On main: peer frank-small WIP held (test file)

index on main: d95f55b frank-medium: 36:29 split, 327680 context, vision enabled
2026-09-17 01:47:30 -07:00 · 2026-09-17 01:47:30 -07:00
420 changed files with 5461 additions and 35520 deletions
@@ -1,4 +1,4 @@
-# Tunables for frank-dragoon (kingjones777/Qwen3.8-Flash-Next-ROCmFP4-
+# Tunables for frank-large (kingjones777/Qwen3.8-Flash-Next-ROCmFP4-
 # STRIX-GGUF on the kingjones30/ROCmFPX llama.cpp runtime, Dankclaw,
 # Strix Halo gfx1151, unified memory).
 #
@@ -56,7 +56,7 @@ CHAT_TEMPLATE_FILE=/home/dank/serverAppConfigs/scripts/chat-template.jinja
 CHAT_TEMPLATE_KWARGS='{"enable_thinking":true,"preserve_thinking":true,"preserve_reasoning":true}'

 # Alias + network.
-ALIAS=frank-dragoon
+ALIAS=frank-large
 BIND_ADDR=0.0.0.0
 LISTEN_PORT=7770

@@ -1,5 +1,5 @@
 [Unit]
-Description=ROCmFPX (kingjones30 fork) llama.cpp Qwen3.8-Flash-Next ROCmFP4 STRIX 177B MoE (dankclaw, frank-dragoon)
+Description=ROCmFPX (kingjones30 fork) llama.cpp Qwen3.8-Flash-Next ROCmFP4 STRIX 177B MoE (dankclaw, frank-large)
 After=network-online.target
 Wants=network-online.target

@@ -7,8 +7,8 @@ Wants=network-online.target
 Type=simple
 User=dank
 Group=dank
-Environment="FRANK_DRAGOON_ENV_FILE=/home/dank/serverAppConfigs/scripts/frank-dragoon.env"
-ExecStart=/home/dank/serverAppConfigs/scripts/serve-frank-dragoon.sh
+Environment="FRANK_LARGE_ENV_FILE=/home/dank/serverAppConfigs/scripts/frank-large.env"
+ExecStart=/home/dank/serverAppConfigs/scripts/serve-frank-large.sh
 Restart=on-failure
 RestartSec=10

@@ -6,7 +6,7 @@
 # is reachable on this port regardless of the boot tag. The NPU is a
 # single-lane device: generations serialize FIFO, and the first request after a
 # model swap pays the ~6-11 s load cost. The NPU draws from the unified RAM
-# pool shared with frank-dragoon (iGPU).
+# pool shared with frank-large (iGPU).
 FLM_MODEL=nuextract3:4b
 FLM_HOST=0.0.0.0
 FLM_PORT=7771
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # Serve kingjones777/Qwen3.8-Flash-Next-ROCmFP4-STRIX-GGUF as
-# frank-dragoon via the kingjones30/ROCmFPX llama.cpp runtime on
+# frank-large via the kingjones30/ROCmFPX llama.cpp runtime on
 # Dankclaw (Strix Halo gfx1151, unified memory).
 #
 # Runtime: kingjones30/ROCmFPX (fork of charlie12345/ROCmFPX with the
@@ -29,7 +29,7 @@
 set -euo pipefail

 SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
-ENV_FILE="${FRANK_DRAGOON_ENV_FILE:-$SCRIPT_DIR/frank-dragoon.env}"
+ENV_FILE="${FRANK_LARGE_ENV_FILE:-$SCRIPT_DIR/frank-large.env}"
 if [[ -f "$ENV_FILE" ]]; then
    set -a
    # shellcheck disable=SC1090
@@ -44,7 +44,7 @@ fi
 : "${MMPROJ_PATH:=/home/dank/models/agentionai-Qwen3.8-Flash-Next-ROCmFP4-FAST/mmproj/mmproj-Qwen3.8-Flash-Next-f16.gguf}"
 : "${CHAT_TEMPLATE_FILE:=$SCRIPT_DIR/chat-template.jinja}"
 : "${CHAT_TEMPLATE_KWARGS:={}}"
-: "${ALIAS:=frank-dragoon}"
+: "${ALIAS:=frank-large}"
 : "${BIND_ADDR:=0.0.0.0}"
 : "${LISTEN_PORT:=7770}"
 : "${CTX_SIZE:=401408}"
@@ -4,7 +4,7 @@
 # Runs `flm serve <tag>` on the XDNA2 NPU (50 TOPS, Dankclaw). The NPU is a
 # single-lane device: generations serialize in FIFO order, so this is a
 # background/triage endpoint, not an interactive multi-user chat. The NPU
-# draws from the unified RAM pool shared with frank-dragoon (the iGPU
+# draws from the unified RAM pool shared with frank-large (the iGPU
 # llama.cpp service); see serverAppConfigs-docs/LLM/frank-npu.md
 # for the memory budget and the model-selection tradeoff.
 #
@@ -37,4 +37,3 @@ __pycache__/
 # Editor/OS noise
 *.swp
 .DS_Store
-third_party/
@@ -9,12 +9,11 @@ services run from `/home/dank/serverAppConfigs` on each host (the 2026-08-22
 merge absorbed the former `vllmScripts` repo, history preserved).

 - **Dankserver** (192.168.0.235) — media/library stack (RomM, Copyparty,
-  Calibre-Web, Jellyfin, Plex) plus the `frank-archon` LLM service.
+  Calibre-Web, Jellyfin, Plex) plus the `frank-medium` LLM service.
 - **Dankclaw** (192.168.0.143) — AI/search/dev/observability stack (SearXNG
  via Gluetun, ComfyUI, OpenWebUI, Hermes, Gitea, Grafana, Prometheus, Loki,
-  Alloy, Pi-hole) plus TWO LLM services: `frank-dragoon` (flash-server
-  container on the gfx1151 iGPU) and `frank-zealot` (llama.cpp CUDA on the
-  RTX 3090). Caddy on
+  Alloy, Pi-hole) plus TWO LLM services: `frank-large` (halogen-flash-server on
+  the gfx1151 iGPU) and `frank-small` (llama.cpp on the RTX 3090). Caddy on
  Dankclaw reverse-proxies both hosts.
 - **FrankBook-Pro** (192.168.0.112) — macOS mini running the *arr stack
  (Prowlarr, Sonarr, Radarr, Lidarr, Readarr, qBittorrent) as quadlets inside
@@ -25,9 +24,9 @@ merge absorbed the former `vllmScripts` repo, history preserved).

 | Target | Service | Runtime | Model | Port |
 |--------|---------|---------|-------|------|
-| Dankserver | `frank-archon` | **radiance** (StillDeadcode, **pin 1.0.13** digest-pinned `stilldeadcode/radiance@sha256:4c3f484564…`, plain `podman run`, root systemd unit) | **Publisher payload** (swap 2026-10-15, MODEL_FILE-only): `StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe` → **`qwen3.8-next-flash-fp8-iq4r-moe.rad`** (121,969,901,568 B = **116,322 MiB**, Hub-LFS sha256 `0af5e962…` verified at fetch by `scripts/download-frank-archon-iq4r.sh`) — the OFFICIAL Qwen3.8-Flash-Next bf16 checkpoint rad-converted by the engine's author: routed experts as **4-bit codes into a 16-level non-uniform codebook** (128-pt Walsh–Hadamard rotation, GPTQ on a 10M-token calibration + 3 coordinate-descent sweeps, E4M3 scales per 64 weights), **10 whole bf16-protected experts/layer**, int8 W8A8 trunk/lm_head, fp8 HC mixtures, fp8 fixed-scale PLE n-gram (47.7 GiB), **MTP head + bf16 vision tower in the container**; card KL 0.0789 mean all-tokens / top-1 92.85 % vs BF16. **Base-alignment (censored) model** — the abliterated family lives on frank-dragoon. Shape carried VERBATIM from the 2026-10-13 record: **3 × 200,000 fp8-KV** (`--max-num-seqs 3`), **25,600 MiB slab + 5,120 MiB pool = 30,720 of the 30,969 MiB claimable**, 44 GiB/rank pinned host pool, PLE pinned to RAM, MTP depth 2, MNBT 2048, Froggeric v22.5 template. Decode/prefill ladders in the runbook are the **w4dn8 record** (the bar to beat; new-payload probes pending). Rollback: revert the swap commit (w4dn8 `.rad` on disk); the fp8-native `.rad` + the raw Swift1.5 BF16 source were DELETED from disk 2026-10-15 (Frank's one-time rm, volume for this payload; rebuildable via the fetch/build scripts). | 7770 |
-| Dankclaw | `frank-dragoon` | **halogen-flash-server 0.16.2** (`ghcr.io/peonist-ai/halogen-flash-server@sha256:0c61bf84…`, digest-pinned, plain `podman run` via `scripts/serve-frank-dragoon.sh`, root systemd unit) | Quat3rnion/halogen-swift1.5-qwen3.8-flash-next-v2-abliterated **`qwen38-flash-next-v2-swift15-abliterated.hgn`** (66,687,678,464 B = compacted r2 of the card's 89,775,868,032 B original, ~62 GiB resident; the v2 `.hgn` format loads in NO other engine), **+ REQUIRED `qwen38-flash-next-ngram.hgn`** (51,200,246,144 B, peonist @5cc17cea — read beside the checkpoint) **+ vision tower** (897,916,416 B, @e053f488 — **vision ON**, `image_url` parts only, ≥256 px probes), **MTP spec decode ALWAYS-ON (`HALOGEN_SPEC_ADAPT=0` — the adaptive default disables the drafter per request and HALVES decode)**, MTP head INSIDE the checkpoint (`HALOGEN_MTP_HEAD` unset; no sidecar fetched), **2 slots × 262,144 ctx** (KV pool 524,288 positions ≈ 14.0 GiB at ~28 KiB/position; the 27B slots>1-disables-drafting law does NOT carry over — batching and speculation coexist, the card's quickstart ships 2 with the head), harness window 217,088 = ceiling − 45k estimate headroom, **server-side sampler 1.0/0.95/20** (card recipe; models.yml extraBody matches), coupled cap/timeout 65536/7200, prompt cache ON by default (warm 100k turn ≈ 2 s vs ≈ 88 s cold)|7770|
-| Dankclaw | `frank-zealot` | llama.cpp master (0.5.0-dev, commit `5fc4f3c`), CUDA sm_86 build (root systemd unit, relinked) | HauhauCS/Qwen3.5-9B-Uncensored-HauhauCS-Aggressive **Q6_K** (7,359,259,008 B; dense `qwen35` hybrid: 32 layers, 8 full-attention + 24 Gated DeltaNet, 4 KV heads × 256 dim, vocab 248,320, native 262,144, **no MTP tensors in the file**) + the publisher's own **BF16 mmproj** (921,704,448 B) for **vision**, on the RTX 3090, **TWO 200,704-token slots** (`--ctx-size 401408 --parallel 2`), **exact f16 K + f16 V** under flash attention (32 KiB/token over the 8 full layers = 12.25 GiB pool), batch 4096 / **ubatch 2048** (measured CUDA optimum), `--log-verbosity 4`, **MTP OFF** (forced: no `nextn` tensors exist). Priced from the MiMo Q6_K boots (same geometry, same card, same shape): 21,276/2,849 at ubatch 1024, 21,846/2,279 at 2048. Cutover 2026-10-07 (late) from Gemma4-26B-A4B Q4_K_M 1×200,704. All three endpoints route harness **compaction** here. | 7771 |
+| Dankserver | `frank-medium` | mainline llama.cpp master fb27a525 (root systemd unit, gfx1201 HIP build) | ajgazin Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP UD-Q8_K_XL + z-lab Qwen3.8-27B-DFlash2 Q8_0 drafter, 2x Radeon AI PRO R9700 in ONE layer-split process (35:30), 262144 ctx over 2 slots, batch 6144x512, text only | 7770 |
+| Dankclaw | `frank-large` | halogen-flash-server 0.5.8 (rootless Quadlet) | peonist-ai Qwen3.8-Flash-Next w4b `.hgn` on the gfx1151 iGPU (Strix Halo LPDDR), 200192 ctx per conversation over one 400384-position KV pool / 2 slots, text only | 7770 |
+| Dankclaw | `frank-small` | mainline llama.cpp master 37b53fd (root systemd unit) | ISTA-DASLab Qwen3.8-27B-GSQ-RCO IQ3_S (`-mtp` + BF16 mmproj) on the RTX 3090, 131072 ctx / 1 slot, MTP speculative decoding, the fleet's vision endpoint | 7771 |

 Retired endpoints (`frank-npu`, and every prior runtime) are in
 the [runbook index](#runbook-index). The full swap history lives in
@@ -41,11 +40,7 @@ the [runbook index](#runbook-index). The full swap history lives in
 - `scripts/` — `deploy.sh` / `deploy-plan.py` / `deploy-remote.sh`, LLM serve
  scripts, systemd units, env tunables, bench harnesses
 - `old/` — retired LLM scripts (reference only)
- `serverAppConfigs-docs/` — knowledge base (Obsidian vault, OKF format).
-  The managed skill library is distilled there one page per skill-cluster:
-  `LLM/index.md` → *Cross-Cutting References*, plus `Operations/index.md`,
-  `Agent/index.md`, and the Infrastructure/Dankclaw/FrankBook-Pro service
-  pages (`serverAppConfigs-docs/log.md` carries the wave plan and results)
+- `serverAppConfigs-docs/` — knowledge base (Obsidian vault, OKF format)
 - `tests/` — bats suite + Playwright e2e

 ## Git Workflow
@@ -66,27 +61,18 @@ All edits flow through git. Never edit files on a remote machine directly.
 ./scripts/deploy.sh dankclaw
 ./scripts/deploy.sh dankserver
 ./scripts/deploy.sh dankclaw --service searxng
-./scripts/deploy.sh dankserver --service frank-archon
+./scripts/deploy.sh dankserver --service frank-medium
 ./scripts/deploy.sh dankclaw --dry-run
 ```

 The planner maps changed paths to services; the remote runner restarts only
 the selected service and records its revision outside the checkout.
 Documentation-only changes are a no-op. LLM services are selected only by
-their own files — every endpoint (`frank-dragoon`/`frank-zealot`/`frank-archon`)
-by its unit/env/serve trio in `scripts/` — so
-unrelated
+their own files — frank-large by `dankclaw/frank-large/quadlet/`, frank-small
+and frank-medium by their unit/env/serve trio in `scripts/` — so unrelated
 container changes cannot interrupt inference. Set `FRANK_SUDO_PW` for headless
 runs on a host without passwordless sudo; the value never enters the repo.

-**`deploy.sh <target>` with no `--service` is a fleet-wide DRAIN, not a sync.**
-It also walks every per-service revision marker under the deploy-state dir and
-restarts each service whose marker is behind HEAD *and* whose paths changed
-since that marker — so a backlog accumulated by service-scoped deploys fires
-all at once, and one failing health gate aborts the run with every later
-service left pending. Name the service unless a drain is what you want
-(`./scripts/deploy.sh dankserver --service frank-archon`).
-
 ### Deployment completeness (MANDATORY)

 A deploy is **not complete** when `deploy.sh` exits green. It requires:
@@ -95,14 +81,7 @@ A deploy is **not complete** when `deploy.sh` exits green. It requires:
 2. the Playwright e2e suite (`tests/e2e/run.sh`) — runs **automatically** as
   the `[3/3]` gate at the end of `deploy.sh` against the LIVE fleet; a
   behavior-affecting deploy that fails it exits `DEPLOY INCOMPLETE`. Bypass
-   only with `--skip-e2e` in an emergency. The gate runs the conditional
-   `frankbook` Playwright project (the `*arr`/qBittorrent walk,
-   `tests/e2e/specs/19-frankbook.spec.ts`) ONLY when a frankbook blast-radius
-   path changed since origin/main — that spec, `frankbook-pro/**`,
-   `shared/homepage/services.json`, or the `dankclaw/Caddyfile` serving the
-   arr vhosts — so a sleeping FrankBook-Pro never fails an unrelated deploy.
-   The default project set excludes it everywhere else (`E2E_INCLUDE_FRANKBOOK=1`
-   opts in; see `serverAppConfigs-docs/Architecture/E2E Suite.md`).
+   only with `--skip-e2e` in an emergency.

 ```mermaid
 graph LR
@@ -143,18 +122,14 @@ This rule exists because reboots found gaps twice (2026-08-26: Caddy as a
 bare compose container never returned; 2026-09-11: five observability
 services had no units). The observability services now have units under
 `dankclaw/observability/quadlet/` and their compose definitions were removed —
-one owner per container name. The stack is **configured and delivering as of
-2026-09-17**: a Grafana datasource and the `llm-fleet` dashboard are
-provisioned from `shared/grafana/provisioning/`, `shared/prometheus/rules/
-llm-fleet.yml` loads 5 alert rules + 1 recording rule, and firing rules are
-delivered: Prometheus → Alertmanager (`dankclaw/observability/quadlet/
-alertmanager.container`, loopback :9093) → host-side Signal relay
-(`scripts/signal-relay.py`, user unit, 192.168.0.143:18093 — the host LAN
-IP, the one bind a container can reach as `host.containers.internal`;
-iptables admits loopback, the host and the podman bridge subnet only) → signal-cli account 318311.
-Prometheus targets read down for structural reasons (HTML-scraped "probes",
-Gitea metrics off); the remedy is a blackbox exporter. See
-`serverAppConfigs-docs/Infrastructure/Observability.md`.
+one owner per container name. The stack is **configured as of 2026-09-16**: a
+Grafana datasource and the `llm-fleet` dashboard are provisioned from
+`shared/grafana/provisioning/`, and `shared/prometheus/rules/llm-fleet.yml`
+loads 5 alert rules + 1 recording rule. Nothing is *delivered* — there is no
+Alertmanager, so a firing alert reaches nobody (an operator decision, not an
+oversight). Five Prometheus targets read down for structural reasons
+(HTML-scraped "probes", Gitea metrics off); the remedy is a blackbox exporter.
+See `serverAppConfigs-docs/Infrastructure/Observability.md`.

 ## Testing

@@ -228,30 +203,14 @@ archive.

 **STOP the production service BEFORE benchmarking** — these servers serve
 real users, and a bench beside a live service starves the GPU and corrupts
-results. Use the runtime's own harness: `llama-bench` for the llama.cpp
-endpoints; a live llama.cpp server also reports honest per-request numbers in the `/completion` `timings` object (prefill/decode rates, `draft_n`, `draft_n_accepted`), which is how frank-dragoon and frank-zealot were measured. Rolling your own bench
+results. Use the runtime's own harness: `llama-bench` (llama.cpp), `vllm
+bench` (vLLM), and halogen-flash-server's own `bench`/`sweep` modes for
+frank-large, which is the active runtime there again. Rolling your own bench
 requires asking first.
 Scratch ports are not used on LLM hosts — a
 test process cannot share the single GPU anyway; validate against the service
 itself.

-(A gufo-era law; frank-dragoon ran ROCmFPX llama.cpp 2026-10-02 → 10-05, the
-halogen 27B container 2026-10-05 → 10-06, and is flash-server since, but the
-rollback tags keep it live.) **`gufo bench` cannot rank speculative-decode
-settings, and will invert the ranking.**
-Measured 2026-09-28 on frank-dragoon at depth 32768: its corpus
-reports `acceptance=0.933 ± 0.000` with an **identical trace sha256** across
-draft widths, i.e. the same highly-predictable text every run, and 93 % of
-every proposal accepted. It reported 29–37 t/s decode where real traffic
-gives ~15 t/s, and it made `--draft-tokens 16` look 6 % faster than 7 when
-real text made it 14 % *slower*. Use it for shape, not for A/B. For an A/B,
-replay **real** text through the live server and read the `Server-Timing`
-header — but note the unit rides in the **name** half (`ttft;dur=402.485`),
-so splitting on `=` alone keys the dict `ttft;dur` and every lookup silently
-returns nothing. Generate **at least 128 tokens** for the measurement: at 8
-tokens, `inter_token` is first-token noise and the run-to-run spread swamps
-every real difference.
-
 This covers **any GPU experiment, not just benchmarks** — including a bare
 2-rank RCCL/`torch.distributed` probe. On 2026-09-16 one such probe was run
 against the live service "because it only needs 200 MB of VRAM"; the host went
@@ -264,17 +223,16 @@ one: `ip neigh show <ip>` from a peer — FAILED means off/NIC dead, while a
 merely wedged kernel usually still answers ARP.

