why load pickle instead of safe?
lili_v10.ckpt
Same model published on other platforms. May have additional downloads or version variants.
