DGX Station inference

Serve only trusted, published, current, physically validated recipes. Bundled recipes are bound to the installed package; downloaded refreshes must be signature-verified.

Workflow

1. Require the user's exact model ID. If absent, run scripts/dgx-assist recipe models --json, show the alphabetical IDs and runnable states without ranking them, then ask which exact model to use.
2. Run scripts/dgx-assist system inspect --json.
3. Run scripts/dgx-assist playbook search "<model backend Station inference concern>" --json; cite relevant passages. Abstain from invented platform guidance if no passage overlaps.
4. Read compatibility.capabilities.recipe_execution. If it is false, stop before resolution or launch and explain the detected profile separately from applicable qualitative guidance.
5. Run scripts/dgx-assist recipe resolve --model "<exact-id>" --json. Add --backend only if the user requested one. Bind to localhost by default; only if the user explicitly requested and confirmed external exposure, add --bind-host "<approved-host>" here so preflight and run evaluate the host that was actually approved.
6. Run recipe show for the resolved recipe, then recipe preflight.
7. Present the exact model, recipe, image digest, GPU UUIDs, cache/storage estimates, credential variable names, host bind, port, downloads, conflicts, and redacted launch argv.
8. If blocked, do not work around the policy. Never switch models.
9. Obtain explicit approval for the displayed action and every required model or image download.
10. Only after approval, run recipe run --resolution-id "<id>" --allow-download --yes as applicable. Add --allow-external-bind only when the resolution carries the non-local bind host the user approved in step 9; never introduce external exposure that was not resolved and previewed.
11. Report the model-identity and smoke verification from the receipt.