 1. Stop and mask (self-healing would restart it):
-   - Dankclaw `frank-dragoon` (root unit, halogen podman on the iGPU):
-     `sudo systemctl stop frank-dragoon && sudo systemctl mask frank-dragoon`
-   - Dankclaw `frank-zealot` (root unit, llama.cpp on the 3090):
-     `sudo systemctl stop frank-zealot && sudo systemctl mask frank-zealot`
-  - Dankserver `frank-archon` (root unit, radiance on both R9700s, TP=2):
-     `sudo systemctl stop frank-archon && sudo systemctl mask frank-archon`
+   - Dankclaw `frank-large` (rootless Quadlet again since 2026-09-16):
+     `systemctl --user stop frank-large`, then move its
+     `~/.config/containers/systemd/frank-large.container` aside and
+     `systemctl --user daemon-reload` — the quadlet generator re-creates that
+     unit from the file on every reload, so the source is the lever, not `mask`.
+   - Dankclaw `frank-small` (root unit, llama.cpp on the 3090):
+     `sudo systemctl stop frank-small && sudo systemctl mask frank-small`
+   - Dankserver `frank-medium` (system unit):
+     `sudo systemctl stop frank-medium && sudo systemctl mask frank-medium`
 2. Bench.
-   NOTE: `systemctl mask` FAILS on a relinked unit (the unit file in
-   `/etc/systemd/system/` is itself a symlink into the checkout — mask
-   refuses to replace it). Stop is enough for the bench window; the deploy
-   restores the unit, so re-deploy after benching instead of unmasking.
 3. Unmask and start; verify `curl http://192.168.0.<host>:7770/health`.

 **CRITICAL:** never `systemctl disable` a system unit on these hosts — it
@@ -286,18 +244,10 @@ deletes the unit file from `/etc/systemd/system/`, not just the symlink.
 The harness reaches the fleet through `.omp/agent/models.yml` in the
 operator's home — `/home/blank/.omp/agent/models.yml` on the dev box, which is
 where the harness runs; there is no copy on the servers. Each provider is one
-HOST:PORT; each model `id` is the served alias. **Official model ids are
-the StarCraft unit names (2026-10-08), on the wire since 2026-10-09, and
-since 2026-10-10 they are also the SERVICE names:** `frank-archon` →
-`192.168.0.235:7770` (`FRANK_ARCHON_SERVED_NAME`), `frank-dragoon` →
-`192.168.0.143:7770` (`HALOGEN_MODEL_ID`), `frank-zealot` →
-`192.168.0.143:7771` (`ALIAS`). The 2026-10-10 cutover renamed the units,
-scripts, env files, containers, deploy services and runbooks to match —
-the three former service names are fully retired and exist nowhere in
-the repo; historical text in runbooks uses the current names. Verify a
-rename on `/v1/models`, never
-on a chat response: radiance echoes the **requested** model name, so a 200
-proves nothing about the served id (llama.cpp and halogen ignore it).
+HOST:PORT; each model `id` is the served alias: `frank-medium` →
+`192.168.0.235:7770`, `frank-large` → `192.168.0.143:7770`, `frank-small` →
+`192.168.0.143:7771`. Per-role routing lives beside it in `config.yml` under
+`modelRoles`.

 Resolution rules: the default model resolves as a `defaultProvider` +
 `defaultModel` pair (the provider must serve the model); a subagent override
@@ -309,334 +259,102 @@ When renaming a service, retiring an endpoint, or moving a model: update the
 provider block, model `id`, `contextWindow`, `maxTokens`, `input` in
 `models.yml`, then fix every `modelRoles` entry that named the old endpoint —
 a role pointing at a provider the file does not define fails at call time. As
-of 2026-10-06 **all three endpoints accept images** (`input: [text,
-image]`) — `frank-dragoon` returned to vision with the flash-server v2 swap
-(the v2 vision tower loads beside the checkpoint; the text-only halogen
-27B window closed 2026-10-06) — while
-`frank-archon` takes them natively (radiance runs the checkpoint's
-27-layer Qwen-VL tower — patching, pad-token expansion and 3-part rotary
-are the engine core; `--mm-max-patches` available),
-and `frank-zealot` through
-the publisher's own BF16 mmproj passed as `--mmproj` — the model is natively
-multimodal but the Q6_K GGUF carries no vision tensors (same arrangement the
-Gemma4 era used). `frank-zealot`'s `contextWindow` is
-**200704** — the PER-SLOT window (`--ctx-size 401408 --parallel 2` since the
-2026-10-07 Qwen3.5-9B swap), not the pool and not the model's native 262144:
-the harness must compact before llama.cpp answers a longer prompt with a 400.
-Note also
-that
-the reasoning channel differs by runtime: llama.cpp AND SGLang (qwen3
-parser, live-verified) emit `reasoning_content`, vLLM emits `reasoning` —
-models.yml sets `reasoningContentField` per endpoint to match.
-There is **no audio**
-input anywhere in the fleet: that capability left with the FLM NPU
-endpoint on 2026-09-11, returned 2026-09-17 with the Gemma4 projector's
-audio encoder, and left again with the Gemma4 retirement on 2026-10-01
-(neither the MiMo nor the Qwen3.5 tower carries audio).
+of 2026-09-16 the image path is `frank-small` (`input: [text, image]`), and
+`frank-large` is text-only because its halogen deployment loads no vision
+tower. There is **no audio** input anywhere in the fleet: that capability left
+with the FLM NPU endpoint on 2026-09-11.

-### frank-dragoon — halogen-flash-server 0.16.2, Qwen3.8-Flash-Next v2 Swift1.5 ABLITERATED (Dankclaw, ACTIVE)
+### frank-large — halogen-flash-server (Dankclaw, ACTIVE)

-The **flash-server engine** (`ghcr.io/peonist-ai/halogen-flash-server@sha256:0c61bf84…`,
-digest-pinned, published tag 0.16.2, 3.6 GB image) as a podman container
-driven by `scripts/serve-frank-dragoon.sh` under a **root systemd unit**
-(`scripts/frank-dragoon.service`, `User=dank`, `Restart=always`,
-`ExecStop=podman stop -t 60 frank-dragoon-halogen`, the script runs `podman
-run` FOREGROUND — the container's exit code is the service's exit so
-`Restart=always` stays real, and the engine ledger lands on disk) on port
-7770 from the Strix Halo iGPU. Engine stdout goes to
-`/home/dank/logs/frank_dragoon.log` — **the boot ledger (weights resident, KV
-pool, MTP head, prompt cache, any clamp) lives there, not in the journal**.
-Cutover 2026-10-06 from the halogen 27B-dense era
-([[frank-dragoon-halogen27b-dflash2]], retired the same window).
+halogen-flash-server 0.5.8 as a **rootless Quadlet again since 2026-09-16**
+(`dankclaw/frank-large/quadlet/frank-large.container`), serving
+`peonist-ai/halogen-qwen3.8-flash-next` (115.55 GiB w4b `.hgn` checkpoint + a
+quality overlay that re-fetched to 2.40 GiB on 2026-09-16) on port 7770 from
+the gfx1151 iGPU. Two conversations of 200,192 tokens resident (pool 400,384,
+2 slots), greedy default, reasoning extracted to `reasoning_content`, and **no
+vision tower** — that moved to frank-small. It replaced ik_llama.cpp, which had
+replaced it for two days.

-Serving `Quat3rnion/halogen-swift1.5-qwen3.8-flash-next-v2-abliterated`:
-`qwen38-flash-next-v2-swift15-abliterated.hgn` (66,687,678,464 B ≈ 62.1
-GiB, sha256 `9c880b8b…` — a compacted r2 of the card's 89,775,868,032 B
-append-only original; the abliteration workflow appends and the repo's
-tooling drops dead padding, live tensors byte-identical) + the **REQUIRED**
-n-gram lookup table `qwen38-flash-next-ngram.hgn` (51,200,246,144 B,
-peonist @5cc17cea) + the vision tower `qwen38-flash-next-vision.hgn`
-(897,916,416 B, @e053f488) + the flat `tokenizer/` directory (6 files,
-fetched fresh from peonist). Cutover 2026-10-06 from the halogen
-27B-dense shape, chosen by Frank for the ABLITERATED base.
+The engine **fetches its own weights on first start** (`HALOGEN_DOWNLOAD`, into
+the `/home/dank/models/halogen` bind mount): clearing that directory and
+restarting the unit is the supported way to pick up upstream updates, and it
+needs the directory to exist **empty** — a missing directory fails the
+container with `Error: statfs /home/dank/models/halogen: no such file or
+directory` and the unit loops on `Restart=on-failure` until `mkdir -p` brings
+it back. The sidecars are versioned in place, so a stale copy is invisible from
+the file name (both overlays were ~95 MB larger upstream than the copies this
+host had been serving).

-**The format is the lock.** The v2 `.hgn` loads ONLY in the
-flash-server line — the 27B-era halogen 0.1.4 container refuses it, so the
-engine moved with the model. The MTP head is INSIDE the checkpoint
-(`HALOGEN_MTP_HEAD` stays unset; the separate `qwen38-flash-next-mtp.hgn`
-sidecar is deliberately not fetched).
+Measured boot ledger (2026-09-16, `HALOGEN_VERBOSE=1` ships in the unit):
+device budget `121 − 67.7 − 20 = 33.5 GiB` against a need of `~27.2 GiB`, so
+the configured pool was **not clamped**; 68.0 GiB of weights locked + 11.0 GiB
+of KV pool + 16.5 GiB of working memory = 95.4 GiB in all, leaving 14.7 GiB
+(475 contiguous 2 MiB blocks) for everything else: frank-small on the 3090 and
+~28 co-tenant containers. The engine printed its co-tenant stall NOTE and
+logged 4,350 compaction stalls (285 failed) while reserving the pool, so read
+that as "tight and fragmented", not "out of memory".

-**Product facts vs the 27B era, both regressions FIXED:** the base is
-**abliterated** (the 27B was a censored-base finetune; refusals were an
-accepted trade there) and **vision is ON** (the 27B engine silently
-ignored its encoder — frank-zealot owned images for exactly one day at this
-endpoint).
+Runbook: `serverAppConfigs-docs/LLM/halogen-flash-server.md`.
+Rollback: [[frank-large-ik-uncensored]].

-**Engine laws that shape the config** (all in `scripts/frank-dragoon.env`
-with evidence): `HALOGEN_SPEC_ADAPT=0` is MANDATORY — the default adaptive
-policy disables the MTP head for whole requests after low acceptance and
-HALVES decode; the head stays on and temp-1.0 traffic pays some acceptance
-for it (accepted). `HALOGEN_CTX=262144` is the PER-SLOT hard ceiling (400
-naming the limit, never truncation) — RAISED from 200192 on 2026-10-07
-under the 400-zone law: the harness clamps max_tokens to
-`min(45056, contextWindow − est − 4096)`, its chars/4 est UNDER-counts
-the rendered prompt by ~3 % (measured: est 152,938 → server 157,388,
-request 43,158 vs room 42,804), so a harness window == engine ceiling
-made every request over ~146k est a guaranteed 400. `models.yml`
-`contextWindow: 217088` leaves the 45k gap that absorbs the estimate
-error (worst-case request ≈ 219k ≤ 262144); compaction fires at 85 % of
-the harness window = 184,524 est ≈ 190k measured (Frank's 180k target).
-`HALOGEN_KV_SLOTS=2` is LEGAL here — the 27B "slots>1 disables the drafter"
-law does NOT carry over; batching and speculation coexist (the card's
-quickstart ships 2 slots with the head), so 2 is concurrent capacity.
-`HALOGEN_KV_POOL_POSITIONS=524288` (explicit 2 × ctx; ~28 KiB/position ⇒
-14.0 GiB). `HALOGEN_MAX_TOK=8192` is only the per-request DEFAULT (the
-harness sends at most its `maxTokens` 45056); `HALOGEN_MAX_TOKENS_CAP=65536` +
-`HALOGEN_QUEUE_TIMEOUT=7200` are a coupled pair (FLAGS.md table).
-**A server-side sampler EXISTS** (`HALOGEN_TEMPERATURE/TOP_P/TOP_K` =
-1.0/0.95/20, the card's thinking recipe) — an absent temperature is no
-longer greedy; `models.yml` extraBody carries the same values, consistent
-not load-bearing. Prompt cache is ON by default (`PROMPT_CACHE=2`): a warm
-100k follow-up costs ~2 s vs ~88 s cold — the 27B engine's manual
-`HALOGEN_CACHE_MB` pin era is over. `response_format` is unsupported.
-Thinking lands in **`reasoning_content`**; the v2 chat template rejects
-`reasoning_effort` outside `xhigh|medium|low`, so the `models.yml` fold
-stays mandatory. Thinking tokens COUNT against the budget (empty content +
-`finish_reason: "length"` when exhausted mid-thought). Vision: OpenAI
-`image_url` content parts only; ≥256 px probe images or the model answers
-"video".
+### frank-small — llama.cpp on the RTX 3090 (Dankclaw, ACTIVE)

-**Memory ledger** (121.2 GiB unified; the referee is the boot ledger):
-weights ~62 + KV 14.0 + arena ~8 (`3.8 + 8.4 × MAX_TOK/16384`) + vision
-~2 ≈ 86 GiB engine-side + `HALOGEN_HOST_RESERVE_GIB=20` → ~15 GiB
-margin over baseline co-tenancy. The 51.2 GB n-gram table rides as mmap'd
-page cache beside the checkpoint — the card's quickstart arithmetic does
-not bill it as resident, but READ the boot ledger and re-size if the
-engine prints a clamp.
+Mainline llama.cpp master `37b53fd` as a **root systemd unit** (repo
+`scripts/frank-small.service`, `relink_unit`ed into `/etc/systemd/system/`),
+serving `ISTA-DASLab/Qwen3.8-27B-GSQ-RCO-GGUF` at IQ3_S — the `-mtp` build, so
+the model's own Multi-Token Prediction head drives speculative decoding — with
+the BF16 mmproj, on port 7771, 131,072 ctx / 1 slot, f16 KV, greedy default.
+Deployed flags are in `scripts/frank-small.env`; the serve script refuses to
+start if the weights, the projector or the binary are missing.

-Fetch: `scripts/download-frank-dragoon-flashnext.sh` into
-`/home/dank/models/halogen-flashnext-v2/` (`-f` + exact byte counts + LFS
-sha256 + `--verify-only`, no token on the command line; resume goes
-against the RESOLVED CDN URL because curl drops `Range` across HF's 302).
-The serve gates mirror the deployer EXACTLY (byte-exact checkpoint +
-n-gram + vision tower, flat tokenizer with all six files as regular
-files) — the 2026-10-01 crash-loop lesson.
+Verified at deploy (2026-09-16): `/v1/models` reports `frank-small`; a chat
+completion returns content plus `reasoning_content`; a tool call returns
+`tool_calls`; the slot timing lines show `draft acceptance = 0.66–0.94, mean
+len ≈ 3` (MTP engaged); an image request is answered from the projector while
+the halogen side refuses images with a named reason; 22,362 MiB of the card's
+24,576 MiB is in use; `n_slots = 1, n_ctx_slot = 131072`.

-Runbook:
-`serverAppConfigs-docs/LLM/frank-dragoon-flash-server-v2-swift15.md`.
-Rollback: revert the swap commit and redeploy — the 27B payload
-(`/home/dank/models/halogen-qwen3.8-27b/`), its fetch script and the
-halogen 0.1.4 image digest all remain on disk; the ROCmFPX door behind
-that (`scripts/build-rocmfpx.sh`, pin `36e9acd`) is untouched.
+### frank-medium — llama.cpp layer split, DFlash2 + ngram-mod (Dankserver, ACTIVE)

-### frank-zealot — llama.cpp on the RTX 3090 (Dankclaw, ACTIVE)
+Mainline llama.cpp at **`fb27a525`** (a gfx1201 HIP build, `Root=`-less root
+systemd unit `scripts/frank-medium.service`) serving
+`ajgazin/Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF` at **UD-Q8_K_XL**
+(29.29 GiB) with the **z-lab DFlash2** `Q8_0` drafter chained to the
+draftless **ngram-mod** matcher, in **one process across both R9700s**,
+`--split-mode layer` at a **35:30 tensor split** (the balance point for the
+deployed batch: the drafter rides ROCm1, so it takes fewer target layers),
+262144 ctx over **2 slots** of 131072, batch 6144x512, text only.  DSpark was
+put up in the drafter's place the same day and reverted: it declares no sliding
+window, so its draft KV spanned the whole context (5.0 GiB) and cost ROCm1 four
+layers of the split.

-**llama.cpp master** (0.5.0-dev, commit `5fc4f3c`; CUDA sm_86 build
-`/home/dank/GitPackages/llama-master/build-cuda/bin/llama-server`,
-`GGML_CUDA_FA_ALL_QUANTS=ON`) as a **root systemd unit**
-(`scripts/frank-zealot.service`, `relink_unit`ed into
-`/etc/systemd/system/`), serving
-`HauhauCS/Qwen3.5-9B-Uncensored-HauhauCS-Aggressive` at **Q6_K**
-(7,359,259,008 B, sha256 `c0ba7beb…` computed locally — the Hub carries no
-LFS oid) **plus the publisher's own BF16 mmproj** (921,704,448 B), both
-`/home/dank/models/Qwen35-9B-HauhauCS-Q6K/`, on port 7771. Cutover
-2026-10-07 (late) from the Gemma4-26B-A4B Q4_K_M 1×200,704 shape (same day).
+**Layer split is why both cards now serve ONE model.** Tensor parallelism is
+impossible (see the PCIe lesson below), and so is vLLM's pipeline parallelism —
+its stage handoff is an RCCL `send`/`recv` of the hidden state, the exact
+primitive that cannot be dispatched on card #2. llama.cpp's layer split needs
+no collective at all: layers are distributed in order and the boundary
+activation is a per-backend copy, once per forward pass. Measured on this host
+(the predecessor runtime): 1991 t/s prefill layer-split vs 272 tensor.

-**Architecture: qwen35 dense hybrid** — read from the GGUF's own header, not
-the model card: 32 layers, `full_attention_interval = 4` ⇒ **8 full-attention
-layers (3, 7, 11, …, 31) + 24 Gated DeltaNet linear layers**, 16 attention
-heads / **4 KV heads** × 256 dim, `ssm` conv_kernel 4 / state_size 128 /
-group_count 16 / time_step_rank 32 / inner_size 4096, native 262,144, vocab
-248,320. Tensor types are Q6_K × 250 + F32 × 177 — standard quants only, so
-the stock master build loads it (arch `qwen35` is registered in this build's
-`src/llama-arch.cpp`). **KV accounting:** the pool scales with the 8 full
-layers only — 8 × 4 × 256 = 8,192 elements/token per cache, so f16 K + f16 V
-bills **32 KiB/token** = 12.25 GiB at the 401,408 pool; the 24 DeltaNet
-layers bill a fixed recurrent state per SLOT, not per token, which is exactly
-why two 200k slots fit where the 26B MoE fit one.
+This is the box's **only** LLM runtime: the vllm-radiance replica pair and its
+routing proxy (`frank-medium-a/-b/-proxy`) were retired the same day they went
+live, with their units moved to `~/.AGENTTRASH/20260916-vllm-radiance-retire/`.

-**The shape (2026-10-07):** `--ctx-size 401408 --parallel 2` = TWO
-conversations of 200,704 (Frank's cap; the harness `contextWindow` quotes
-the per-slot number), `--flash-attn on`, **f16 K + f16 V** (exact KV),
-batch 4096 / **ubatch 2048** (the measured CUDA optimum: +4.6 % prefill,
-decode flat, 616 MiB — MiMo-era A/B on this card), `--log-verbosity 4`,
-`--mmproj` for vision, **speculative decoding OFF** (`SPEC_TYPE=none`).
+Files: `scripts/build-llama-rdna4.sh` (builds the runtime, gfx1201 only, private
+ROCm 7.14 toolchain bundled beside the binary), `scripts/download-frank-medium-gguf.sh`
+(resumable, byte-verified payload), `scripts/frank-medium.env`,
+`scripts/serve-frank-medium.sh`, `scripts/frank-medium.service`. The deploy
+handler refuses to start a unit whose runtime or payload is missing, retires
+the vLLM quadlets, waits for 7770 to be released (the retired proxy held it) and
+gates on `/health`.

-**Why MTP is off**: it is not a choice — **this Q6_K file carries no
-`nextn`/`mtp` tensors** (verified from the tensor-name list), and MTP is a
-property of the file, not of the flags. The publisher card advertises "MTP
-support" for the base architecture; the quantized export dropped the head.
+The ref is pinned by two features and must not float: **DFlash2**
+(ggml-org/llama.cpp#27342) and **qwen35 MTP**. The ROCmFPX fork the endpoint
+used earlier that day has neither.

