Artifact gateway

This isolated origin accepts only short-lived, signed links to finalized synthetic smoke artifacts.