homelab
A GGUF File Is Not a Download, It Is a Binary: Sandboxing Local Model Loading
A 20 GB GGUF from a trusted repo is not a download - it is code doing work. The lab note: why a clean build floor did not close the two open llama.cpp GGUF-parser flaws, and the no-egress intake/loader split that makes the file just a file again.