-**Measured boots** (nvidia-smi, the referee): the deployed boot is
-**21,436 used / 2,689 free** (ubatch 2048) — the pricing boots were the
-MiMo-V2.6-Distill-Qwen-9B pair at this exact geometry (**21,276 / 2,849** at
-ubatch 1024, **21,846 / 2,279** at 2048), so the 415 MiB lighter weights
-bought back what the projection predicted. The engine ledger confirms the KV
-law to the MiB: `CUDA0 KV buffer size = 12544.00 MiB` (`K (f16): 6272.00`,
-`V (f16): 6272.00`), compute buffers 1,136 MiB on CUDA0 + 848 MiB host, the
-mmproj 879 MiB + 248 MiB. Decode is ubatch-invariant (Swift-era 3090 law). The
-Q6_K rung costs ~10 % decode vs Q5_K_M (weight bandwidth; MiMo-measured 94.4
-vs 104.8 t/s).
-
-**Vision**: the publisher's own BF16 mmproj via `--mmproj` (the model is
-natively multimodal; the Q6_K file carries no vision tensors). Probe traps
-carry over: ≥256 px probe images or the model answers "video", and only the
-OpenAI `image_url` content part reaches the model.
-
-**Compaction hub**: `models.yml` routes `compactionModel` for
-`frank-archon`, `frank-dragoon` and `frank-zealot` (the 3090 endpoint) here — 200,704 is the
-only window in the fleet that fits a worst-case compaction input (~170k
-tokens). With `--parallel 2` a compaction request no longer serializes behind
-a live generation (the Gemma4 era's `--parallel 1` law).
-
-Runbook:
-`serverAppConfigs-docs/LLM/frank-zealot-llama-qwen35-9b-q6k-2x200704.md`.
-Rollback: revert the swap commit — the Gemma4 payload
-(`/home/dank/models/Gemma4-26B-A4B/`), the MiMo Q6_K payload
-(`/home/dank/models/MiMo-Q6K/`), the Swift payload
-(`/home/dank/models/Swift15-UncIQ3XXS/`) and the Ornith Q8_0 payload
-(`/home/dank/models/Ornith-Q8/`) all remain on disk.
-
-
-### frank-archon — Radiance (StillDeadcode), publisher Qwen3.8-Flash-Next iq4r, TP=2 (Dankserver, ACTIVE)
-
-The **radiance engine** (StillDeadcode, Apache-2.0; image
-`stilldeadcode/radiance@sha256:4c3f484564…` digest-pinned, **pin 1.0.13**
-for serve; `libr4d` gfx1201 kernels, plain `podman run`, root
-systemd unit, container name = unit name) serving the
-**publisher's container of the official Qwen/Qwen3.8-Flash-Next**:
-`StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe` →
-`qwen3.8-next-flash-fp8-iq4r-moe.rad` (116,322 MiB, Hub-LFS sha256
-verified at fetch by `scripts/download-frank-archon-iq4r.sh`; recipe
-`qwen4exp-w4nl64-i8-hc8m`): **routed experts as 4-bit codes into a
-16-level non-uniform codebook** after a 128-point Walsh–Hadamard rotation
-(E4M3 scale per 64 weights; codes by GPTQ on a 10M-token calibration with
-per-expert down-proj Hessians, refined by 3 coordinate-descent sweeps),
-**10 whole bf16-protected experts/layer**, **int8 W8A8 trunk/lm_head**
-(scale per 128 columns searched), **fp8 HC mixtures**, PLE n-gram table at
-fp8 fixed scale (47.7 GiB), **MTP head and bf16 vision tower in the
-container**. Card quality (full-vocab teacher-forced KL vs bf16, ~75K
-positions): mean 0.0789 all-tokens / 0.0239 assistant turns, top-1 92.85 %.
-**MODEL_FILE is the only serving argument that moved** (2026-10-15); every
-number of the 2026-10-13 shape below carries verbatim. The plugin's
-**one-table-one-encoding law** (fleet-measured at rad-convert declare):
-one expert table takes ONE encoding; only whole bf16 experts are legal
-beside it. Rollback: revert the swap commit — the in-house w4dn8 `.rad`
-(KLD-gated Swift1.5 conversion) stays on disk; the fp8-native `.rad` was
-deleted 2026-10-15 (rebuild: `scripts/download-frank-archon.sh` +
-`scripts/build-frank-archon-rad.sh`).
-
-**Shape (both R9700s, TP=2)**: `--tp-wire wht6`, `--max-num-seqs 3`,
-`--max-model-len 200000` (the harness contextWindow must quote this),
-`--placement expert_tiered --host-pool-mib 44928` + **explicit VRAM
-partition `--vram-weights-mib 25600 --vram-kv-mib 5120`** (the vram-pair
-replaced `--expert-vs-cache-ratio`; the two are ONE budget —
-`weights + kv ≤ 30,969 MiB`, derived from the engine's own budget table: card
-32,624 MiB, the pair at 29,120 settling 2,058 MiB free against the engine's
-209.19 MiB floor (`--gpu-headroom-mib 96` + 113.19 static), so 1,849 MiB is
-claimable and the old 29,120 bound was my hand-picked 1 GiB reserve, not a
-hardware wall), `--kv-cache-dtype` **`fp8` — quantized KV, restored 2026-10-13
-because it is the only dtype that funds the slot count at this window**,
-`--num-speculative-tokens 2`, `--max-num-batched-tokens 2048`, prefix cache
-8 GiB pinned host + 64 GiB disk at `/home/dank/radiance-state`,
-**`--ngram-placement ram`**, Froggeric v22.5 chat template vendored
-(`scripts/qwen38-froggeric-v22.5.jinja`, `--override-chat-template`). Boot
-ledger (2026-10-13, pair 25600/5120): `kv cache 5.00 GiB … backs 3 sequences
-all at 200000 tokens at once, which is the worst case` — `kv_attn` page
-26.00 KiB (fp8) at 607,740 tokens (the sizing law predicted 608,027),
-`kv_qsa_bkey` 3.25 KiB at the same token count, `kv_gdn_state` 54 MiB × 6 slots
-(3 sequences × 2 copies) = 324 MiB; the sampler prints **9 rows**
-(3 × (1+2), inside the 25-row `wht6` exactness bound); the slab filled to
-563 KiB of slack with **17,548 slots** (16,235 at 24,000, 14,753 at 22,208 —
-every 1,792 MiB buys ~1,300 resident experts, and the pinned host pool hands
-the same experts back: 8,893 → 7,580 slots); `unclaimed 477.30 MiB`, cards
-settled ~336 MiB free against the engine's 209.19 MiB floor, KV lending
-4.22 GiB to the expert cache. Prefill tracks this slab only up to a
-**threshold**: 22,208 → 3,397 and 24,000 → 3,290 t/s at 43.5k are one band
-(±3 %), and the 25,600 arm measured **3,290** — the third step bought nothing
-(the 3,584 arm did not reproduce at 3 slots); the cliff is at ~26 GiB
-(26,071 → 4,379 on 2026-10-11's arm), so below that the slab is a threshold,
-not a slope.
-
-**Decode ladder (2026-10-13, 512 tokens, greedy, this shape)**: 99.0 t/s
-single-stream at 43.5k, 93.3 at 197k — decode is nearly window-free (−6 % for
-4.5× depth); **3 concurrent streams give 113.9/43.3/10.9 t/s = 18.4 t/s
-aggregate**, so the slot count is paid in decode concurrency (a fused-step
-lottery), not in prefill; leg D of `probe-frank-archon-kv.py` measures it.
-
-Shape notes carried from the fp8-native era and unchanged: wht6 gains,
-MNDT 2048 law (2560 collapses decode to 2.6–7.7 t/s), the 64 GiB disk
-prefix cache, and the rule that a prompt over `--max-model-len` is
-refused, never truncated. What changed: the fp8-native era's NVMe expert
-streaming (the 3.5 GB/s wall) is gone — the w4 resident set fits the
-host pool, so decode ran 122–173 t/s in the campaign arms and ~190 t/s
-on the fp8 shape (512-token streamed probe). The campaign also
-measured the int8-KV + spec-3 arm (136.0 t/s median at 44.5k depth,
-accept 0.7246).
-
-**The KV dtype law (measured 2026-10-11, applied at 4 slots 2026-10-13)**:
-`--kv-cache-dtype` takes ONLY `bf16|fp8` — one dtype for the whole cache, so
-llama.cpp's exact-K/quantized-V pair (what frank-zealot runs) has NO radiance
-equivalent; the rung under bf16 is fp8 on both halves. Measured per rank from
-the two boot ledgers: `kv_attn` (13 layers, 4-token blocks) pages 26.00 → 52.00
-KiB, while `kv_qsa_bkey` (13 layers) stays 3.25 KiB at BOTH dtypes (the QSA
-block key is an index, not attention state) — so a token costs 7.3125 KiB at fp8
-and 13.8125 KiB at bf16: **1.89×, not 2×**. Pool sizing must also pay the
-dtype-independent terms that live in the same pool (~110 MiB a sequence of
-recurrent state + 448 MiB of prefix checkpoints):
-`(vram_kv − 110·seqs − 448) MiB / rate` — bf16 at 6,912 gives 462,946 where the
-engine reported 462,752 (0.04 % page rounding); fp8 at 6,912 with four slots
-gives 843,566, i.e. the deployed capacity contract 4 × 200,000. **That is why
-the dtype is fp8: the pool must back `seqs × max-model-len` as a hard limit, and
-bf16 at four slots costs 11,679 MiB — the slab would fall to 17,441 MiB (−33 %),
-where fp8 leaves it at 22,208.** The cost is paid twice on this engine, and
-half-refunded: idle KV VRAM is also the expert cache's spillover, and the bigger
-pool *lends* 6.08 GiB to the slab where the 3,543 MiB fp8 pool lent 2.69 GiB.
-`--max-num-seqs` rides 4 × (1 + spec) = 12 fused-all-reduce rows, under the
-25-row bound where wht6 is bit-exact (the "seqs 2 cannot boot" law belongs to
-the retired tcclaviger fork's torch.compile, not radiance). Disk-tier sizing
-law: the engine forces ~9.6 GiB of disk-tier weight buffers + arena onto the
-weights side, so `weights + kv` is capped near 29.6 GiB/card; boot with the
-pair, never `--kv-cache-size-mib`.
-
-Shape notes carried from the fp8-native era and unchanged: wht6 gains,
-MNDT 2048 law (2560 collapses decode to 2.6–7.7 t/s), the 64 GiB disk
-prefix cache, and the rule that a prompt over `--max-model-len` is
-refused, never truncated. What changed: the fp8-native era's NVMe expert
-streaming (the 3.5 GB/s wall) is gone — the w4 resident set fits the
-host pool, so decode ran 122–173 t/s in the campaign arms and ~190 t/s
-on the fp8 shape (512-token streamed probe). The campaign also
-measured the int8-KV + spec-3 arm (136.0 t/s median at 44.5k depth,
-accept 0.7246).
-
-**The pinned-RAM ledger is why this is a root unit**: 2 × 44 GiB expert
-pools + the 47.7 GiB n-gram copy (`--ngram-placement ram` is pinned RAM
-the card reads) + 8 GiB prefix host ≈ **147 GiB** charged against
-`RLIMIT_MEMLOCK` — the TTM floor is set just above it.
-`ttm.pages_limit`/`pages_max` cap GPU-mappable pinned pages, and **the knob is
-runtime state whose default is half of RAM**: `scripts/ttm-preflight.sh` (sourced
-by the serve script) therefore RAISES it to `FRANK_ARCHON_TTM_TARGET_MIB=204800`
-before refusing, because the 2026-10-12 power failure reset it to 125,988 MiB
-and the preflight re-refused 6,919 times. A manual sysfs write in the stop
-window is a convenience, not the repair; kernel cmdline persistence
-(`ttm.pages_limit=52428800`) is the belt to it.
-
-**Contract facts** (source-verified): the HTTP listener binds AFTER the
-full load, so a bare `curl /health` gate is honest (`/health` == `/ping`,
-200 serving / 503 stopping); sampling params temperature…preserve_thinking
-accepted, **unknown params 400** (models.yml's extraBody set is fully
-inside it); `response_format` supported; `logprobs` REFUSED; reasoning in
-`reasoning_content` and tool calls in the qwen3.8 dialect via the auto
-chat format — no parser flags; vision native (the 27-layer Qwen-VL tower,
-`--mm-max-patches`); `/metrics` carries vLLM-compatible names +
-`radiance:*` families — the Dankclaw Prometheus scrape is re-added.
-
-Runbook: `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-iq4r.md`.
-Retired Swift1.5 w4dn8 era (payload on disk = rollback): `serverAppConfigs-docs/LLM/frank-archon-radiance-swift15-w4dn8.md`.
-Retired fp8-native era (payload deleted 2026-10-15, rebuildable): `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-native-fp8.md`.
-Retired FreeToken era: `serverAppConfigs-docs/LLM/frank-archon-freetoken-pr587.md`.
-Retired vLLM era: `serverAppConfigs-docs/LLM/dankserver-qwen38-fp8-expert-offload-tuning.md`.
-Retired GLM experiment: `serverAppConfigs-docs/LLM/frank-archon-glm53-flash-w4a16.md`.
+Runbook: `serverAppConfigs-docs/LLM/frank-medium-llamacpp-dflash2.md`.
+Retired runtimes: [[frank-medium-radiance-mxfp4]] (vLLM replicas, same day),
+[[frank-medium-rocmfpx]] (llama.cpp fork, earlier that day).

 ## Key Lessons Learned
 Durable operational lessons from the fleet's history. Full detail in the
@@ -658,40 +376,29 @@ linked runbooks.
  and the rest behind the chipset (usually not) — that asymmetry is what
  blocked frank-medium's TP=2. A one-card collective proves nothing: NCCL
  short-circuits at `world_size=1`.
- **That wall was physical, and it was fixed on 2026-09-20 by a board swap.**
-  Both paths that put two cards on CPU root ports were: an M.2→PCIe x4 riser
-  into a *CPU-attached* M.2 slot, or a board whose CPU lanes bifurcate to
-  x8/x8. dankserver took the second: **ASUS ProArt B850-Creator WiFi NEO**,
-  `PCIEX16_1` + `PCIEX16_2` at x8/x8 Gen5 on root ports `00:01.1` / `00:01.3`,
-  every bridge now `Routing+` and **both endpoints `ReqEn+`** — the exact
-  precondition the old test plan named. Bandwidth was never the constraint (a
-  27B TP=2 allreduce at batch 4 is ≈10 MB per token-step, ≈1.4 ms at Gen4 x4
-  and under 0.4 ms at Gen5 x8).
-  **Proven on the same day.** vLLM's R4D one-shot allreduce runs TP=2 here and
-  frank-medium serves on it; llama.cpp's RCCL path was built too
-  (`GGML_HIP_RCCL=ON`) and its tensor mode measured — real collective, slower
-  shape. Note the collective choice matters: TheRock's RCCL builds lack gfx1201
-  device code (`invalid device function`), which is why R4D is the path vLLM
-  uses at all. Evidence matrix and the measured three-arm verdict:
-  [[Dual-R9700-Cooperation]].
+- **The fix is physical — and cheap on this board.** Two paths put both cards
+  on CPU root ports, which restores the atomics routing and therefore TP=2: an
+  M.2→PCIe x4 riser into a *CPU-attached* M.2 slot (on dankserver's TUF
+  GAMING B650-E WIFI that is M.2_2, which is free — per ASUS's spec page;
+  `PCIEX16_2`, where card #2 sits today, is chipset and x1-mode), or a board
+  whose CPU x16 bifurcates to x8/x8. Bandwidth is not the constraint: a 27B
+  TP=2 allreduce at batch 4 is ≈10 MB per token-step, ≈1.4 ms at Gen4 x4.
+  RCCL's P2P `send`/`recv` fails on such a card too, so pipeline parallelism is
+  not an escape either. Full evidence matrix, the open rebuild hypothesis, and
+  the test plan: [[Dual-R9700-Cooperation]].
 - **When a GPU collective dies, read the runtime, not the framework.** The
  message that identified the cause came from `AMD_LOG_LEVEL=3`
  (`Pcie atomics not enabled, hostcall not supported` → `AQL dispatch
  failed!`), not from vLLM or RCCL. `AMD_LOG_LEVEL` costs one env var and
  prints the failing HIP call with its return code.
- **The software path that puts both cards on ONE model without a collective:
-  llama.cpp's layer split.** On the old board vLLM could not do it in any of its
-  parallelisms — TP needs an allreduce, PP needs the same p2p primitive, and both
-  died on the card that could not dispatch an RCCL kernel. `--split-mode
-  layer` in llama.cpp needs no
+- **The one software path that lets both cards serve ONE model: llama.cpp's
+  layer split.** vLLM cannot do it here in any of its parallelisms — TP needs
+  an allreduce, PP needs the same p2p primitive, and both die on the card that
+  cannot dispatch an RCCL kernel. `--split-mode layer` in llama.cpp needs no
  collective: layers are distributed in order and only the boundary activation
  crosses PCIe, once per forward pass. Measured here: 1991 t/s prefill /
  18.8 tok/s decode layer-split, against 272 / 26.3 tensor (butterfly
-  fallback).
-  This was what `frank-medium` ran until 2026-09-20, when the board swap made
-  collectives legal and radiance TP=2 beat it on every axis (95.8 vs 45.7 t/s
-  decode, 0.21 vs 0.72 s TTFT, 259 vs 72 t/s burst-4) — see
-  [[frank-medium-radiance-mxfp4]]; the llama shape is the rollback target
+  fallback). That is what `frank-medium` runs — see
  [[frank-medium-llamacpp-dflash2]].
 - **Layer split is also the cross-vendor answer — and `-ot` is what cannot be
  combined with it.** On Dankclaw (2026-09-16) a CUDA 3090 + Vulkan iGPU layer
@@ -730,10 +437,9 @@ linked runbooks.

 **ROCm / GPU**

- **Layer split was the deployed shape on both multi-device llama.cpp services,
-  for two different reasons.** On Dankserver it was the *only* way both R9700s
-  served one model (no collective could be dispatched on card #2) until the
-  2026-09-20 board swap; frank-medium now runs radiance TP=2 instead. On a
+- **Layer split is the deployed shape on both multi-device llama.cpp services,
+  for two different reasons.** On Dankserver it is the *only* way both R9700s
+  serve one model (no collective can be dispatched on card #2). On a
  RCCL-less fork build it is also the fast one: tensor parallel falls back to
  a butterfly allreduce and collapses prefill ~7x (measured 271.8 vs 1991 t/s).
  Pin the spec-decode drafter to one device — an unpinned draft under tensor
@@ -766,13 +472,9 @@ linked runbooks.
 - **QSA flash-attn assert:** `GGML_ASSERT(a-type == GGML_TYPE_F32)` on
  qwen4exp needs `scripts/patches/qwen4exp-qsa-f32-mask.patch` — but only on
  the agentionai FAST layer set; the kingjones STRIX set works unpatched.
- **GPU budget on Dankclaw is the GTT aperture (~114 GiB), not the
-  rocm-smi "dedicated" figure.** The Radeon 8060S (gfx1151) reports
-  116,732 MiB (`llama-server --list-devices`;
-  `gtt_total=122402963456` in `/sys/class/drm/card1/device/`). The older
-  "64 GiB, SVM-backed" lesson was already stale — the CIRU Orca predecessor
-  held 92.6 GiB of weights on the iGPU. `free`/`dmidecode` show the
-  CPU-side carve-out — intentional, do not change.
+- **GPU budget on Dankclaw is the rocm-smi figure** (64 GiB, SVM-backed).
+  `free`/`dmidecode` show the CPU-side carve-out — intentional, do not
+  change.

