docs(sightsound): NPU sight+sound runbook, fleet table, IOMMU/SVA root cause

frank-default-sightsound (FLM v1.0.1, XDNA2 NPU, port 52626) is live on
Dankclaw. Documents the first-deploy crash-loop root cause: iommu=off on the
kernel cmdline breaks the XDNA2 SVA bind (amdxdna_drm_open ret -19), so every
/dev/accel/accel0 open fails with ENODEV; fixed with iommu=pt + reboot.
Whole-registry single-port serving with per-request routing by exact FLM tag;
unknown tags fall back to llama3.2:1b (no 404). Health = GET /v1/version.
Vision + audio towers proven live (image_url color probe; audio control-pair
token-count probe). Updates AGENTS.md fleet table + runtime section, both
index pages, and the change log.

serverAppConfigs-docs/log.md

@@ -11,6 +11,38 @@ timestamp: 2026-09-14
 
 # Bundle Change Log
 
+## 2026-08-30 (night II) — frank-default-sightsound deployed; NPU SVA/IOMMU root cause
+- **Deployed** `frank-default-sightsound` on Dankclaw: FLM v1.0.1 (`/usr/bin/flm`,
+  dpkg `fastflowlm`) serving the whole local registry (36 tags) on port 52626;
+  primary model Gemma4 E4B IT NPU2 (vision + audio towers). First deploy
+  crash-looped every 10 s: `Open /dev/accel/accel0 failed (err=-19)`.
+- **Root cause** (live-verified): the XDNA2 driver's SVA bind fails with ret -19
+  whenever the AMD IOMMU is off; the kernel cmdline carried `iommu=off` (a
+  perf/DMA tuning experiment from 08-20, applied at the 08-26 reboot). No IOMMU
+  groups ⇒ no PASID state ⇒ accel0 open returns ENODEV for every client. The
+  same root cause explains the `amdgpu ... no vmid pasid mapping supported`
+  kernel line — a consequence, not a GPU fault.
+- **Fix**: `iommu=pt` in `GRUB_CMDLINE_LINUX_DEFAULT` + reboot (passthrough keeps
+  the iGPU default domain identity-mapped — zero DMA-translation overhead for
+  frank-default-large — while enabling IOMMU hardware + PASID, which SVA needs;
+  PASID domains are paged regardless of the default-domain type). Post-boot:
+  30 IOMMU groups, zero SVA-bind errors since boot, unit `enabled`,
+  `NRestarts=0` since boot.
+- **Live-verified behavior**: whole-registry serving with per-request routing by
+  exact FLM tag (unknown tags silently serve `llama3.2:1b`); vision tower proved
+  end-to-end (generated red PNG as `image_url` data-URI → correct color answer,
+  279 prompt tokens consumed); audio tower proven with a control pair (440 Hz
+  tone via `input_audio` = 37 prompt tokens vs 15 for the identical text-only
+  control). Health probe is `/v1/version` — FLM has no `/health` route.
+- `/scripts/frank-default-sightsound.env`, `/scripts/serve-frank-default-sightsound.sh`,
+  `/scripts/frank-default-sightsound.service` + deployer allowlist entries
+  (`c3ed3a6`, `cf0c541`) — service files and deploy wiring; unit is boot-persistent
+  (`WantedBy=multi-user.target`, enabled, `Restart=on-failure`, `RestartSec=10`,
+  `LimitMEMLOCK=infinity` — FLM requires unlimited memlock).
+- **Docs**: new runbook [[frank-default-sightsound]] (linked from both indexes),
+  AGENTS.md fleet table + runtime section updated with the IOMMU/SVA hard
+  requirement. Client wiring: pi `models.json` registers the endpoint under the
+  Dankclaw provider with the exact FLM registry tag as model id.
 
 ## 2026-08-30 (night) — frank fleet double swap: STRIX on its pinned fork, Huihui on FreeToken
 - **Dankclaw / frank-default-large**: swapped to