Curated single-volume bundle of Z-Image-Turbo for stable-diffusion.cpp serving on enclave.host (Tinfoil Modelwrap volume; the enclave attestation commits to these exact bytes).

Generic component filenames (diffusion.gguf / llm.gguf / vae.safetensors): the node's ENCLAVE_SD_*_FILE envs are node-global and must resolve inside every SD volume on a node, so all curated volumes share these relative names to coexist (matches EnclaveHost/qwen-image-2512-sd). The bytes are unchanged from the original model-specific-named revision 07cb261e — this is a pure rename.

All components Apache-2.0 (Z-Image: Tongyi-MAI; Qwen3-4B: Alibaba; FLUX.1 AE: Black Forest Labs).

Serving env (enclave tinfoil-config, shared across all SD volumes on the node): ENCLAVE_SD_DIFFUSION_FILE=diffusion.gguf, ENCLAVE_SD_LLM_FILE=llm.gguf, ENCLAVE_SD_VAE_FILE=vae.safetensors, ENCLAVE_SD_VAE_TILING=64:0.25. ~13 GB peak VRAM at 1024 px, cfg 1.0, 4-8 steps, sizes in multiples of 64.