 **Load / crash diagnosis**

@@ -798,71 +500,19 @@ linked runbooks.
 - Swap resize ordering: create and `swapon` the replacement BEFORE `swapoff`
  of the old one, or live pages must land in RAM that `MemAvailable`
  overstates. Dankclaw swap (64 GiB at `/swap.img`, fstab-driven) protects
-  the co-tenants, not frank-dragoon — pinned weights don't swap, and paging
+  the co-tenants, not frank-large — pinned weights don't swap, and paging
  the KV pool is worse than the OOM it prevents.
 - Host swap state is invisible to `deploy.sh` (no repo file) — check
  `swapon --show` before reasoning about headroom.
- **A sysfs raise is a countdown to the next reboot.** `ttm.pages_limit` defaults
-  to half of RAM, so the manual raise to 200 GiB (2026-10-05) vanished with the
-  2026-10-12 23:17 POWER FAILURE on dankserver: the cap fell to 125,988 MiB,
-  frank-archon's pinned-ledger preflight (floor 150,000 MiB) refused the start,
-  and `Restart=always` re-ran that refusal **6,919 times in ~20 h** — a unit in
-  `activating (auto-restart)` that exits 1 in 50 ms with no container and no
-  engine log is a PREFLIGHT refusal, not an engine fault. Repo law now:
-  `scripts/ttm-preflight.sh` (sourced by `serve-frank-archon.sh`) raises the knob
-  to `FRANK_ARCHON_TTM_TARGET_MIB` itself, re-reads, and refuses by name only
-  after a write the kernel rejected. Never prescribe a manual sysfs write as the
-  recovery procedure for a service that can boot before a human reaches it.
- **Silent RAM corruption outranks every software theory.** frank-archon's
-  ~40k-token output corruption (2026-10-04/05, repetition/garbage in long
-  agent conversations) was marginal DDR5 at 4800 MT/s on four DIMMs, fixed
-  by 4600. Consumer non-ECC memory raises **no MCE** for a silent flip, and
-  a short in-band pattern check (60 s, 8 GiB of 246 GiB) is not a stability
-  proof — combined, those two instruments said "ruled out" while the RAM
-  was the cause. "4800 is the JEDEC floor on 5600-rated DIMMs" is a rating,
-  not a margin guarantee. When the fault is data-shaped (NaN states,
-  garbage tokens) and a software revert doesn't move it, price in the RAM
-  before the runtime — and remember a revert tested under the same marginal
-  hardware is itself confounded. See the runbook's 2026-10-05 section.

 **Runtime-specific guards**

- **Rootless podman cannot RAISE rlimits, and `--ulimit nofile=1048576`
-  dies at container create, not at runtime.** runc reports
-  `error setting rlimit type 7: operation not permitted` (type 7 =
-  RLIMIT_NOFILE) when the requested hard limit exceeds the host process's
-  hard limit — on Dankclaw that ceiling is 524288. Inherited-equal limits
-  are fine, so `memlock=-1:-1` works iff the unit grants
-  `LimitMEMLOCK=infinity` (systemd is privileged; the value flows through
-  podman to runc without any raise). Upstream halogen's own run lines pass
-  NO `--ulimit` at all — copy vendor run lines before adding flags
-  (measured 2026-10-05 on the frank-dragoon cutover).
 - **Kairic Edge** (if ever re-deployed): the pinned CK commit needs
  `third_party/composable_kernel/include/ck/config.h` generated manually
  (untracked; `git clean` removes it), and its greedy-argmax fastpath rejects
  non-greedy requests and reasoning budgets. Re-test chat before production.
 - **FastMTP sidecar**: build must be commit `4df29be4` + the HauhauCS patch;
  stock binaries fail the draft load with a tensor-shape mismatch.
- **A GGUF's custom tensor type picks the runtime — read the histogram before
-  promising a file to a loader.** `Qwen3.8-27B-Q8_0_ROCMFPX_AGENT.gguf` is
-  ftype 115 with 311 tensors of type 103 (`GGML_TYPE_Q8_0_ROCMFPX`); stock
-  llama.cpp and gufo refuse it at load, so ROCmFPX was not a preference but
-  the only door. Counting tensor types out of the GGUF KV section takes one
-  python read and settles a runtime argument in minutes. The build identity
-  matters as much as the fork: the 2026-08-25 ROCmFPX builds SIGSEGV in
-  `ggml_compute_forward_set_rows` on this same file, so
-  `scripts/build-rocmfpx.sh` pins commit `36e9acd` by SHA.
- **Speculative-decode flags move as a SET.** Handing the ROCmFPX fork
-  `--model-draft` with no `--spec-type` (the naive way to build a "no MTP"
-  bench arm) segfaulted at load, core dumped, no diagnostic (2026-10-02). A
-  baseline arm must strip `--model-draft` AND every `--spec-draft-*` AND
-  `--spec-type`, or it measures a crash instead of the absence of drafting.
- **An orphaned scratch server taxes the whole host.** A bench child left
-  alive by a client-side exception kept ~26 GiB of weights resident on a
-  121 GiB box, pushed `available` to 3 GiB, and every later rate was suspect.
-  Record the child pid and kill it in a `finally`, then prove `free` came back
-  before believing a number. Kill by pid — never `pkill -f llama-server`,
-  which also hits frank-zealot.

 **llama.cpp serving**

@@ -872,26 +522,19 @@ linked runbooks.
  the MAIN model's weights (`shares_model`), so there is no second copy of a
  12 GiB model in VRAM and no `-md` argument. The plain build has no MTP
  tensors at all, and pointing `--model-draft` at the file would load it twice.
- **What can be chained, what cannot, and what a chain costs on a hybrid.**
-  `--spec-type a,b` builds every enabled implementation and chains drafting
-  through them, in a fixed internal order (ngram types first, then the
-  drafters — CLI order is irrelevant). The gate is `ctx_dft`: **draftless**
-  types (the ngram family) are added unconditionally, while `draft-mtp`,
-  `draft-dflash`, `draft-dspark` and `draft-eagle3` all require a draft
-  CONTEXT. So a chain may hold one context-backed drafter plus any number of
-  ngram types — `draft-dflash,ngram-mod` is legal and measured (2.6x the
-  drafter alone on prompt-echo traffic, byte-identical to it on prose at the
-  fleet's 48/64 window) — but `draft-mtp,draft-dflash` dies at load: *"context
-  type MTP requested but model doesn't contain MTP layers"*, because MTP
-  builds its context against whatever model the draft context holds. Two
-  context-backed types cannot share one process, and MTP's head only loads
-  when MTP **is** the draft model. **A LEGAL chain can still lose on a
-  recurrent model:** `draft-mtp,ngram-mod` on frank-dragoon's qwen35 hybrid
-  measured −15 % prose / −7 % block-copy (2026-10-03) — adding the ngram layer
-  logs `recurrent state rollback is not compatible with 'ngram-mod' -
-  disabling rollback support`, and MTP verification depends on that rollback,
-  so acceptance drops on ALL traffic even where the matcher fires. Measure
-  chains per architecture, never by analogy.
+- **What can be chained, and what cannot.** `--spec-type a,b` builds every
+  enabled implementation and chains drafting through them, in a fixed internal
+  order (ngram types first, then the drafters — CLI order is irrelevant). The
+  gate is `ctx_dft`: **draftless** types (the ngram family) are added
+  unconditionally, while `draft-mtp`, `draft-dflash`, `draft-dspark` and
+  `draft-eagle3` all require a draft CONTEXT. So a chain may hold one
+  context-backed drafter plus any number of ngram types — `draft-dflash,ngram-mod`
+  is legal and measured (2.6x the drafter alone on prompt-echo traffic, byte-
+  identical to it on prose at the fleet's 48/64 window) — but
+  `draft-mtp,draft-dflash` dies at load: *"context type MTP requested but model
+  doesn't contain MTP layers"*, because MTP builds its context against whatever
+  model the draft context holds. Two context-backed types cannot share one
+  process, and MTP's head only loads when MTP **is** the draft model.
 - **A drafter's KV scales with the TARGET's context, and its window policy
  decides how much that costs.** The draft context is built with
  `cparams.n_ctx = llama_n_ctx(ctx_tgt)` (`common/speculative.cpp`) — there is
@@ -908,8 +551,7 @@ linked runbooks.
  trip moved the balance point FOUR layers (~4.3 GiB of headroom, 40:25 ->
  36:29), which is the practical size of the effect. See
  [[frank-medium-llamacpp-dflash2]].
- **`--ubatch-size` has an OPTIMUM on the 2x R9700 layer split, not a plateau —
-  and the curve is BACKEND-SPECIFIC, so never carry it across (next bullet). Its
+- **`--ubatch-size` has an OPTIMUM on this stack, not a plateau — and its
  compute buffers land about TWICE as heavy on the card that holds the output
  layers and the drafter.** Measured on frank-medium 2026-09-16 at the deployed
  shape (262144 over two slots, a 64k prefill measured at 64k depth,
@@ -927,19 +569,6 @@ linked runbooks.
  its 2020 MiB pp buffer here under the DSpark drafter, when ROCm1 had 0.08 GiB
  free. That was a CONTIGUITY failure, not a total-bytes one, and no totals
  model — the sweep's or the seam's — can see it.)
- **On the CUDA 3090 the same knob has NO interior optimum up to 2048, so
-  frank-zealot ships 4096/2048.** Measured 2026-10-05 by boot-pair A/B on the
-  live service: at 8,928 prompt tokens ubatch 1024 gives 3,972 / 4,077 t/s and
-  ubatch 2048 gives 4,207 / 4,212 — **+4.6 %** — for **616 MiB** (free 2,849 →
-  2,279). Decode did not move (91.9–93.0 vs 93.8–94.3, i.e. noise), and a
-  279-token prompt, which is below either ubatch, came back identical — that is
-  the mechanical proof the knob was the only variable, since a prompt shorter
-  than the ubatch cannot see it. The logical `--batch-size` was again free. And
-  the predecessor's "ubatch 2048 failed the scratch boot" was a shape
-  observation, not a law: the same file boots 2048 clean at 2 × 200,704. Bench
-  it by restarting the SERVICE through a transient `FRANK_ZEALOT_ENV_FILE`
-  drop-in, never a scratch port — one card holds one server. See
-  [[frank-zealot-llama-mimo-q6k-2x200704]].
 - **One `-ts` step is one LAYER, and a hybrid stack's layers are not the same
  size.** qwen35 is 16 x (3 Gated DeltaNet + 1 Gated Attention), so a step is
  worth ~0.43 GiB on a DeltaNet boundary and ~1.43 GiB on a full-attention one
@@ -956,52 +585,15 @@ linked runbooks.
  host-RAM hash table) and its window decides which traffic it can see: too
  short and it proposes on ordinary prose fragments, which costs verification
  without acceptance.
- **`--parallel` divides the pool, so MORE conversations cost WINDOW, and the
-  per-slot number is the contract — not `ctx-size`.** `n_ctx_slot =
-  CTX_SIZE / PARALLEL`, and llama.cpp refuses a prompt longer than the SLOT
-  (`400 exceed_context_size_error: request (184001 tokens) exceeds the
-  available context size (180224 tokens)`) even when the pool has room. So
-  frank-zealot's 2 → 3 reslice moved each conversation from the model's native
-  262,144 down to 180,224, and `models.yml` `contextWindow` had to follow or
-  the harness would discover the ceiling as a 400 on a long conversation. Side
-  effect worth knowing: the shorter slot made decode ~5 % FASTER (106.8 vs
-  100.4 tok/s) — less attention to scan and one fewer DeltaNet state resident.
-  The 2026-10-03 reslice went the other way (3 → 2 slots, 180,224 → 200,704,
-  pool 401,408) to fund unquantized f16 V, and `contextWindow` followed again;
-  decode landed 104.8 tok/s — the ~2 % off 106.8 is the exact-V tax. The same
-  day the freed space also bought the Q6_K rung (now 94.4 tok/s — the rung
-  itself is a further measured −10 %, weight-bandwidth, not slot geometry).
-  All moves measured; both slot directions cost or buy window, never pool.
-  See [[frank-zealot-llama-mimo-q6k-2x200704]].
- **Price a VRAM budget from two boots, never from a formula — and an mmproj
-  costs ~1.5x its file size.** The frank-zealot 3090 fit was solved from two
-  measurements: 2 × 262,144 with no projector = 20,190 MiB used (KV 12,800 ⇒
-  **non-KV 7,390**), 3 × 196,608 with the f16 projector = 22,972 used (KV
-  14,113 ⇒ **non-KV 8,859**). The difference is the vision tower: a 918 MB file
-  that bills ~1.4 GiB, because the encoder's activation and compute buffers
-  ride with it. Subtracting the two rows is exact; extrapolating weights+KV+
-  "a bit for buffers" is what leaves 1.1 GiB free when you meant 2.7. Then
-  solve `KV ≤ card − non-KV − headroom` and round to a multiple of
-  `PARALLEL × 4096`. Recorded in `scripts/frank-zealot.env` so the next resize
-  starts from measurement.
- **`images` and `image_url` are NOT interchangeable: only the content part
-  reaches the model.** `--mmproj` loads, `usage.prompt_tokens` rises, and the
-  model still invents an answer if the client used the legacy top-level
-  `images` field on `/v1/chat/completions` — frank-zealot answered "Brown." for
-  a solid-red PNG that way and "Red." through the OpenAI `image_url` part. The
-  failure is silent because a hallucinated color is a plausible answer. Probe
-  vision with a solid color and expect an exact word.
 - **`--jinja` is what `tools` needs.** On 2026-09-16 a subagent died with
  `500 tools param requires --jinja flag`, from the ik_llama.cpp runtime that
-  then served frank-dragoon: every tool-using agent on that endpoint was broken
+  then served frank-large: every tool-using agent on that endpoint was broken
  and the failure read like a model fault. Mainline llama.cpp 0.4.1 defaults
  `--jinja` on and the serve script pins it; halogen also accepts `tools` and
  returns `tool_calls`. Check tool support before routing a role at an endpoint.
 - **Quantized KV on CUDA needs `GGML_CUDA_FA_ALL_QUANTS=ON`** — the same
  option and the same ~12x prefill collapse described in the ROCm note above.
-  f16 KV needs nothing; frank-zealot ran f16 for that reason until
-  2026-09-17, when `build-cuda` was rebuilt with the option ON so the
-  endpoint could take q8_0 KV.
+  f16 KV needs nothing, which is why frank-small runs f16.
 - **llama-bench separates a LIST with `/` and SWEEP values with `,`.** Both
  `-dev` and `-ts` follow this: `-dev CUDA0,Vulkan1` is two *single-device*
  configurations, never one two-device run, and `-ts 0.85,0.15` is two sweep
@@ -1017,7 +609,7 @@ linked runbooks.
  raises on anything else — HTTP 500, not a clamp — so the harness's levels
  must be folded onto that set in `models.yml` (`compat.reasoningEffortMap`).
  A role whose level is unmapped fails on its FIRST request, and the failure
-  names Jinja, not the model: every subagent on `frank-zealot` died with
+  names Jinja, not the model: every subagent on `frank-small` died with
  `Unexpected reasoning effort high` until `high: xhigh` was added on
  2026-09-16. Halogen accepts the wider set, so the two entries legitimately
  differ.
@@ -1037,7 +629,7 @@ linked runbooks.
  times (`RuntimeError: No HIP GPUs are available`).
 - SearXNG outbound traffic must stay on the Gluetun tunnel; do not move its
  ports off the gluetun service.
- `amd_iommu=off` on Dankclaw (bought 13–16 % prefill for frank-dragoon,
+- `amd_iommu=off` on Dankclaw (bought 13–16 % prefill for frank-large,
  2026-09-11) permanently retired the XDNA2 NPU: the driver's SVA/PASID bind
  needs an enabled IOMMU (`/dev/accel/accel0` fails `err=-19`). Revert path
  in `serverAppConfigs-docs/LLM/dankclaw-iommu-translation-off.md`.
@@ -1091,9 +683,9 @@ Active:

 | Service | Runbook |
 |---------|---------|
-| frank-dragoon (flash-server 0.16.2, abliterated Swift1.5 v2 .hgn + MTP always-on, 2×262,144, vision ON, Dankclaw) | `serverAppConfigs-docs/LLM/frank-dragoon-flash-server-v2-swift15.md` |
-| frank-zealot (llama.cpp CUDA, Qwen3.5-9B-Uncensored Q6_K, 2×200,704 exact f16 KV MTP-off, vision ON, Dankclaw) | `serverAppConfigs-docs/LLM/frank-zealot-llama-qwen35-9b-q6k-2x200704.md` |
-| frank-archon (radiance StillDeadcode, publisher Qwen3.8-Flash-Next iq4r .rad, 2×R9700 TP=2, Dankserver) | `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-iq4r.md` |
+| frank-large (halogen-flash-server, Dankclaw) | `serverAppConfigs-docs/LLM/halogen-flash-server.md` |
+| frank-small (llama.cpp Qwen3.8-27B GSQ-RCO, Dankclaw) | `serverAppConfigs-docs/LLM/frank-small-qwen38-gsq-rco.md` |
+| frank-medium (llama.cpp + DFlash2, Dankserver) | `serverAppConfigs-docs/LLM/frank-medium-llamacpp-dflash2.md` |
 | Dankclaw kernel posture (`amd_iommu=off`) | `serverAppConfigs-docs/LLM/dankclaw-iommu-translation-off.md` |
 | Deployment flow + incidents | `serverAppConfigs-docs/LLM/deployment.md` |

@@ -1101,45 +693,17 @@ Retired (rollback targets and history):

