a source and header for firmware that already owns its entry point, arenas, and input source, so several generated cores can coexist in one binary. The codegen reference documents the flags.
Link the harness against tigris-runtime and your kernel library, and you have a working inference binary.
Precompiled models
The model zoo hosts precompiled plans with runtime requirements, input/output conventions, evaluation results, and per-model licenses. Public downloads need no account. List available builds before choosing a model:
tigris zoo list --category classification
tigris zoo list --runtime 0.9.1 --backend reference -m 256K
tigris zoo fetch MODEL -o downloaded-model
tigris inspect downloaded-model/model.tgrs
tigris codegen downloaded-model/model.tgrs --format core -o model.c
Filters are optional. The newest published matching build wins. Runtime ranges
include both endpoints; a null maximum means no known upper compatibility bound.
Tested releases are reported separately. Matching a range does not claim that
every release in it has been tested. -m limits the fast arena, a second
-m limits the slow arena, and -f limits plan bytes. These are not total
application RAM or flash limits. Unspecified resources remain unconstrained.
The runtime for deployment on a device is supplied separately.
Use fetch --artifact ID to pin a build. Withdrawn builds are excluded from
automatic selection but remain explicitly retrievable with a warning. Downloads
verify file hashes and never replace an existing destination. manifest.json
preserves the original build metadata. download.json records the current
runtime constraints, tested releases, and pinned catalog revision; use it for
dependency integration. Catalog updates do not change artifact publication dates
or rebuild models. tigris zoo --offline ... uses the HF cache;
tigris zoo --catalog catalog.json ... reads a local zoo snapshot.
Inspect a model
tigris inspect model.onnx
tigris inspect model.tgrs -v
tigris inspect model.tgrs --json
inspect detects the format from file contents. It reads declared ONNX inputs,
outputs, operators, and initializers, or compiled plan interfaces, stages, tiling,
quantization, and memory records. -v adds details; --json emits complete
metadata with an inspection_version field and exact byte counts, without weight
values. Inspection is offline: it does not compile, execute, infer shapes, or load
external ONNX tensor data. Recorded plan memory is not measured runtime peak or
total application RAM. Plan schemas do not imply runtime version requirements.
Inspection does not validate kernel numerics. run checks the portable reference
path; neither command validates ESP-NN or CMSIS-NN numerics or on-device latency.
Run a compiled model
Platform wheels include the reference C runtime. Run preprocessed tensors in
the stored axis order and declared interface dtype reported by inspect:
tigris run downloaded-model/model.tgrs --input downloaded-model/example-input.bin --output prediction.bin
Compare prediction.bin with example-output.bin numerically; the reference
comes from ONNX Runtime, so float results differ in the last bits.
tigris run model.tgrs --input input.npy --output prediction.npy
tigris --version
For multiple inputs, repeat --input NAME=FILE. Use .npz for multiple named
outputs. Raw .bin files contain contiguous little-endian elements; .npy
inputs retain their declared shape and dtype. Output files must not exist.
--json reports execution metadata and arena peaks. These peaks exclude the
plan, executor workspace, and Python process memory. Host execution uses
only the portable float32 reference and int8 reference kernels. It checks plan
execution on that path, not ESP-NN or CMSIS-NN numerics or on-device latency.
It does not preprocess photos or CSV files.
import numpy as np
from tigris.runtime import Session
with Session("model.tgrs") as session:
outputs = session.run({"input": np.load("input.npy", allow_pickle=False)})
print(session.runtime_version, session.memory)
Compiler and runtime releases share a version identifying the tested pair. Execution checks matching zoo dependency records when present and lets the C loader validate the plan. Schema versions, accepted schema ranges, and the host ABI retain their own compatibility meanings. Downloading and generating deployment code remain independent of the host runtime. See Contributing for native-library staging and wheel builds.
Further reading
- Getting started: installation, first compile, deploying to ESP32
- Core compatibility data: exact compiler/runtime releases and plan schemas
- Introducing TiGrIS: design, benchmarks, how tiling works
- CLI reference: every flag, every subcommand
Maintainer
TiGrIS is maintained by RAWS Labs. For applied embedded-ML engineering or collaboration, see raws.at.
