Model chain of trust (2/4): where the bytes live — registry, OCI artefacts and distribution to the GPU nodeJul 26, 2026