The browser fetches the complete selected artifact, copies it into a raw WASM allocation, and calls load_model. Rust validates SLM1 structure, checksum, tokenizer, tensor directory, required names, shapes, and storage encodings before allocating compute state.
Commit point
The runtime reports Ready only after model storage, reusable scratch, complete KV cache, and logits succeed. Failure clears partial model state.
Trust gap
The adjacent line-based manifest is fetched after model acceptance and is rendered as operator information. It is not yet cryptographically verified and cannot authorize an artifact by itself.