 | Runtime | Host | Window | Runbook |
 |---------|------|--------|---------|
-| radiance Swift1.5-Qwen3.8-Flash-Next GPTQ w4dn8, 3×200,000 fp8-KV slab 25600 (`frank-archon`) | Dankserver | 2026-10-08 → 10-15 (rollback target — `.rad` on disk; owns the slab-slope ladder, KV dtype law, KLD campaign, and every shape law the iq4r swap carried verbatim) | `frank-archon-radiance-swift15-w4dn8.md` |
-| llama.cpp CUDA Gemma4-26B-A4B QAT Q4_K_M, 1×200,704 f16-K/q8_0-V MTP-off (`frank-zealot`) | Dankclaw | 2026-10-07 → 10-07 (same-day swap; rollback target — payload on disk; owns the `attention_k_eq_v` pair-billing KV law and the gemma4-assistant drafter-cost boots) | `frank-zealot-llama-gemma4-q4km-200704.md` |
-| ROCmFPX llama.cpp fork Qwen3.8-27B Uncensored Q6_0_ROCMFPX_AGENT + MTP (`frank-dragoon`) | Dankclaw | 2026-10-03 → 10-05 (rollback target, payload + fork build on disk) | `frank-dragoon-rocmfpx-q6agent-uncensored-mtp.md` |
-| tcclaviger vLLM fork Qwen3.8-Flash-Next-Uncensored FP8, TP=2, shape G (`frank-archon`) | Dankserver | 2026-09-29 → 10-05 (rollback target — tag `frank-archon-vllm-shapeG-20261003`; trio + env lore in the tag, image in rootless storage) | `dankserver-qwen38-fp8-expert-offload-tuning.md` |
-| FreeToken PR #587 ROCm, Qwen3.8-Flash-Next-Uncensored-FP8, ONE R9700 (`frank-archon`) | Dankserver | 2026-10-05 → 10-05 (rollback target — tag `frank-archon-freetoken-pr587-20261005`; trio + Dockerfile in the tag, image `localhost/frank-archon-freetoken:pr587-77a7201` and orcarouter payload on disk) | `frank-archon-freetoken-pr587.md` |
-| llama.cpp master MiMo-V2.6-Distill-Qwen-9B Q6_K 2×200,704 f16 KV (`frank-zealot`) | Dankclaw | 2026-10-03 → 10-05 (rollback target — payload on disk; owns the ubatch-2048 A/B; the Ornith swap of 10-05 was committed but never deployed, so this was the LIVE payload Swift replaced) | `frank-zealot-llama-mimo-q6k-2x200704.md` |
-| llama.cpp Ornith-1.5-9B Q8_0, ONE 262,144 f16 KV (`frank-zealot`) | Dankclaw | 2026-10-05 (committed 77decb5→380aafa, never deployed — superseded by Swift the same evening; payload on disk) | trail in `frank-zealot-llama-swift15-unc-iq3xxs-mtp-114688.md` |
-| llama.cpp CUDA Swift-1.5-27B Uncensored RCO IQ3_XXS-mtp, 2×114,688 draft-mtp q8_0 KV (`frank-zealot`) | Dankclaw | 2026-10-06 → 2026-10-07 (rollback target — payload on disk; owns the 3090 ubatch ladder A/B and the 34 KiB/token qwen35 KV law) | `frank-zealot-llama-swift15-unc-iq3xxs-mtp-114688.md` |
-| ROCmFPX llama.cpp fork Qwen3.8-27B Q8_0_ROCMFPX_AGENT + MTP (`frank-dragoon`) | Dankclaw | 2026-10-02 → 10-03 (rollback target, payload on disk) | `frank-dragoon-rocmfpx-q8agent-mtp.md` |
-| gufo v0.1.1 Qwen3.8-27B UD-Q8_K_XL/UD-Q4_K_XL + DFlash2 (`frank-dragoon`) | Dankclaw | 2026-09-28 → 10-01, again 10-01 → 10-02 (payloads removed from disk 2026-10-03; rollback = re-download) | `frank-dragoon-gufo-qwen38-27b.md` |
-| vLLM TheRock MiMo-V2.6-Distill-Qwen-9B BF16 + cross-model MTP (`frank-dragoon`) | Dankclaw | 2026-10-01 (same-day rollback to gufo) | `frank-dragoon-vllm-mimo-v26-bf16.md` |
-| llama.cpp master MiMo-V2.6-Distill-Qwen-9B Q6_K (`frank-zealot`) | Dankclaw | 2026-10-01 → 10-02 (the rung returned ACTIVE 2026-10-03 at the 2×200,704 shape — `frank-zealot-llama-mimo-q6k-2x200704.md`) | `frank-zealot-llama-mimo-q6k.md` |
-| llama.cpp master MiMo-V2.6-Distill-Qwen-9B Q5_K_M 2×200,704 f16 KV (`frank-zealot`) | Dankclaw | 2026-10-02 → 10-03 (rollback target — one `MODEL_FILE` line, buys back 875 MiB + the −10 % rung tax; owns the boot-pair table) | `frank-zealot-llama-mimo-q5km.md` |
-| SGLang MiMo-V2.6 INT8-W8A16-AutoRound (`frank-zealot`) | Dankclaw | 2026-10-01 (same-day swap to the GGUF path) | `frank-zealot-sglang-mimo-v26.md` |
-|tcclaviger vLLM GLM-5.3-Flash W4A16 int4, +/- DFlash2 drafter (`frank-archon`)|Dankserver|2026-09-30 → 10-01|`frank-archon-glm53-flash-w4a16.md`|
-| llama.cpp b11030 Qwen3.8-27B UD-Q8_K_XL + DFlash2 (`frank-dragoon`) | Dankclaw | 2026-09-21 → 09-28 | `frank-dragoon-unsloth-qwen38-27b-q8xl.md` |
-| R9V radiance-vLLM Qwen3.8-Flash-Next-Uncensored IQ4_XS (`frank-archon`) | Dankserver | 2026-09-27 (same-day swap to Q8_0) | `frank-archon-r9v-radiance-qwen38-uncensored.md` |
-| llama.cpp b11030 Qwen3.8-Flash-Next Q8_0 + shared MTP (`frank-archon`) | Dankserver | 2026-09-26 → 09-27 | `frank-archon-llamacpp-qwen38-flash-next-q8.md` |
-| ik_llama.cpp Qwen3.8-Flash-Next-Uncensored i1-Q4_K_M (`frank-dragoon`) | Dankclaw | 2026-09-15 → 09-16 | `frank-dragoon-ik-uncensored.md` |
-| vllm-radiance TP=2 MXFP4 + DFlash2 (`frank-medium`) | Dankserver | 2026-09-20 → 09-26 | `frank-medium-radiance-mxfp4.md` |
-| Lucebox DS4.1 DeepSeek-V4.1-Flash ROCmFP23 (`frank-archon`) | Dankserver | 2026-09-26 (same-day swap) | `frank-archon-lucebox-ds4.md` |
 | kingjones STRIX Qwen3.8-Flash-Next ROCmFP4 | Dankclaw | 2026-08-30 → 09-11 | `kingjones-strix-rocmfp4.md` |
-| halogen-flash-server Qwen3.8-Flash-Next w4b (`frank-dragoon`) | Dankclaw | 2026-09-16 → 09-19 | `halogen-flash-server.md` |
-| CIRU v4.4.1 Orca Qwen3.8-Flash (`frank-dragoon`) | Dankclaw | 2026-09-19 → 09-21 | `frank-dragoon-ciru-orca.md` |
-| unsloth llama.cpp b11030 Qwen3.8-Flash-Next UD-IQ4_XS (`frank-dragoon`) | Dankclaw | 2026-09-21 (same-day swap) | `frank-dragoon-unsloth-qwen38-flash-next.md` |
-| Kairic Edge Qwen3.8-27B IU4 W4A4 (`frank-dragoon`) | Dankclaw | 2026-09-21 (same-day swap) | `frank-dragoon-kairic-edge-qwen38-27b.md` |
-| ISTA-DASLab Qwen3.8-27B-GSQ-RCO IQ3_S (`frank-zealot`) | Dankclaw | 2026-09-16 → 09-17 | `frank-zealot-qwen38-gsq-rco.md` |
-| vLLM Gemma4-12B w4a16 (`frank-zealot`) | Dankclaw | 2026-09-19 (same-day revert) | `frank-zealot-vllm-gemma4.md` |
-| llama.cpp Gemma4-12B QAT Q4_K_M (`frank-zealot`) | Dankclaw | 2026-09-17 → 10-01 | `frank-zealot-gemma4-12b.md` |
+| ik_llama.cpp Qwen3.8-Flash-Next-Uncensored i1-Q4_K_M (`frank-large`) | Dankclaw | 2026-09-15 → 09-16 | `frank-large-ik-uncensored.md` |
 | agentionai ROCmFP4-FAST imatrix | Dankclaw | 2026-08-29 → 08-30 | `agentionai-fast-imatrix.md` |
 | eemin Qwen3.8-27B ROCmI4 W4A4 MTP | Dankclaw | 2026-08-18 → 08-25 | `eemin-rocmi4-mtp.md` |
 | Kairic Edge IU4 | Dankclaw | 2026-08-22 (same-day revert) | `kairic-edge.md` |
 | CIRU ActiveFPX v3 / PromptForge | Dankclaw | through 2026-08-22 | `ciru-activefpx-promptforge.md` |
 | DFlash2 Vulkan | Dankclaw | 2026-08-21 (same-day revert) | `dflash2-large-vulkan.md` |
 | FastFlowLM NPU (`frank-npu`) | Dankclaw | twice, retired 2026-09-11 | `frank-npu.md`, `FastFlowLM NPU Inference.md` |
-| FreeToken (official + Huihui FP8, `frank-zealot`) | Dankserver | 2026-09-02 → 09-15 | `freetoken-frank-small.md` |
+| FreeToken (official + Huihui FP8, `frank-small`) | Dankserver | 2026-09-02 → 09-15 | `freetoken-frank-small.md` |
 | FastMTP patched llama.cpp | Dankserver | retired 2026-08-18 | `qwen3.8-spec-matrix.md` |
 | ik_llama.cpp Ornith CRACK | Dankserver | retired 2026-09-02 | `ikllama-ornith-dankserver.md` |
-| llama.cpp layer split + DFlash2 (`frank-medium`) | Dankserver | 2026-09-16 → 09-20 | `frank-medium-llamacpp-dflash2.md` |

 Retired runbooks are under `serverAppConfigs-docs/LLM/`. Retired scripts live
 in `old/` and `.AGENTTRASH/`.
@@ -13,7 +13,7 @@ one deploy script.
 | Host | User | IP | Podman stack | LLM service | LLM port |
 |------|------|----|--------------|-------------|----------|
 | dankserver | dank | 192.168.0.235 | media and library | frank-medium (ROCmFPX llama.cpp, Qwen3.8-27B AGENT) | 7770 |
-| dankclaw | dank | 192.168.0.143 | AI, search, development, observability | frank-dragoon (gufo, Qwen3.8-27B UD-Q8_K_XL) | 7770 |
+| dankclaw | dank | 192.168.0.143 | AI, search, development, observability | frank-large (CIRU ROCmFPX, Qwen3.8-27B) | 7770 |

 ## Active Services

@@ -30,7 +30,7 @@ one deploy script.
 | Gitea | dankclaw | gitea.dankclaw.local | 3001 |
 | Grafana | dankclaw | grafana.dankclaw.local | 3002 |
 | Prometheus | dankclaw | prometheus.dankclaw.local | 9090 |
-| frank-dragoon | dankclaw | — (bare endpoint) | 7770 |
+| frank-large | dankclaw | — (bare endpoint) | 7770 |

 ## Structure

@@ -1,26 +0,0 @@
-#!/usr/bin/env bash
-# autoresearch.sh — canonical frank-archon benchmark entry point (dev box).
-#
-# The service runs on dankserver (192.168.0.235:7770), the two R9700s live
-# there, and the benchmark must own those cards, so the whole stop -> boot
-# scratch -> bench -> restore sequence runs ON dankserver (see
-# scripts/autoresearch-frank-archon.sh). This wrapper:
-#   1. copies the candidate config (the repo's scripts/frank-archon.env, the
-#      file the autoresearch loop edits) and the bench script to dankserver,
-#   2. runs the bench over ssh, relaying its stdout (the METRIC lines) and
-#      exit code back here verbatim.
-# It deliberately does NOT push to origin: the scp dirties dankserver's
-# working tree, and the loop's uncommitted candidate config must not be
-# pushed. Only this file and scripts/autoresearch-frank-archon.sh are
-# committed; the candidate env rides over ssh each run.
-set -uo pipefail
-DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REMOTE=dankserver
-REMOTE_REPO=/home/dank/serverAppConfigs
-
-scp -q "$DIR/scripts/frank-archon.env" \
-    "$REMOTE:$REMOTE_REPO/scripts/frank-archon.env" || { echo "scp env failed" >&2; exit 1; }
-scp -q "$DIR/scripts/autoresearch-frank-archon.sh" \
-    "$REMOTE:$REMOTE_REPO/scripts/autoresearch-frank-archon.sh" || { echo "scp script failed" >&2; exit 1; }
-
-ssh "$REMOTE" "bash $REMOTE_REPO/scripts/autoresearch-frank-archon.sh $REMOTE_REPO/scripts/frank-archon.env"
@@ -4,11 +4,6 @@
 # SearXNG
 SEARXNG_SECRET=changeme
 SEARXNG_BASE_URL=http://search.franksdank.cloud/
-# Kagi search API key (https://help.kagi.com/kagi/api/). Powers the paid
-# `kagi` engine in shared/searxng/settings.yml; deploy-remote.sh bakes it into
-# the live settings.yml via scripts/searxng-render-settings.py. The quadlet
-# does NOT pass it into the container environment.
-KAGI_API_KEY=changeme

 # Gluetun VPN (see https://github.com/qdm12/gluetun-wiki)
 # Single-peer WireGuard model. Fill from your provider's WireGuard config.
@@ -309,10 +309,6 @@ http://:8017 {
 	@home host www.franksdank.cloud
 	handle @home {
 		root * /srv/homepage
-		# Deploys overwrite /srv/homepage in place; without revalidation a
-		# browser keeps serving the pre-deploy CSS/JS/HTML. no-cache forces an
-		# ETag round-trip on every load (a cheap 304 when unchanged).
-		header Cache-Control "no-cache"
 		# RBAC (2026-09-01): /admin requires membership in the homepage-admins
 		# authentik group. In proxy-provider mode the outpost injects
 		# X-Authentik-Groups on its upstream request to this listener and strips
@@ -327,26 +323,7 @@ http://:8017 {
 			}
 			respond "Forbidden: homepage admins only" 403
 		}
-		# User docs page (static). Anchors (#models etc.) are client-side,
-		# so both /docs and /docs/ map onto the single docs.html.
-		handle /docs {
-			try_files /docs.html
-			file_server
-		}
-		handle /docs/ {
-			try_files /docs.html
-			file_server
-		}
-		# /whoami echoes the outpost-injected identity headers so the page
-		# can gate the admin button client-side (the /admin* 403 above stays
-		# the real gate; this only decides what is shown). The outpost strips
-		# client-supplied X-Authentik-* before injecting, so this is spoof-proof.
-		handle /whoami {
-			templates
-			header Content-Type application/json
-			respond "{\"user\":\"{header.X-Authentik-Username}\",\"groups\":\"{header.X-Authentik-Groups}\"}"
-		}
-		@data path /services.json /status.json /app.js /style.css /deployed.js /img/* /sfx/*
+		@data path /services.json /status.json /app.js /style.css /deployed.js
 		handle @data {
 			file_server
 		}
@@ -21,20 +21,4 @@ RUN mkdir -p /opt/ComfyUI/models /opt/ComfyUI/input /opt/ComfyUI/output /opt/Com
 RUN grep -viE '^(torch|torchvision|torchaudio)([^a-z]|$)' requirements.txt > /tmp/req-notorch.txt \
    && pip install --no-cache-dir -r /tmp/req-notorch.txt

-# The city96/ComfyUI-GGUF custom node (loaded from the host's custom_nodes
-# volume) needs the gguf library to decode GGUF-quantized diffusion models.
-# sentencepiece and protobuf are its optional tokenizer deps. Baking them into
-# the image keeps the dependency across container recreations — the node itself
-# lives in the host volume, which persists, but the Python env does not.
-RUN pip install --no-cache-dir "gguf>=0.13.0" sentencepiece protobuf
-
-# Bake the qwen_image21 patch script into the image. It is run by the
-# startup wrapper before ComfyUI starts, so the patch survives container
-COPY dankclaw/apply_qwen21_patch.py /opt/ComfyUI/apply_qwen21_patch.py
-COPY dankclaw/comfyui-start.sh /opt/ComfyUI/comfyui-start.sh
-RUN chmod +x /opt/ComfyUI/comfyui-start.sh
-
-CMD ["/opt/ComfyUI/comfyui-start.sh"]
 EXPOSE 8188
-# v2: VAE 4D-to-5D latent expansion for video VAEs (qwen_image21)
-# v3: fix in_channels to use shape[0] (latent input dim) not shape[1] (hidden dim)
@@ -1,52 +0,0 @@
-import os
-
-# Apply qwen_image21 detection patch
-f = "/opt/ComfyUI/comfy/model_detection.py"
-with open(f) as fh:
-    code = fh.read()
-if "qwen_image21" not in code:
-    qwen21_check = (
-        "    if '{}txt_in.text_norm.weight'.format(key_prefix) in state_dict_keys:  # Qwen Image 2.1\n"
-        "        dit_config = {}\n"
-        '        dit_config["image_model"] = "qwen_image21"\n'
-        "        dit_config[\"in_channels\"] = state_dict['{}img_in.weight'.format(key_prefix)].shape[0]\n"
-        "        dit_config[\"num_layers\"] = count_blocks(state_dict_keys, '{}transformer_blocks.'.format(key_prefix) + '{}.')\n"
-        "        return dit_config\n"
-    )
-    anchor = "    if '{}txt_norm.weight'.format(key_prefix) in state_dict_keys:  # Qwen Image"
-    code = code.replace(anchor, qwen21_check + "\n" + anchor)
-    with open(f, "w") as fh:
-        fh.write(code)
-    print("Applied qwen_image21 detection patch")
-
-# Add qwen_image21 to GGUF node arch list
-loader = "/opt/ComfyUI/custom_nodes/ComfyUI-GGUF/loader.py"
-if os.path.exists(loader):
-    with open(loader) as fh:
-        lcode = fh.read()
-    if '"qwen_image21"' not in lcode:
-        old = '"lumina2", "qwen_image"}'
-        new = '"lumina2", "qwen_image", "qwen_image21"}'
-        if old in lcode:
-            lcode = lcode.replace(old, new)
-            with open(loader, "w") as fh:
-                fh.write(lcode)
-            print("Applied qwen_image21 arch list patch")
-
-# Patch VAE decode to expand 4D latents to 5D for video VAEs (latent_dim=3)
-sd = "/opt/ComfyUI/comfy/sd.py"
-with open(sd) as fh:
-    sdc = fh.read()
-if "self.latent_dim == 3 and samples_in.ndim == 4" not in sdc:
-    anchor = "        if self.latent_dim == 2 and samples_in.ndim == 5:\n            samples_in = samples_in[:, :, 0]"
-    replacement = (
-        "        if self.latent_dim == 2 and samples_in.ndim == 5:\n"
-        "            samples_in = samples_in[:, :, 0]\n"
-        "        elif self.latent_dim == 3 and samples_in.ndim == 4:\n"
-        "            samples_in = samples_in.unsqueeze(2)"
-    )
-    if anchor in sdc:
-        sdc = sdc.replace(anchor, replacement)
-        with open(sd, "w") as fh:
-            fh.write(sdc)
-        print("Applied VAE 4D-to-5D latent expansion patch")
@@ -20,10 +20,10 @@ Wants=authentik-server.service
 [Container]
 ContainerName=authentik-outpost-ldap
 Network=dankclaw_default
-# Image=ghcr.io/goauthentik/ldap:2026.8.3 (amd64 digest; podman 5.7.0 refuses
+# Image=ghcr.io/goauthentik/ldap:2026.8.0 (amd64 digest; podman 5.7.0 refuses
 # the tag's nested manifest list, so pin the single-platform digest).
 EnvironmentFile=/home/dank/serverAppConfigs/dankclaw/.env
-Image=ghcr.io/goauthentik/ldap@sha256:2e7b259eb8c37faac916946ddf48ec681ee9d3a9f724fe8521bf161973f13cf9
+Image=ghcr.io/goauthentik/ldap@sha256:fa33bc8f522113830e1662f4c034352f9eb08e0a7d3da2ddadad9a4b33b4cbf4
 Environment=AUTHENTIK_HOST=https://auth.franksdank.cloud
 Environment=AUTHENTIK_INSECURE=false
 Environment=AUTHENTIK_TOKEN=${AUTHENTIK_LDAP_OUTPOST_TOKEN}
@@ -20,7 +20,7 @@ Wants=authentik-server.service

 [Container]
 ContainerName=authentik-outpost
-Image=ghcr.io/goauthentik/server:2026.8.3
+Image=ghcr.io/goauthentik/server:2026.8.0
 Exec=worker
 Network=dankclaw_default
 EnvironmentFile=/home/dank/serverAppConfigs/dankclaw/.env
@@ -19,7 +19,7 @@ Wants=authentik-postgres.service

 [Container]
 ContainerName=authentik-server
-Image=ghcr.io/goauthentik/server:2026.8.3
+Image=ghcr.io/goauthentik/server:2026.8.0
 Exec=server
 Network=dankclaw_default
 EnvironmentFile=/home/dank/serverAppConfigs/dankclaw/.env
@@ -16,7 +16,7 @@ Wants=authentik-server.service

