Smoke returns the artifact + cert shape locally with no GPU cost. Real dispatches a Modal GPU worker that exports + verifies your policy and produces a signed parity cert. Both write to R2 and produce signed download URLs.