It is split by CI nightly and pushed to a private repo. We then manually push to the OSS repo the next day or so. As soon as we are reasonably confident with the filtering processes we set up, we will consider just pushing straight to OSS.