 [Container]
 ContainerName=authentik-worker
-Image=ghcr.io/goauthentik/server:2026.8.3
+Image=ghcr.io/goauthentik/server:2026.8.0
 Exec=worker
 Network=dankclaw_default
 EnvironmentFile=/home/dank/serverAppConfigs/dankclaw/.env
@@ -1,4 +0,0 @@
-#!/bin/bash
-# Apply qwen_image21 patches before starting ComfyUI
-python3 /opt/ComfyUI/apply_qwen21_patch.py 2>/dev/null
-exec python main.py --listen 0.0.0.0 --port 8188
@@ -21,13 +21,11 @@
 # user-unit spawn — which carries no supplementary groups — can still open them.
 # Both halves are asserted by tests/comfyui_rocm.bats.
 #
-# EXPOSURE. LAN-reachable, no auth. ComfyUI has no authentication and executes
-# arbitrary node graphs. It is internal-only (no public vhost, no guard chain);
-# it is reached on the LAN via the Pi-hole DNS record
-# (comfyui.franksdank.cloud -> 192.168.0.143, in dankclaw/pihole/addn-hosts),
-# which resolves to this host's IP — so the bind is widened from loopback to
-# 0.0.0.0:8188. The homepage admin card links to that URL and probes
-# 127.0.0.1:8188.
+# EXPOSURE. Loopback only. ComfyUI has no authentication and executes arbitrary
+# node graphs, and it has no Caddy vhost, so the repository's rule applies:
+# an unguarded service is internal-only. The homepage status card probes
+# 127.0.0.1:8188, which this satisfies. To reach the UI from another machine,
+# guard it behind the auth chain and give it a vhost — do not widen the bind.
 #
 # DATA. Models, input, output and custom_nodes live under
 # /home/dank/comfyui-data (host state, not in the repo).
@@ -41,7 +39,7 @@ ContainerName=comfyui
 Image=localhost/comfyui-rocm:gfx1151
 Pull=never
 Network=dankclaw_default
-PublishPort=0.0.0.0:8188:8188
+PublishPort=127.0.0.1:8188:8188
 AddDevice=/dev/kfd
 AddDevice=/dev/dri
 GroupAdd=keep-groups
@@ -50,7 +48,7 @@ Volume=/home/dank/comfyui-data/input:/opt/ComfyUI/input
 Volume=/home/dank/comfyui-data/output:/opt/ComfyUI/output
 Volume=/home/dank/comfyui-data/custom_nodes:/opt/ComfyUI/custom_nodes
 Volume=/home/dank/serverAppConfigs/dankclaw/comfyui/comfyui-healthcheck.py:/usr/local/bin/comfyui-healthcheck.py:ro
-Exec=/opt/ComfyUI/comfyui-start.sh
+Exec=python main.py --listen 0.0.0.0 --port 8188
 # The probe lives in a file because the podman 5.x v1 generator splits
 # HealthCmd on spaces into an argv array; an inline `python3 -c "..."` becomes
 # a puzzle of quoting that fails silently.
@@ -1,64 +0,0 @@
-{
-  "3": {
-    "class_type": "CLIPTextEncode",
-    "_meta": { "title": "Positive prompt" },
-    "inputs": {
-      "text": "A detailed illustration of a 1930s Soviet industrial design bureau at night: a well-measured engineer at a drafting table, a warm desk lamp, rolled blueprints, gears and calipers on the desk, deep red and cream palette, gouache painterly style, intricate mechanical detail, soft shadows",
-      "clip": [ "6", 0 ]
-    }
-  },
-  "4": {
-    "class_type": "CLIPTextEncode",
-    "_meta": { "title": "Negative prompt" },
-    "inputs": {
-      "text": "lowres, blurry, deformed, extra limbs, watermark, signature, jpeg artifacts",
-      "clip": [ "6", 0 ]
-    }
-  },
-  "5": {
-    "class_type": "UNETLoader",
-    "_meta": { "title": "Qwen Image 2.1 (int8)" },
-    "inputs": { "unet_name": "qwen_image_2.1_int8_convrot.safetensors", "weight_dtype": "default" }
-  },
-  "6": {
-    "class_type": "CLIPLoader",
-    "_meta": { "title": "Qwen3-VL 8B text encoder (w4a8)" },
-    "inputs": { "clip_name": "qwen3vl_8b_w4a8.safetensors", "type": "qwen_image" }
-  },
-  "7": {
-    "class_type": "VAELoader",
-    "_meta": { "title": "VAE" },
-    "inputs": { "vae_name": "qwen_image_2.1_vae_bf16.safetensors" }
-  },
-  "8": {
-    "class_type": "EmptySD3LatentImage",
-    "_meta": { "title": "Empty Latent 1024x1024" },
-    "inputs": { "width": 1024, "height": 1024, "batch_size": 1 }
-  },
-  "9": {
-    "class_type": "KSampler",
-    "_meta": { "title": "KSampler" },
-    "inputs": {
-      "model": [ "5", 0 ],
-      "seed": 1930,
-      "steps": 20,
-      "cfg": 1.0,
-      "sampler_name": "euler",
-      "scheduler": "simple",
-      "positive": [ "3", 0 ],
-      "negative": [ "4", 0 ],
-      "latent_image": [ "8", 0 ],
-      "denoise": 1.0
-    }
-  },
-  "10": {
-    "class_type": "VAEDecode",
-    "_meta": { "title": "VAE Decode" },
-    "inputs": { "samples": [ "9", 0 ], "vae": [ "7", 0 ] }
-  },
-  "11": {
-    "class_type": "SaveImage",
-    "_meta": { "title": "Save Image (art)" },
-    "inputs": { "filename_prefix": "qwen21-art", "images": [ "10", 0 ] }
-  }
-}
@@ -1,64 +0,0 @@
-{
-  "3": {
-    "class_type": "CLIPTextEncode",
-    "_meta": { "title": "Positive prompt (legible text)" },
-    "inputs": {
-      "text": "Clean minimalist movie-poster design, dark charcoal background with a subtle vintage grain. Centered large bold white sans-serif text reading \"SOLIDARITY OF THE SOVIET COMPUTER SYSTEMS\", perfectly legible, crisp letterforms, even letter spacing. Below it, a smaller line of yellow text reading \"DANKCLAW DANKSERVER EST 2026\", equally legible. Flat graphic design, high contrast, generous margins, no other words, no watermark",
-      "clip": [ "6", 0 ]
-    }
-  },
-  "4": {
-    "class_type": "CLIPTextEncode",
-    "_meta": { "title": "Negative prompt" },
-    "inputs": {
-      "text": "blurry, illegible, misspelled, warped letters, extra text, watermark, signature, lowres, jpeg artifacts",
-      "clip": [ "6", 0 ]
-    }
-  },
-  "5": {
-    "class_type": "UNETLoader",
-    "_meta": { "title": "Qwen Image 2.1 (int8)" },
-    "inputs": { "unet_name": "qwen_image_2.1_int8_convrot.safetensors", "weight_dtype": "default" }
-  },
-  "6": {
-    "class_type": "CLIPLoader",
-    "_meta": { "title": "Qwen3-VL 8B text encoder (w4a8)" },
-    "inputs": { "clip_name": "qwen3vl_8b_w4a8.safetensors", "type": "qwen_image" }
-  },
-  "7": {
-    "class_type": "VAELoader",
-    "_meta": { "title": "VAE" },
-    "inputs": { "vae_name": "qwen_image_2.1_vae_bf16.safetensors" }
-  },
-  "8": {
-    "class_type": "EmptySD3LatentImage",
-    "_meta": { "title": "Empty Latent 832x1216 poster" },
-    "inputs": { "width": 832, "height": 1216, "batch_size": 1 }
-  },
-  "9": {
-    "class_type": "KSampler",
-    "_meta": { "title": "KSampler" },
-    "inputs": {
-      "model": [ "5", 0 ],
-      "seed": 2026,
-      "steps": 25,
-      "cfg": 1.0,
-      "sampler_name": "euler",
-      "scheduler": "simple",
-      "positive": [ "3", 0 ],
-      "negative": [ "4", 0 ],
-      "latent_image": [ "8", 0 ],
-      "denoise": 1.0
-    }
-  },
-  "10": {
-    "class_type": "VAEDecode",
-    "_meta": { "title": "VAE Decode" },
-    "inputs": { "samples": [ "9", 0 ], "vae": [ "7", 0 ] }
-  },
-  "11": {
-    "class_type": "SaveImage",
-    "_meta": { "title": "Save Image (text poster)" },
-    "inputs": { "filename_prefix": "qwen21-text", "images": [ "10", 0 ] }
-  }
-}
@@ -0,0 +1,219 @@
+# Quadlet unit: frank-large (rootless, boot-persistent).
+#
+# Install path on dankclaw: ~/.config/containers/systemd/frank-large.container
+# Unit name: frank-large.service (container name: frank-large)
+#
+# The large inference service. The halogen-flash-server runtime (since
+# 2026-09-11, restored 2026-09-16 after a two-day ik_llama.cpp hybrid
+# interlude) serving peonist-ai/halogen-qwen3.8-flash-next (Qwen3.8-Flash-Next,
+# w4b .hgn checkpoint + quality overlay sidecar). It replaced the llama.cpp /
+# kingjones30-ROCmFPX STRIX deployment because the engine is ~4x faster on
+# prefill (the dominant cost of any real prompt) on this exact SKU. The RTX
+# 3090 it briefly shared with frank-large is now frank-small's card.
+#
+# SHAPE. The image runs both halves in one container: the engine on container
+# loopback (:8730, UNAUTHENTICATED — never publish it) and the OpenAI
+# front-end on :8731, published here as host 7770 so the fleet's clients,
+# services.json probe and docs keep the port they have always used. Same for
+# HALOGEN_MODEL_ID=frank-large: it is the id at /v1/models, in /health and in
+# every response, so no client had to be renamed. Halogen never rejects a
+# request for naming a different model, it just serves it.
+#
+# DEVICES. gfx1151 through the amdgpu/KFD stack: /dev/kfd plus the DRM render
+# node. Both are 0666 on this host, so the rootless user namespace can open
+# them (id dank is also in render/video). seccomp=unconfined and --ipc=host are
+# the image's documented requirements; memlock must be unlimited.
+#
+# DO NOT name an environment variable TEMP, HOST or GPU_MAX_HEAP_SIZE: the HIP
+# runtime reads bare TEMP for its JIT cache path (2026-08-13 incident).
+#
+# MEMORY. Weights are pinned (HALOGEN_FLASH_PIN_TRUNK default 1) — that is the
+# configuration the published decode numbers were measured with, and `free`,
+# MemAvailable and every monitor built on them will overstate free memory by
+# the size of the model (~68 GiB) because the kernel counts the locked weights
+# as reclaimable page cache. Halogen prints the corrected figure at startup.
+# The pinned trunk means this container holds most of the host; a co-tenant
+# that then takes the remainder can stall both for minutes at full CPU with no
+# disk activity and no output. That is documented behaviour, not a crash, and
+# the escape hatch is HALOGEN_FLASH_PIN_TRUNK=0 (at several times the decode
+# cost). Sizing is chosen for a SHARED 121 GiB host, and HALOGEN_KV_POOL_FIT
+# stays on as the safety net: if the machine refuses the configured pool the
+# engine lowers it itself and prints what it settled on. Read that ledger on
+# every restart — it is the ground truth for sizing, not this comment.
+#
+# POOL RETUNED 2026-09-16: 400,384 positions -- exactly two 200,192-token
+# conversations -- beside a per-conversation ceiling of 200,192 and two slots.
+# It replaces the 401,408 the 2026-09-13 trim left behind, which held one full
+# native-262k conversation beside a ~139k one, or three at 131k.
+#
+# MEASURED AT 401,408 (2026-09-13 deploy ledger): 68.0 weights + 11.0 KV +
+# 21.0 working = 100.0 GiB held, 9.1 GiB / 1396 contiguous 2 MiB blocks left,
+# engine need printed ~31.5 against the modelled ~33.4, and NO stall-warning
+# NOTE. Fit-check budget here: 121.2 - 67.7 - 20 = 33.5. That boot is the
+# baseline the 09-16 retune is measured against: the vision tower (1.97 GiB)
+# and roughly 4.2 GiB of arena come back to the host, which is what pays for
+# the co-tenant below.
+#
+# CO-TENANT since 2026-09-16: this host also serves frank-small on the RTX
+# 3090 (llama.cpp, ~12.2 GiB of weights that load through the page cache and
+# then live in VRAM, plus a CUDA context). It is the first real co-tenant this
+# service has had, which is why the arena was halved and the reserve raised.
+#
+# BOOT NOTE: on the first request after a (re)start the engine can go silent
+# for ~45-60 s ("has not answered PING") while it first-touches the freshly
+# reserved pool; /health reads engine_unresponsive during it and recovers by
+# itself. The quadlet health check's HealthStartPeriod=300s covers it; do not
+# restart the unit over it.
+#
+# WEIGHTS. HALOGEN_DOWNLOAD fetches the whole weights repo on FIRST START ONLY
+# (the entrypoint checks whether the checkpoint is absent) into the bind mount
+# below, which must therefore be read-WRITE. huggingface_hub resumes partial
+# files natively, and the quadlet runs the container with --replace --rm, so a
+# restart mid-fetch continues rather than starting over. Roughly 127 GB: the
+# 115.55 GiB checkpoint, the 2.31 GiB quality overlay, the 0.84 GiB vision
+# tower and the tokenizer. The repo is public and ungated, so no token is
+# needed; later starts open no outbound connections at all.
+#
+# VISION. Deliberately NOT set since 2026-09-16. The tower is a 1.97 GiB
+# charge against the same device budget as the pool and the arena, and the
+# fleet's image path moved to frank-small (llama.cpp on the RTX 3090, loaded
+# with --mmproj mmproj-Qwen3.8-27B-BF16). This server refuses image content
+# parts, and models.yml declares frank-large text-only to match.
+#
+# CLIENT CONTRACT (see serverAppConfigs-docs/LLM/halogen-flash-server.md).
+# There are no server-side sampler defaults: a request that sends no
+# temperature decodes GREEDY. The per-request budget defaults to 8,192 tokens
+# and REASONING COUNTS AGAINST IT, so a budget that runs out mid-thought
+# returns finish_reason "length" with empty content and the partial reasoning
+# in reasoning_content. The cap is 65,536; above it a request is a 400, never a
+# silent truncation.
+#
+# IMAGE. The unit runs the localhost/-aliased tag: this host's podman quadlet
+# path cannot resolve registry-prefixed refs from local storage at create
+# time. deploy-remote.sh pulls the ghcr.io ref and re-tags it before the
+# restart. Pull=never keeps boots off the registry.
+[Unit]
+Description=frank-large — halogen-flash-server, Qwen3.8-Flash-Next (w4b) on gfx1151
+After=network-online.target
+
+[Container]
+ContainerName=frank-large
+Image=localhost/peonist-ai/halogen-flash-server:0.5.8
+# Published port stays 7770: Hermes, open-webui, the harness and the homepage
+# probe all point here. 8730 (the engine) is deliberately not published.
+PublishPort=7770:8731
+AddDevice=/dev/kfd
+AddDevice=/dev/dri
+# Read-write: the first start downloads into it. Contains only weights.
+Volume=/home/dank/models/halogen:/models
+# Fetch the weights on first start only (absent checkpoint gates it).
+Environment=HALOGEN_DOWNLOAD=peonist-ai/halogen-qwen3.8-flash-next
+# Fleet identity: the id at /v1/models, /health and every response body.
+Environment=HALOGEN_MODEL_ID=frank-large
+# Per-conversation ceiling: exactly half the pool, so two conversations of the
+# full window are always resident. 200,192 rather than a round 200,000 is
+# pool/2. The model's native window is 262,144; a conversation past this
+# ceiling is refused, never silently truncated. Clients declare 200192 (see
+# the frank-large contextWindow in models.yml).
+Environment=HALOGEN_CTX=200192
+# The KV pool: 400,384 positions = 2 x 200,192 (the 2026-09-16 retune, down
+# from 401,408). ~28 KiB per position including block scratch, so ~11.0 GiB
+# held -- the 401,408 ledger entry measured exactly 11.0. The two slots still
+# OVERSUBSCRIBE the pool for any real request, because admission reserves
+# prompt + max_tokens: two full-window conversations each holding an output
+# budget are pool-bound, and the second waits in arrival order for the first
+# to release its region. Read the `kv pool:` lines on every boot;
+# HALOGEN_KV_POOL_FIT lowers the pool itself if the budget refuses the
+# configured one, and a green health check does not mean the pool you asked
+# for is the pool you got.
+Environment=HALOGEN_KV_POOL_POSITIONS=400384
+# Concurrency cap: two, one per half of the pool. Each slot is 111.0 MiB of
+# O(1) state, so this hands ~111 MiB back against the three set on 2026-09-12
+# for the fleet size of the time.
+Environment=HALOGEN_KV_SLOTS=2
+# Sizing is budget arithmetic, all of it. ONE budget covers the KV pool, the
+# per-call prefill arena and the vision tower together:
+#
+#   budget = 121.2 host - 67.7 resident weights - reserve
+#   need   = KV (~28 KiB/position) + arena + vision
+#   arena  = 3.80 GiB + 8.40 GiB x (HALOGEN_MAX_TOK / 16384)
+#
+# The arena term is linear in max_tok, and it reproduces five live restarts
+# AND upstream's three published "on the device" figures to within 0.1 GiB —
+# note those published figures are pool+arena totals, not pool alone, which is
+# the misreading that first made a doubling look affordable here. Corners this
+# box offered at a reserve of 24, at the old 262,144-position pool:
+#
+#   16384 -> need 28.6 vs 29.5  FITS, 0.9 spare   (doubling, 8-9% prefill cost)
+#   32768 -> need 37.0 vs 29.5  POOL CLAMPED to 262144, deploy still green
+#   65536 -> need 46.5 vs 29.5  OOM, will not boot; unit still reads ACTIVE
+#
+# LOWERED 32768 -> 24576 on 2026-09-16 for the frank-small co-tenant on this
+# same host. The arena's variable term goes 8.40 x 2 -> 8.40 x 1.5, handing
+# ~4.2 GiB back to the host at roughly a 4-5 % prefill cost -- the same lever
+# at 16,384 costs 8-9 %. The vendor's own notes name 24,576 as the largest
+# arena that allocated with headroom to spare, so this stays inside the range
+# it has tested.
+#
+# The arena is a PER-CALL PREFILL CHUNK, not a prompt ceiling: the
+# 200,192-token conversation is prefilled in arena-sized pieces, so a smaller
+# arena means more pieces and a slower prefill, not a smaller conversation.
+#
+# THE POOL, ARENA AND RESERVE ARE A MATCHED SET, NOT independent tunables --
+# the fit check's printed ledger on each boot is the arbiter, not these
+# comments.
+Environment=HALOGEN_MAX_TOK=24576
+# RAM the fit check refuses to count on, watched over by the engine's own
+# n-gram lookup table (47.7 GiB, read through the page cache and never held)
+# and, since 2026-09-16, by frank-small on the same host.
+#
+# RAISED 15 -> 20 with the 2026-09-16 retune. This knob feeds the fit-check
+# budget and is NOT an allocation: raising it cannot hand memory back to the
+# host, because the actual footprint is weights + KV + arena + vision, none of
+# which it touches — it can only take the pool away. What it does is keep the
+# fit check honest at the smaller arena. With the arena at 24,576 and no
+# vision tower, the engine's printed need falls to roughly 25 GiB against a
+# budget of 121.2 - 67.7 - 20 = 33.5, leaving ~8 GiB of margin, so the pool is
+# not clamped.
+#
+# The 2026-09-13 profile for comparison: 103.5 GiB held and "7.1 GiB left for
+# everything else" (310 contiguous 2 MiB blocks) at the doubled 524,288 pool,
+# which is why the pool came down; at 401,408 the same ledger read 9.1 GiB /
+# 1396 blocks. The 09-16 retune gives back the vision tower (1.97) and ~4.2 of
+# arena on top of that for the co-tenant, so the expected figure at this boot
+# is ~15 GiB left. Read the ledger; do not trust this arithmetic.
+#
+# To free host memory, change the POOL or the ARENA, and the reserve then
+# becomes free to rise: HALOGEN_KV_POOL_POSITIONS=262144 hands back 3.6 GiB,
+# HALOGEN_MAX_TOK=16384 hands back another 4.2. Both are one-line edits the
+# fit check confirms on the next boot.
+Environment=HALOGEN_HOST_RESERVE_GIB=20
+# Verbose engine logging: the vendor's first-line evidence for load,
+# allocation and admission questions. Shipping it on means an incident report
+# already has the full startup account instead of needing a restart-into-debug.
+# HALOGEN_DMALLOC_LOG is deliberately NOT set — it logs every allocation
+# over 64 MB, which is steady-state noise here; raise it only for a live
+# OOM hunt.
+Environment=HALOGEN_VERBOSE=1
+# Required by the image: the engine maps the checkpoint and registers it with
+# the GPU in place, which needs host IPC and an unconfined seccomp profile.
+PodmanArgs=--ipc=host --security-opt seccomp=unconfined
+Ulimit=memlock=-1:-1
+# The image ships its own HEALTHCHECK; this pins it. /health asks the ENGINE
+# for a PONG before answering, so 200 means "ready to serve", not "process
+# alive". During the first-start download it stays unhealthy by design.
+HealthCmd=halogen-healthcheck api
+HealthInterval=30s
+HealthTimeout=10s
+HealthRetries=3
+HealthStartPeriod=300s
+Pull=never
+
+[Service]
+# The first start reads ~68 GiB off disk and pins it before serving.
+TimeoutStartSec=900
+Restart=on-failure
+RestartSec=10
+
+[Install]
+WantedBy=default.target
@@ -10,15 +10,15 @@ model:
  provider: dankclaw-large
  base_url: http://192.168.0.143:7770/v1
  api_key: not-needed
-  default: frank-dragoon
+  default: frank-large

 providers:
  dankclaw-large:
    api: http://192.168.0.143:7770/v1
    discover_models: false
    models:
-      frank-dragoon:
-        context_length: 262144
+      frank-large:
+        context_length: 114688
  dankserver-small:
    api: http://192.168.0.235:7770/v1
    discover_models: false
@@ -29,7 +29,7 @@ providers:
 # Auxiliary routing from the live configuration. Named providers route via
 # their `api:` URL; `custom` entries route by their explicit `base_url`.
 auxiliary:
-  vision: {provider: dankclaw-large, model: frank-dragoon}
+  vision: {provider: dankclaw-large, model: frank-large}
  web_extract: {provider: dankserver-small, model: frank-medium}
  compression: {provider: dankserver-small, model: frank-medium}
  skills_hub: {provider: dankserver-small, model: frank-medium}
@@ -50,8 +50,8 @@ auxiliary:
        effort: none
  memory_query_rewrite: {provider: custom, model: frank-medium, base_url: http://192.168.0.235:7770/v1}
  tts_audio_tags: {provider: custom, model: frank-medium, base_url: http://192.168.0.235:7770/v1}
-  triage_specifier: {provider: dankclaw-large, model: frank-dragoon}
-  kanban_decomposer: {provider: dankclaw-large, model: frank-dragoon}
+  triage_specifier: {provider: dankclaw-large, model: frank-large}
+  kanban_decomposer: {provider: dankclaw-large, model: frank-large}
  profile_describer: {provider: dankserver-small, model: frank-medium}
  curator: {provider: dankserver-small, model: frank-medium}

