frank-large: CIRU v4.4.1 Orca cutover — root unit, one stream, full context

Operator call 2026-09-19: switch the iGPU endpoint from
halogen-flash-server to jcbtc/Qwen3.8-Flash-CIRU-STRIX-Orca on the CIRU
v4.4.1 runtime with the QSA window hotfix (host build against the private
ROCm 10 SDK), one stream of the full 262144 trained window.  The service
leaves the quadlet shape for a root unit (the same shape as frank-small and
frank-medium: a private-SDK host binary has no image to install and no
generated unit to dodge); the halogen quadlet is archived, the deploy
handler retires it on the host, gates on 7770, and its stray-run sweep
matches the model path so it cannot take frank-small down.

tests/frank_small_unit.bats

@@ -14,7 +14,7 @@ UNIT="$REPO_ROOT/scripts/frank-small.service"
 SERVE="$REPO_ROOT/scripts/serve-frank-small.sh"
 ENV_FILE="$REPO_ROOT/scripts/frank-small.env"
 REMOTE_DEPLOY="$REPO_ROOT/scripts/deploy-remote.sh"
-QUADLET_LARGE="$REPO_ROOT/dankclaw/frank-large/quadlet/frank-large.container"
+ENV_LARGE="$REPO_ROOT/scripts/frank-large.env"
 
 @test "frank-small unit, serve script and env exist in scripts/" {
     [ -f "$UNIT" ]
@@ -58,7 +58,7 @@ QUADLET_LARGE="$REPO_ROOT/dankclaw/frank-large/quadlet/frank-large.container"
 @test "frank-small carries the fleet's image path, and only it" {
     grep -q '^MMPROJ_PATH=.*mmproj-Gemma4-12B-QAT-Uncensored-HauhauCS-Balanced-BF16\.gguf$' "$ENV_FILE"
     grep -q -- '--mmproj "$MMPROJ_PATH"' "$SERVE"
-    ! grep -q 'HALOGEN_VISION_TOWER' "$QUADLET_LARGE"
+    ! grep -q '^ENABLE_VISION=1$' "$ENV_LARGE"
 }
 
 @test "frank-small's slot grid is full-window and fits the 24 GiB card" {
@@ -94,10 +94,10 @@ QUADLET_LARGE="$REPO_ROOT/dankclaw/frank-large/quadlet/frank-large.container"
     grep -q '^ALIAS=frank-small$' "$ENV_FILE"
     grep -q -- '--port "$LISTEN_PORT"' "$SERVE"
     grep -q -- '--host "$BIND_ADDR"' "$SERVE"
-    # The two endpoints cannot share a port, and only the halogen unit publishes
-    # 7770.
-    grep -q '^PublishPort=7770:8731$' "$QUADLET_LARGE"
-    ! grep -q 'PublishPort=.*7771' "$QUADLET_LARGE"
+    # The two endpoints cannot share a port: frank-large holds 7770, this one
+    # 7771.
+    grep -q '^PORT=7770$' "$ENV_LARGE"
+    ! grep -q '^PORT=7771$' "$ENV_LARGE"
 }
 
 @test "the deploy handler installs the root unit and refuses a missing model" {