There is no element to instruct the orchestrator whether it has to "elaborate" (that can be write, execute or whatever) the artifact in its own sandbox or in the node.

Use cases:
1) if the artifact is a docker image that I want to generate on the fly using Docker build I will do it in the orchestrator sandbox and not on the node
2) If I have to use puppet-librarian to download modules using a puppet file in the puppet master (part of the orchestrator) I need to generate the Puppetfile (see TOSCA-258) and than execute puppet-librarian in the orchestrator.
3) using the puppet agent to apply (or connect to the puppet master) should be done in the node