@@ -1,54 +0,0 @@
-# Quadlet unit: alertmanager (rootless, boot-persistent).
-#
-# Install path on dankclaw: ~/.config/containers/systemd/alertmanager.container
-# Unit name: alertmanager.service (container name: alertmanager)
-#
-# The delivery half of the LLM alert rules. Until 2026-09-17 the rules in
-# shared/prometheus/rules/llm-fleet.yml evaluated and reached nobody — a
-# firing alert was visible in Prometheus and on the Grafana dashboard and
-# nowhere else, and an undelivered alert looks identical to a quiet one.
-# This unit closes that gap: Prometheus pushes to alertmanager:9093 over the
-# dankclaw_default network, and the single receiver webhooks the host-side
-# signal-relay user unit, which hands the text to signal-cli under Frank's
-# existing Signal account.
-#
-# PUBLISHING. 127.0.0.1 only, like every other observability unit: the
-# unauthenticated Alertmanager API (lifecycle endpoints are always on in
-# this binary — there is no flag to gate them) has no business on a host
-# interface, and no off-host consumer needs it. Caddy gains no vhost for
-# it; the homepage timer probes loopback.
-#
-# CONFIG. /opt/alertmanager/config/alertmanager.yml is installed from
-# shared/prometheus/alertmanager.yml by deploy-remote.sh on every deploy, so
-# the repo copy is the source of truth. STATE lives in /opt/alertmanager/data.
-#
-# Rootless: container root maps to the invoking user (dank) in this user
-# namespace and dank owns /opt/alertmanager/data. The image's default user
-# (nobody) maps to a subuid that cannot write it — same User=0:0 as prometheus.
-
-[Unit]
-Description=Alertmanager alert delivery (Dankclaw)
-After=network-online.target
-Wants=network-online.target
-
-[Container]
-ContainerName=alertmanager
-Image=docker.io/prom/alertmanager:latest
-Network=dankclaw_default
-User=0:0
-Exec=--config.file=/etc/alertmanager/alertmanager.yml --storage.path=/alertmanager
-PublishPort=127.0.0.1:9093:9093
-Volume=/opt/alertmanager/config:/etc/alertmanager
-Volume=/opt/alertmanager/data:/alertmanager
-HealthCmd=wget --spider -q http://localhost:9093/-/healthy
-HealthInterval=30s
-HealthTimeout=10s
-HealthRetries=3
-HealthStartPeriod=30s
-
-[Service]
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=default.target
@@ -27,11 +27,10 @@
 #
 # RULES. Five LLM alert rules and one recording rule load from
 # /etc/prometheus/rules/ (installed from shared/prometheus/rules/ by the
-# deployer). Delivery went live 2026-09-17: the alerting block in
-# prometheus.yml points at alertmanager:9093, which webhooks every firing
-# group to the host-side Signal relay (192.168.0.143:18093, reached from
-# the container as host.containers.internal), which sends through signal-cli account 318311.
-# The Grafana dashboard's ALERTS panel remains the second surface.
+# deployer). There is still **no Alertmanager**, so nothing is delivered: a
+# firing alert is visible in Prometheus and on the Grafana dashboard's ALERTS
+# panel and reaches nobody. Delivery is an operator decision, not an oversight;
+# the fragility is that an undelivered alert looks identical to a quiet one.
 #
 # The config volume is also why rules belong in git: editing them in the UI is
 # lost on the next deploy, since the deployer overwrites the whole directory.
@@ -32,52 +32,6 @@ PublishPort=3005:8080
 Environment=OPENAI_API_BASE_URL=http://192.168.0.143:7770
 Environment=ANONYMIZED_TELEMETRY=False
 Environment=DO_NOT_TRACK=True
-
-# SSO via authentik (OIDC authorization-code flow, 2026-09-24). The OAuth
-# client (application slug "open-webui") lives in authentik; the client
-# SECRET stays off-repo in the git-ignored host env file (mode 600). The
-# container reaches the IdP over the public URL: Caddy publishes 0.0.0.0:443
-# and Pi-hole resolves auth.franksdank.cloud to the host LAN IP, so the
-# server-side code exchange works from this bridge. Roles come from the
-# "Open WebUI roles" scope mapping (entitlements "Open WebUI Users" /
-# "Open WebUI Admins"); OAUTH_MERGE_ACCOUNTS_BY_EMAIL folds SSO logins into
-# the existing local account (frank8465@protonmail.com). The OAuth vars are
-# read directly from the environment at runtime (the per-key config DB holds
-# only Admin-Panel overrides, so nothing is seeded on the live data dir).
-# NOTE: the OAUTH_SCOPES value MUST stay quoted — systemd splits unquoted
-# Environment= values on whitespace (unquoted, only "openid" survived).
-EnvironmentFile=/home/dank/Containers/open-webui/env
-Environment=OAUTH_CLIENT_ID=KmtzKc0bjWjaIFeM0puYudI1CLXR2p0jnPCSf4N0
-Environment=OAUTH_PROVIDER_NAME=authentik
-Environment=OPENID_PROVIDER_URL=https://auth.franksdank.cloud/application/o/open-webui/.well-known/openid-configuration
-Environment=OPENID_REDIRECT_URI=https://ai.franksdank.cloud/oauth/oidc/callback
-Environment=WEBUI_URL=https://ai.franksdank.cloud
-Environment=ENABLE_OAUTH_SIGNUP=true
-Environment=OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true
-Environment="OAUTH_SCOPES=openid email profile roles"
-Environment=ENABLE_OAUTH_ROLE_MANAGEMENT=true
-# SSO-only (2026-09-24): the OIDC round-trip is verified, so the local
-# username/password path is retired. ENABLE_LOGIN_FORM hides the form;
-# ENABLE_PASSWORD_AUTH refuses password logins entirely, so the only way in
-# is the authentik OIDC flow (which folds into the local account by email).
-# The per-key config DB override (ui.enable_login_form) is flipped to false
-# in the same change — the DB wins over env, so both must agree.
-Environment=ENABLE_LOGIN_FORM=false
-Environment=ENABLE_PASSWORD_AUTH=false
-
-# Web search -> SearXNG, reached over the host-published port (NOT the
-# search.franksdank.cloud vhost): the Anubis->Authentik guard chain is a
-# browser mechanism and a plain HTTP client cannot solve it. The internal
-# port bypasses Caddy entirely. These env vars SEED the per-key config DB on
-# first run (fill-missing only); once the keys exist in /app/backend/data the
-# DB is authoritative, so this block documents the intent and makes a fresh
-# data dir come up wired. SearXNG's limiter exempts this source (the bridge
-# egress 10.89.x is in pass_ip), so the 4-req/IP/hour JSON cap never applies.
-Environment=ENABLE_WEB_SEARCH=True
-Environment=WEB_SEARCH_ENGINE=searxng
-Environment=SEARXNG_QUERY_URL=http://192.168.0.143:8081/search
-Environment=SEARXNG_LANGUAGE=all
-Environment=WEB_SEARCH_RESULT_COUNT=6
 Volume=/home/dank/Containers/open-webui/data:/app/backend/data

