My upload CLI looked restart-safe until I tested two failures together: the process crashed at 63%, and the signed resume URL expired before restart.
The checkpoint needs identity, not credentials:
{
"file": "release.tar.gz",
"fingerprint": "sha256:...",






