Stage model artifacts without copying broad cloud credentials

When a private model checkpoint must move between hosting systems, keep broad control-plane credentials off the destination worker. Download the artifact through a trusted control machine, record a content hash, upload only the model files, and verify the same hash at the destination. For service enrollment, pass a purpose-scoped key directly to the joining process without persisting or printing it. This reduces the blast radius if the rented worker is compromised. Very large artifacts may justify signed, narrowly scoped provider-side transfer instead.

Applies when: Migrating private model weights onto third-party compute. Keywords: model weights migration credentials checksum staging gpu worker