Think of it as a dumb file buck. Push a blob, the server keys it by SHA-256, and you (or anyone) pull it back by that hash. Auth is signed Nostr events.