I set up a probe for my project using an AFM LoRA, here's a summary: New files are written to /private/var/db/AppleIntelligencePlatform/AppModelAssets/ with a unique hash (not a content-based hash), copying lora.part.bin and metadata.json attributable to TGOnDeviceInferenceProviderService. These materialize per process invocation, and don't appear to be cleaned up. See FB22523518 from macOS 26.3.1 (a) (build 25D771280a) M4 Air (A3241)