Development
git clone https://github.com/raws-labs/tigris
cd tigris
pip install -e ".[dev]"
pytest
Metadata
Release files for tigris-ml 0.11.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| tigris_ml-0.11.3.tar.gz | 318.7 kB | Details |
Built distributions (wheels)
| File | Reset | |||
|---|---|---|---|---|
| tigris_ml-0.11.3-py3-none-win_amd64.whl | Python 3 | none | Windows x86-64 | Details |
| tigris_ml-0.11.3-py3-none-manylinux_2_28_x86_64.whl | Python 3 | none | Linux glibc 2.28+ x86-64 | Details |
| tigris_ml-0.11.3-py3-none-manylinux_2_28_aarch64.whl | Python 3 | none | Linux glibc 2.28+ ARM64 | Details |
| tigris_ml-0.11.3-py3-none-macosx_11_0_x86_64.whl | Python 3 | none | macOS 11.0+ x86-64 | Details |
| tigris_ml-0.11.3-py3-none-macosx_11_0_arm64.whl | Python 3 | none | macOS 11.0+ ARM64 | Details |
| tigris_ml-0.11.3-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 2.0 MB
Release files / tigris_ml-0.11.3.tar.gz
| Download URL | tigris_ml-0.11.3.tar.gz |
|---|---|
| Size | 318.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c4c69a1cede2b16fde61097f2cc44084aaf088a876be1b7e5e41d6d030f321d2
|
|
BLAKE2b-256 checksum How to use checksums |
310d6a8e0cdff646b76479961b537a7d00053b100cae537181d101bad8d7f1c3
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 27, 2026.
Transparency logRelease files / tigris_ml-0.11.3-py3-none-win_amd64.whl
| Download URL | tigris_ml-0.11.3-py3-none-win_amd64.whl |
|---|---|
| Size | 342.3 kB |
| Tags | Python 3 Windows x86-64 |
|
SHA-256 checksum How to use checksums |
24c28388149af653ed57dbf88ea5eb6f0951865cc882ba194823ffe87cd0b846
|
|
BLAKE2b-256 checksum How to use checksums |
91bc5afc6e880783d103b621113bec86495bad4f6fa23b97c61ac83a644453c6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 27, 2026.
Transparency logRelease files / tigris_ml-0.11.3-py3-none-manylinux_2_28_x86_64.whl
| Download URL | tigris_ml-0.11.3-py3-none-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 271.4 kB |
| Tags | Linux glibc 2.28+ x86-64 Python 3 |
|
SHA-256 checksum How to use checksums |
bbf5192736c64cb05bd31b852e5f975b0c5674fe1818c8b7740929344e1ad181
|
|
BLAKE2b-256 checksum How to use checksums |
123fa0fc0f7bf3a9d29f6ee3a12895eafd8db88707043074f1fcd390135f440e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 27, 2026.
Transparency logRelease files / tigris_ml-0.11.3-py3-none-manylinux_2_28_aarch64.whl
| Download URL | tigris_ml-0.11.3-py3-none-manylinux_2_28_aarch64.whl |
|---|---|
| Size | 279.3 kB |
| Tags | Linux glibc 2.28+ ARM64 Python 3 |
|
SHA-256 checksum How to use checksums |
96e24027b3bb4bf86846af26eacc18932b89cb54a0909b41112c808684c67513
|
|
BLAKE2b-256 checksum How to use checksums |
5cb9e060495fd5db3a6ccd9042f4d923e5f8fbff3ef0ccdd406626baeebf44a8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 27, 2026.
Transparency logRelease files / tigris_ml-0.11.3-py3-none-macosx_11_0_x86_64.whl
| Download URL | tigris_ml-0.11.3-py3-none-macosx_11_0_x86_64.whl |
|---|---|
| Size | 295.9 kB |
| Tags | Python 3 macOS 11.0+ x86-64 |
|
SHA-256 checksum How to use checksums |
0b38df16a31a08a5675af9894bafe0fd40c74bf48e7a7ec6149bcb17ba78012e
|
|
BLAKE2b-256 checksum How to use checksums |
8ef103082e10509e56de3e5a80c902ad52262b7e35914865e251a630059f4dca
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 27, 2026.
Transparency logRelease files / tigris_ml-0.11.3-py3-none-macosx_11_0_arm64.whl
| Download URL | tigris_ml-0.11.3-py3-none-macosx_11_0_arm64.whl |
|---|---|
| Size | 281.5 kB |
| Tags | Python 3 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
67074cb16be89832b7aef6a9737c10d45514553aa008d85614b1909965d17d22
|
|
BLAKE2b-256 checksum How to use checksums |
b8095297ad58de9414a2303c6e0d2399da9fee2fc5c1181e658866c3e55fc4be
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 27, 2026.
Transparency logRelease files / tigris_ml-0.11.3-py3-none-any.whl
| Download URL | tigris_ml-0.11.3-py3-none-any.whl |
|---|---|
| Size | 175.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
9a0f2bb6cae7cdf22d182d872c9907111da96d382e830d731b7cf4c193d9017d
|
|
BLAKE2b-256 checksum How to use checksums |
b9ff9e748405bc03a14e21734ecb31f72127346dcbbc676e8e6ab0b853d015e9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 27, 2026.
Transparency log