 # App liveness (/health) AND network liveness (a non-loopback interface must
@@ -0,0 +1,21 @@
+#!/usr/bin/env python3
+"""frank-medium container healthcheck: the port's /health must answer 200.
+
+Runs INSIDE the container. The vLLM /health endpoint only answers once the
+engine is up (weights loaded, cudagraphs captured), so a healthy container is
+a serving container, not merely a live process. PORT selects the endpoint so
+the single-GPU replicas (:7771/:7772) and the round-robin proxy (:7770) can
+share this probe. The HealthCmd in the quadlet splits on spaces into an argv
+array (podman 5.x v1 generator), which is why this lives in a file rather
+than an inline python one-liner.
+"""
+import os
+import sys
+import urllib.request
+
+port = os.environ.get("PORT", "7770")
+try:
+    with urllib.request.urlopen(f"http://127.0.0.1:{port}/health", timeout=5) as r:
+        sys.exit(0 if r.status == 200 else 1)
+except Exception:
+    sys.exit(1)
@@ -0,0 +1,147 @@
+# Quadlet unit: frank-medium (rootless, boot-persistent).
+#
+# Install path on dankserver: ~/.config/containers/systemd/frank-medium.container
+# Unit name: frank-medium.service (container name: frank-medium)
+#
+# The dankserver LLM endpoint (:7770, alias frank-medium), since 2026-09-15
+# running the vllm-radiance MXFP4 stack (stilldeadcode/vllm-radiance:0.9.3
+# image + the ggz14/radiance-vllm-mxfp4 patches) serving
+# just1moremodel/Qwen3.8-27B-Uncensored-MXFP4-awq on the 2x Radeon AI PRO
+# R9700 (gfx1201) cards. It replaced the charlie12345/ROCmFPX llama.cpp
+# deployment, which served the same alias from the Q8_0_ROCMFPX_AGENT GGUF;
+# the MXFP4 stack is tensor-parallel (TP=2, R4D one-shot all-reduce) with the
+# DFlash2-FP8 block-diffusion drafter (SPEC=7) — the measured production
+# configuration of the upstream repo, on our exact hardware signature
+# (2x7551-32624, see the KV pin below).
+#
+# SHAPE. The launcher the upstream repo ships binds the server with
+# --network=host (vLLM takes --host 0.0.0.0 --port 7770 directly), which is
+# what this unit does too — no PublishPort. The fleet contract is unchanged:
+# :7770, served model name frank-medium (SERVED_NAMES), OpenAI /v1.
+#
+# NOT INSTALLED ON THIS HOST. This is the target shape: one tensor-parallel
+# process across both R9700s. It cannot launch a collective here — RCCL's
+# kernels need PCIe atomics and the second card sits behind chipset bridges
+# advertising `AtomicOpsCap: Routing-` — so the active deployment is the
+# two-replica trio in this directory (frank-medium-a/b/proxy) and
+# deploy-remote.sh deliberately does not install this unit. Keep it for a
+# host whose second card is on an atomic-capable root port; the full evidence
+# is in serverAppConfigs-docs/LLM/frank-medium-radiance-mxfp4.md.
+#
+# DEVICES. /dev/kfd + /dev/dri through the amdgpu/KFD stack; HIP/ROCR device
+# indices 0,1 (the two R9700s). The 2 GiB Raphael iGPU enumerates as index 2
+# and is excluded both by the index pin and by the upstream MIN_GPU_MIB=8192
+# logic this unit replaces. --privileged --ipc=host --security-opt
+# seccomp=unconfined --cap-add SYS_PTRACE is the upstream launcher's exact
+# podman posture.
+#
+# MOUNTS. /models (rw checkpoints), the HF cache (tokenizer files),
+# /cache (Triton/inductor/aiter/vLLM compile cache — first start compiles for
+# several minutes, later starts reuse), /patches (the pinned radiance clone —
+# its patches are applied at EVERY container start by the entrypoint), /r4d
+# (the patched libr4d build; the image's shipped r4d.so NaNs the
+# gated-delta-net and must never be used), and the entrypoint + healthcheck
+# scripts from this checkout (mounted read-only straight out of
+# /home/dank/serverAppConfigs — deploy.sh git-pulls the checkout before
+# dispatching).
+#
+# IMAGE. The unit runs the localhost/-aliased tag: this host's podman quadlet
+# path cannot resolve registry-prefixed refs from local storage at create
+# time (same as frank-large on dankclaw). deploy-remote.sh pulls the
+# docker.io ref and re-tags it before the restart. Pull=never keeps boots off
+# the registry.
+#
+# KEEP IN SYNC: the radiance clone is pinned (97353293...); if it is updated,
+# re-diff dankserver/frank-medium/radiance-entrypoint.sh against the new
+# serve-mxfp4.sh container command and bump the pin deliberately.
+#
+# DO NOT name an environment variable TEMP, HOST or GPU_MAX_HEAP_SIZE: the
+# HIP runtime reads bare TEMP for its JIT cache path (2026-08-13 incident).
+[Unit]
+Description=frank-medium — vllm-radiance MXFP4 Qwen3.8-27B-Uncensored on 2x R9700 (gfx1201)
+After=network-online.target
+
+[Container]
+ContainerName=frank-medium
+Image=localhost/radiance-vllm:0.9.3
+# vLLM binds 0.0.0.0:7770 on the host network directly; no PublishPort.
+AddDevice=/dev/kfd
+AddDevice=/dev/dri
+GroupAdd=keep-groups
+# The upstream launcher's exact podman posture (rootless; podman-only flags
+# like --replace are not needed under systemd management).
+PodmanArgs=--privileged --ipc=host --security-opt seccomp=unconfined --cap-add SYS_PTRACE --network=host
+# The two R9700s. The Raphael iGPU (index 2, 2 GiB) stays out: shared system
+# memory is not a compute target.
+Environment=ROCR_VISIBLE_DEVICES=0,1
+Environment=HIP_VISIBLE_DEVICES=0,1
+# The uncensored MXFP4 checkpoint ships its fp8 MTP head already, so no
+# fp8_mtp.py rewrite step exists or is needed (unlike amd/Qwen3.8-27B-Quark-AWQ-MXFP4).
+Environment=SNAP=/models/Qwen3.8-27B-Uncensored-MXFP4-awq
+Environment=DRAFTER=/models/Qwen3.8-27B-DFlash2-FP8
+Environment=CHAT_TEMPLATE=/patches/qwen-fixed-v22.3.jinja
+# Fleet identity: the id at /v1/models and in every response body. Every
+# client (Hermes, the harness, services.json) points at frank-medium.
+Environment=SERVED_NAMES=frank-medium
+Environment=PORT=7770
+# Fixed 2-card tensor parallel: the tested configuration of the upstream
+# repo; the R4D one-shot all-reduce kernel serves it natively.
+Environment=TP=2
+# Measured production batch shape (upstream README): MAXSEQS 8 peaks
+# aggregate throughput at 573 t/s; MAXLEN is the model's native context.
+Environment=MAXSEQS=8
+Environment=CHUNK=8192
+Environment=MAXLEN=262144
+Environment=GPU_UTIL=0.98
+# Speculative decoding: the DFlash2 drafter at depth 7 is the configuration
+# every published number (224 t/s single-stream decode, 4749-4810 t/s
+# prefill) was measured with.
+Environment=SPEC_METHOD=dflash
+Environment=SPEC=7
+# KV cache pin, bytes. From the upstream repo's shipped kv-profiles.tsv row
+#   sig=2x7551-32624 maxseqs=8 chunk=8192 maxlen=262144 spec=dflash
+# which is EXACTLY this host (2x R9700 DID 0x7551, 32624 MiB each). Pinned
+# explicitly because this unit does not run the launcher's lookup; valid
+# only at this batch shape (change MAXSEQS/CHUNK/SPEC_METHOD => recalibrate
+# with calibrate-kv.sh or set KV_MEM=0 to let vLLM profile). Worth
+# 943,581 KV tokens vs ~892,799 profiled (~5.7%).
+Environment=KV_MEM=18563072000
+# Checkpoints (rw: nothing downloads at runtime, but vLLM mmaps the shards;
+# keep parity with the launcher's rw mount).
+Volume=/home/dank/models:/models
+# Tokenizer files ride the HF cache; HF_HUB_OFFLINE=1 is set in the
+# entrypoint.
+Volume=/home/dank/.cache/huggingface:/root/.cache/huggingface
+# Compile cache. Keyed on model + stack version + every graph-changing knob;
+# never share it across configurations (upstream rule).
+Volume=/home/dank/.radiance-cache-w4a8-093-gdnm-nqft-fp8s-gnq:/cache
+# The pinned radiance clone: patches applied at every container start.
+Volume=/home/dank/GitPackages/radiance-vllm-mxfp4:/patches:z
+# The patched libr4d (pin b9e42ab + repo extras, key b9e42ab-rx6). The
+# image's shipped r4d.so predates the GDN overflow fix and NaNs this model.
+Volume=/home/dank/.cache/radiance-libr4d/b9e42ab-rx6:/r4d:z
+# Entrypoint + healthcheck from this checkout, mounted read-only.
+Volume=/home/dank/serverAppConfigs/dankserver/frank-medium/radiance-entrypoint.sh:/usr/local/bin/frank-medium-entrypoint.sh:ro
+Volume=/home/dank/serverAppConfigs/dankserver/frank-medium/frank-medium-healthcheck.py:/usr/local/bin/frank-medium-healthcheck.py:ro
+# The entrypoint must be the container command; the image's own entrypoint
+# (which the patched script execs at the end) must not run unpatched.
+PodmanArgs=--entrypoint /usr/local/bin/frank-medium-entrypoint.sh
+# 200 only once the engine serves; during first-start compilation the
+# container is legitimately unhealthy. HealthCmd is split on spaces into an
+# argv array by the podman 5.x v1 generator, hence the file-based probe.
+HealthCmd=python3 /usr/local/bin/frank-medium-healthcheck.py
+HealthInterval=60s
+HealthTimeout=30s
+HealthRetries=3
+HealthStartPeriod=1800s
+Pull=never
+
+[Service]
+# First start compiles Triton/inductor kernels (several minutes) before the
+# engine loads ~9.5 GiB of weights per card.
+TimeoutStartSec=1800
+Restart=on-failure
+RestartSec=10
+
+[Install]
+WantedBy=default.target
@@ -0,0 +1,229 @@
+#!/usr/bin/env bash
+# frank-medium container entrypoint: vllm-radiance MXFP4 on 2x Radeon AI PRO
+# R9700 (gfx1201), serving just1moremodel/Qwen3.8-27B-Uncensored-MXFP4-awq.
+#
+# This is a fork of the patch-and-serve block inside radiance-vllm-mxfp4's
+# serve-mxfp4.sh (clone at /home/dank/GitPackages/radiance-vllm-mxfp4, pinned
+# commit 9735329348ae1c9319f01cbe5f7004ec5f4dba63). The published image alone
+# is NOT sufficient for this model: the shipped libr4d predates the
+# gated-delta-net overflow fix and NaNs the output, and the MXFP4 gates need
+# relaxing, so the repo's patches are applied at every container start from
+# the /patches mount. It runs INSIDE the container (executed as the image
+# command by the frank-medium quadlet); the launcher's host-side GPU/TP/KV
+# detection is not needed here because this fleet is fixed 2x gfx1201 and the
+# KV pin is pinned explicitly in the quadlet.
+#
+# KEEP IN SYNC: if the radiance clone is updated, re-diff this file against
+# the new serve-mxfp4.sh container command and against the DRY_RUN output.
+#
+# Env contract: every knob below is ${VAR:-default}; the quadlet sets the
+# fleet-specific ones (SNAP, PORT, SERVED_NAMES, TP, KV_MEM, ...).
+set -euo pipefail
+
+# ---------------------------------------------------------------- serving shape
+: "${SNAP:=/models/Qwen3.8-27B-Uncensored-MXFP4-awq}"
+: "${DRAFTER:=/models/Qwen3.8-27B-DFlash2-FP8}"
+: "${CHAT_TEMPLATE:=/patches/qwen-fixed-v22.3.jinja}"
+: "${PORT:=7770}"
+: "${SERVED_NAMES:=frank-medium}"
+: "${MAXLEN:=262144}"
+: "${MAXSEQS:=8}"
+# KV_MEM=0 is passed THROUGH as --kv-cache-memory 0, which the image's
+# patched KV sizing reads as "profile the shape" (the launcher's rule).
+# Blanking the variable instead omits the flag and makes vLLM size the cache
+# from --gpu-memory-utilization alone: measured on the single-GPU replicas
+# that overshoots and the allocation dies with torch.OutOfMemoryError right
+# after the weights load (2.16 GiB requested, 116 MiB free). Do not "fix"
+# this into an empty expansion.
+: "${KV_MEM:=18563072000}"   # shipped kv-profiles.tsv row 2x7551-32624 @ 8/8192/262144/dflash
+: "${SPEC_METHOD:=dflash}"
+if [ "$SPEC_METHOD" = dflash ]; then : "${SPEC:=7}"; else : "${SPEC:=4}"; fi
+: "${MIN_M:=0}"              # 0 = the W4A8 kernel serves every M (MIN_M=1 still routes M=1 to aiter)
+: "${R4D_ATTN:=1}"
+: "${ASYNC:=0}"
+
+if [ "$R4D_ATTN" = "1" ]; then ATTN=R4D; else ATTN=ROCM_AITER_UNIFIED_ATTN; fi
+if [ "$ASYNC" = 1 ]; then ASYNC_FLAG="--async-scheduling"; UNPAD=false; else
+  ASYNC_FLAG="--no-async-scheduling"; UNPAD=true; fi
+
+# Drafting config. dflash: the DFlash2-FP8 block-diffusion drafter (its
+# attention backend must support full cuda graphs -> TRITON_ATTN). The
+# disable_padded_drafter_batch unpad is the single-stream lever (~+50%).
+if [ "$SPEC_METHOD" = dflash ]; then
+  if [ ! -f "$DRAFTER/config.json" ]; then
+    echo "frank-medium: no dflash drafter at $DRAFTER" >&2
+    exit 1
+  fi
+  DRAFT_SAMPLE=${DRAFT_SAMPLE:-greedy}
+  SPEC_CFG="{\"method\":\"dflash\",\"model\":\"$DRAFTER\",\"num_speculative_tokens\":$SPEC,\"attention_backend\":\"TRITON_ATTN\",\"disable_padded_drafter_batch\":$UNPAD,\"draft_sample_method\":\"$DRAFT_SAMPLE\"}"
+  RADIANCE_DRAFT_RERANK=${RADIANCE_DRAFT_RERANK:-80}
+  RADIANCE_VERIFY_HEAD=${RADIANCE_VERIFY_HEAD:-1}
+else
+  SPEC_CFG="{\"method\":\"mtp\",\"num_speculative_tokens\":$SPEC,\"attention_backend\":\"$ATTN\",\"disable_padded_drafter_batch\":$UNPAD}"
+  RADIANCE_DRAFT_RERANK=${RADIANCE_DRAFT_RERANK:-32}
+  RADIANCE_VERIFY_HEAD=${RADIANCE_VERIFY_HEAD:-0}
+fi
+
+# The AR size gate compares raw bf16 bytes: CHUNK x hidden(5120) x 2. Derived
+# so changing CHUNK cannot silently drop prefill back onto RCCL.
+export RADIANCE_AR_MAX_KB=$(( (CHUNK * 5120 * 2) / 1024 + 4096 ))
+
+# ---------------------------------------------------------------- runtime env
+export HF_HUB_OFFLINE=1
+export VLLM_LOGGING_LEVEL=${VLLM_LOGGING_LEVEL:-INFO}
+export VLLM_NO_USAGE_STATS=${VLLM_NO_USAGE_STATS:-1}
+export VLLM_ROCM_USE_AITER=1 VLLM_ROCM_USE_AITER_UNIFIED_ATTENTION=1
+export VLLM_ROCM_USE_AITER_MHA=0 VLLM_ROCM_USE_AITER_MLA=0 VLLM_ROCM_USE_AITER_MOE=0
+export VLLM_ROCM_USE_AITER_LINEAR=0 VLLM_ROCM_USE_AITER_FP8BMM=0
+export VLLM_ROCM_USE_AITER_FP4BMM=0 VLLM_ROCM_USE_AITER_RMSNORM=0
+export NCCL_PROTO=Simple
+export RADIANCE_USE_R4D=${RADIANCE_USE_R4D:-1} RADIANCE_USE_R4D_AR=${RADIANCE_USE_R4D_AR:-1}
+export RADIANCE_DFLASH_SELECTOR_TOPK="${RADIANCE_DFLASH_SELECTOR_TOPK:-}"
+export RADIANCE_R4D_REPORT=1
+export RADIANCE_PRESHUFFLE=${RADIANCE_PRESHUFFLE:-1}
+export RADIANCE_MXFP4_SANITIZE="${RADIANCE_MXFP4_SANITIZE:-0}"
+export RADIANCE_MXFP4=1 RADIANCE_MXFP4_W4A8=1 RADIANCE_MXFP4_W4A8_MIN_M="$MIN_M"
+export RADIANCE_FAST_DRAFT=${RADIANCE_FAST_DRAFT:-1}
+export RADIANCE_DRAFT_TAU=${RADIANCE_DRAFT_TAU:-0.20}
+export RADIANCE_DRAFT_RERANK
+export RADIANCE_VERIFY_HEAD
+export RADIANCE_VERIFY_HEAD_MAX_M=${RADIANCE_VERIFY_HEAD_MAX_M:-32}
+export RADIANCE_MXFP4_DEBUG=${RADIANCE_MXFP4_DEBUG:-0}
+export RADIANCE_MXFP4_PUREQUANT=${RADIANCE_MXFP4_PUREQUANT:-0}
+export RADIANCE_MXFP4_SYNC=${RADIANCE_MXFP4_SYNC:-0}
+export RADIANCE_MXFP4_CLONE=${RADIANCE_MXFP4_CLONE:-0}
+export RADIANCE_MXFP4_CHECKX=${RADIANCE_MXFP4_CHECKX:-0}
+export RADIANCE_MXFP4_PADOUT=${RADIANCE_MXFP4_PADOUT:-0}
+export RADIANCE_MXFP4_TN4_MIN_M=${RADIANCE_MXFP4_TN4_MIN_M:-2048}
+# The decode-kernel band must cover MAXSEQS x (SPEC+1) rows: 64 covers 8x8.
+if [ "${MAXSEQS}" -gt 8 ]; then
+  export RADIANCE_MXFP4_DECODE_MAX_M=${RADIANCE_MXFP4_DECODE_MAX_M:-128}
+fi
+export RADIANCE_MXFP4_DECODE_NT=${RADIANCE_MXFP4_DECODE_NT:-1}
+export RADIANCE_MXFP4_A_TILED_MIN_M=${RADIANCE_MXFP4_A_TILED_MIN_M:-513}
+export RADIANCE_MXFP4_WPERM=${RADIANCE_MXFP4_WPERM:-1}
+export RADIANCE_TP_PAD=${RADIANCE_TP_PAD:-0}   # TP=2 here; 3 is the only non-zero value upstream supports
+export RADIANCE_TP_PAD_DRAFTER=${RADIANCE_TP_PAD_DRAFTER:-1}
+export RADIANCE_TP_PAD_STRICT=${RADIANCE_TP_PAD_STRICT:-1}
+export RADIANCE_GDN_MERGE_INPROJ=${RADIANCE_GDN_MERGE_INPROJ:-1}
+export RADIANCE_GDN_NORM_QUANT=${RADIANCE_GDN_NORM_QUANT:-1}
+export RADIANCE_GDN_STRIDED_GATES=${RADIANCE_GDN_STRIDED_GATES:-0}
+export RADIANCE_GDN_EMPTY_OUT=${RADIANCE_GDN_EMPTY_OUT:-0}
+export R4D_ATTN_FP8=${R4D_ATTN_FP8:-3}
+export RADIANCE_DFLASH_CALIB="${RADIANCE_DFLASH_CALIB:-}"
+export RADIANCE_DFLASH_CALIB_TOKENS="${RADIANCE_DFLASH_CALIB_TOKENS:-200000}"
+export RADIANCE_MXFP4_SHADOW="${RADIANCE_MXFP4_SHADOW:-}"
+export RADIANCE_MXFP4_KERNEL_N="${RADIANCE_MXFP4_KERNEL_N:-}"
+export RADIANCE_MXFP4_KERNEL_NK="${RADIANCE_MXFP4_KERNEL_NK:-}"
+export RADIANCE_MXFP4_CHECKALL="${RADIANCE_MXFP4_CHECKALL:-}"
+export RADIANCE_MXFP4_DECODE_KS="${RADIANCE_MXFP4_DECODE_KS:-}"
+export RADIANCE_MXFP4_DECODE_BK="${RADIANCE_MXFP4_DECODE_BK:-}"
+export RADIANCE_MXFP4_PERBLOCK_NK="${RADIANCE_MXFP4_PERBLOCK_NK:-}"
+export RADIANCE_MXFP4_REFLINEAR="${RADIANCE_MXFP4_REFLINEAR:-0}"
+export PYTORCH_CUDA_ALLOC_CONF="${PYTORCH_CUDA_ALLOC_CONF:-}"
+export RADIANCE_MXFP4_EPIFAST="${RADIANCE_MXFP4_EPIFAST:-1}"
+export RADIANCE_AR_OVERLAP=${RADIANCE_AR_OVERLAP:-0}
+export RADIANCE_GDN_FUSED_UPDATE=${RADIANCE_GDN_FUSED_UPDATE:-1}
+export RADIANCE_DYNAMIC_WIDTH=${RADIANCE_DYNAMIC_WIDTH:-1}
+export RADIANCE_DYNW_ALPHA=${RADIANCE_DYNW_ALPHA:-0.35}
+export RADIANCE_DYNW_MARGIN=${RADIANCE_DYNW_MARGIN:-2}
+export RADIANCE_DYNW_MIN=${RADIANCE_DYNW_MIN:-2}
+export RADIANCE_DYNW_MIN_BATCH=${RADIANCE_DYNW_MIN_BATCH:-3}
+export RADIANCE_AR_QNB=${RADIANCE_AR_QNB:-96}
+export RADIANCE_AR_QNT=${RADIANCE_AR_QNT:-1024}
+export MXFP4_CUMODE=${MXFP4_CUMODE:-0}
+export RADIANCE_STEP_TRACE=${RADIANCE_STEP_TRACE:-0}
+export RADIANCE_AR_OVERLAP_MIN_M=${RADIANCE_AR_OVERLAP_MIN_M:-2048}
+export RADIANCE_AR_OVERLAP_SLICES=${RADIANCE_AR_OVERLAP_SLICES:-4}
+export RADIANCE_MXFP4_EPIFAST=${RADIANCE_MXFP4_EPIFAST:-1}
+export RADIANCE_MXFP4_R4D_DECODE_MAX_M=${RADIANCE_MXFP4_R4D_DECODE_MAX_M:-0}
+export RADIANCE_TOPK_TRITON_MIN_ROWS=${RADIANCE_TOPK_TRITON_MIN_ROWS:-1}
+export RADIANCE_SKINNY_GEMM=${RADIANCE_SKINNY_GEMM:-1}
+export RADIANCE_MXFP4_HOIST_QUANT=${RADIANCE_MXFP4_HOIST_QUANT:-1}
+export RADIANCE_MXFP4_TRACED_QUANT=${RADIANCE_MXFP4_TRACED_QUANT:-1}
+export RADIANCE_FP8_STREAM=${RADIANCE_FP8_STREAM:-1}
+export RADIANCE_RMS_QUANT_FUSION=${RADIANCE_RMS_QUANT_FUSION:-1}
+export RADIANCE_NVFP4_MXFP4=${RADIANCE_NVFP4_MXFP4:-0}
+export RADIANCE_NVFP4_EXP=${RADIANCE_NVFP4_EXP:-mse}
+export RADIANCE_NVFP4_FP8_LAYERS=${RADIANCE_NVFP4_FP8_LAYERS:-mxfp4}
+export RADIANCE_NVFP4_BF16_LAYERS=${RADIANCE_NVFP4_BF16_LAYERS:-in_proj_ba}
+export RADIANCE_NVFP4_LMHEAD=${RADIANCE_NVFP4_LMHEAD:-bf16}
+export RADIANCE_GDN_PATHS=${RADIANCE_GDN_PATHS:-both}
+export RADIANCE_GDN_NANTRACE=${RADIANCE_GDN_NANTRACE:-0}
+export RADIANCE_MXFP4_CHECK_MAX_M=${RADIANCE_MXFP4_CHECK_MAX_M:-128}
+export RADIANCE_MXFP4_MHIST=${RADIANCE_MXFP4_MHIST:-0}
+export VLLM_CACHE_ROOT=/cache/vllm
+export TORCHINDUCTOR_CACHE_DIR=/cache/inductor
+export TRITON_CACHE_DIR=/cache/triton
+export AITER_ROOT_DIR=/cache/aiter
+export TRITON_CACHE_AUTOTUNING=1
+# The patched libr4d built by setup-mxfp4.sh, bind-mounted at /r4d.
+R4D_SO=${R4D_SO:-/r4d}
+
+# The norm+quant fusion turns on vLLM's passes (one --compilation-config
+# instance; argparse keeps the last, so entries accumulate into one flag).
+CC_ITEMS=""
+if [ "${RADIANCE_NORMQUANT_FUSION:-1}" != "0" ]; then
+  CC_ITEMS="\"pass_config\":{\"fuse_norm_quant\":true,\"fuse_act_quant\":true}"
+fi
+EXTRA=${EXTRA:-}
+if [ -n "$CC_ITEMS" ]; then
+  EXTRA="$EXTRA --compilation-config {$CC_ITEMS}"
+fi
+
+# ---------------------------------------------------------------- patch block
+# Byte-for-byte the launcher's container-start block. The patches come from
+# the /patches mount (the pinned radiance clone). SP must match the image's
+# venv layout; the image tag is pinned in the quadlet.
+SP=/opt/vllm/lib/python3.12/site-packages
+cd /patches
+python3 patch_quark_mxfp4.py
+python3 patch_nvfp4_mxfp4.py
+python3 patch_tp3_pad.py
+python3 patch_ar_maxbytes.py
+python3 patch_topk_triton_rows.py
+python3 patch_dflash_calib.py
+python3 patch_dflash_mxfp4_kv.py
+python3 patch_rmsquant_fusion.py
+python3 patch_verify_head.py
+python3 patch_kv_group_size.py
+python3 patch_topk_composite.py
+python3 patch_gdn_shared_build.py
+python3 patch_dflash_selector_topk.py
+python3 patch_gdn_merge_inproj.py
+python3 patch_dynwidth.py
+python3 patch_async_dynwidth.py
+python3 patch_step_trace.py
+python3 patch_ar_geometry.py
+python3 patch_ar_3rank.py
+python3 patch_gdn_glue.py
+# Non-fatal: fixes content=null on thinking-off requests; not required to serve.
+python3 patch_qwen3_thinkoff.py \
+  || echo "[radiance] WARNING: thinkoff patch did not apply; thinking-off requests will return empty content"
+cp mxfp4-configs/*.json "$SP"/aiter/ops/triton/configs/gemm/
+cp radiance_preamble.py /opt/radiance_preamble.py
+cp radiance_nvfp4.py radiance_mxfp4.py radiance_gdn.py radiance_rmsquant.py radiance_drafthead.py \
+   radiance_verifyhead.py radiance_gdnmerge.py radiance_aroverlap.py radiance_topk.py \
+   radiance_arnq.py radiance_tp3pad.py "$SP"/
+hipcc -O3 -w -std=c++17 -fPIC -shared --offload-arch=gfx1201 $([ "${MXFP4_CUMODE:-0}" = 1 ] && echo -mcumode) \
+  $(python3 -m pybind11 --includes) radiance_mxfp4_fp8.hip -o "$SP"/radiance_mxfp4_fp8.so
+if [ -n "${R4D_SO:-}" ] && [ -f /r4d/r4d.so ]; then
+  cp /r4d/r4d.so "$SP"/r4d.so
+  echo "[radiance] using patched r4d.so from $R4D_SO"
+fi
+# Leave /patches before exec: a stale radiance_mxfp4_fp8.so there would shadow
+# the one just compiled into site-packages (cwd precedes it on sys.path).
+cd /
+exec /opt/radiance_entrypoint.sh "$SNAP" --served-model-name $SERVED_NAMES \
+  --host 0.0.0.0 --port "$PORT" \
+  --kv-cache-dtype fp8 --tensor-parallel-size "$TP" \
+  --gpu-memory-utilization "$GPU_UTIL" \
+  ${KV_MEM:+--kv-cache-memory "$KV_MEM"} \
+  --max-model-len "$MAXLEN" --max-num-seqs "$MAXSEQS" --max-num-batched-tokens "$CHUNK" \
+  --attention-backend "$ATTN" \
+  --speculative-config "$SPEC_CFG" \
+  $ASYNC_FLAG $EXTRA \
+  --enable-prefix-caching --mamba-cache-mode align --enable-auto-tool-choice \
+  --tool-call-parser qwen3_coder --reasoning-parser qwen3 \
+  --override-generation-config '{"temperature":0.7,"top_p":0.95,"top_k":20}' \
+  --chat-template "$CHAT_TEMPLATE"
@@ -1,63 +0,0 @@
-# Quadlet unit: Calibre Content Server (rootless, boot-persistent).
-#
-# Install path on dankserver:
-# ~/.config/containers/systemd/calibre-server.container
-# Unit name: calibre-server.service (podman 5.x drops the container- prefix)
-#
-# The image is the CURRENT linuxserver/calibre (9.15.0), which is a desktop
-# image (Selkies web-streamed GUI on 8080/8181) with the headless
-# calibre-server available inside. The compose-era snippet in
-# serverAppConfigs-docs/Dankserver/Calibre.md predates the desktop revamp;
-# the dedicated headless images (ta264/docker-calibre, agentgreen) are
-# dormant (calibre 6.10 / 2017), so this unit runs calibre-server as the
-# image's s6-overlay main service via Exec=; the desktop also runs but its
-# ports are internal-only (see the port map below).
-#
-# Port map: Network=pasta is port-FORWARD mode on this host (the container
-# keeps its own netns; only PublishPort'd ports reach the host — verified
-# 2026-09-21: 8080/8090/8182 inside the container are not visible on the
-# host, only the 8084 forward). So the ONLY exposed surface is:
-#   8090 -> host 8084  calibre-server (the content server; 8080 inside the
-#                      container is the image's own nginx, 8083 on the host
-#                      is calibre-web)
-# The desktop GUI (nginx 8080/8181 + WS 8082, inside the container) runs but
-# is internal-only: no PublishPort. Exposing it is one PublishPort line away
-# if the browser GUI is ever wanted (the basic-auth credential is already in
-# the env file).
-# Auth: calibre-server 9.x keeps its users in a SQLite userdb (the pw column
-# is PLAINTEXT, so the file is mode 600). The single admin account is
-# bootstrapped once by the deploy handler (deploy_calibre_server) via
-# `calibre-server --manage-users -- add`, password piped on stdin with
-# printf (a trailing newline from echo lands in the stored password and
-# breaks every login). The desktop's basic auth (CUSTOM_USER/CUSTOM_PASSWORD)
-# reuses the same credential pair. Both live in the machine-local env file;
-# this unit holds no secrets.
-#
-# --auth-mode=basic is required: on a non-SSL port the server defaults to
-# Digest auth, which rejects plain Basic clients with 400 "Unsupported
-# authentication method".
-
-[Unit]
-Description=Calibre content server container
-After=network.target
-
-[Container]
-ContainerName=calibre-server
-Image=lscr.io/linuxserver/calibre:9.15.0
-Network=pasta
-EnvironmentFile=/home/dank/Containers/calibre-server/env
-Environment=PUID=1000
-Environment=PGID=1000
-Environment=TZ=America/Vancouver
-Volume=/home/dank/Containers/calibre-web/books:/books
-Volume=/home/dank/Containers/calibre-server/userdb.sqlite:/userdb.sqlite
-Exec=calibre-server --port 8090 --enable-auth --auth-mode=basic --userdb /userdb.sqlite /books
-PublishPort=8084:8090
-
-[Service]
-TimeoutStartSec=300
-Restart=always
-RestartSec=5
-
-[Install]
-WantedBy=default.target
@@ -16,7 +16,7 @@ After=network.target

 [Container]
 ContainerName=calibre-web
-Image=lscr.io/linuxserver/calibre-web:0.6.27-ls402
+Image=lscr.io/linuxserver/calibre-web:0.6.27-ls397
 Network=pasta
 Environment=DOCKER_MODS=linuxserver/mods:universal-calibre
 Environment=LANG=en_US.UTF-8
@@ -127,7 +127,7 @@ services:
  # Calibre-Web — e-book web frontend
  # ═══════════════════════════════════════════════
  calibre-web:
-    image: lscr.io/linuxserver/calibre-web:0.6.27-ls402
+    image: lscr.io/linuxserver/calibre-web:0.6.27-ls397
    container_name: calibre-web
    restart: unless-stopped
    environment:
@@ -4,7 +4,7 @@ After=network-online.target
 Wants=network-online.target

 [Container]
-Image=lscr.io/linuxserver/plex:1.43.4.10903-e5521bd8c-ls325
+Image=lscr.io/linuxserver/plex:1.43.3.10896-cb3ebc72d-ls322
 ContainerName=plex
 Network=dankserver_appnet:alias=plex
 Environment=PUID=0
@@ -4,7 +4,7 @@ After=network-online.target
 Wants=network-online.target

 [Container]
-Image=lscr.io/linuxserver/tautulli:v2.18.1-ls245
+Image=lscr.io/linuxserver/tautulli:v2.18.1-ls242
 ContainerName=tautulli
 Network=dankserver_appnet:alias=tautulli
 Environment=PUID=0
@@ -1,20 +0,0 @@
-#!/usr/bin/env bash
-# download-frank-archon-fp8.sh — fetch/verify the Qwen3.8-Flash-Next-FP8
-# payload (131 safetensors shards, 172.78 GiB total, plus aux files) for the
-# vLLM frank-archon deployment on dankserver.
-#
-#   bash scripts/download-frank-archon-fp8.sh [dest_dir]
-#
-# The manifest (scripts/manifests/qwen3.8-flash-next-fp8.manifest) carries
-# per-file sizes + LFS sha256s from the Hub; hf-fetch.sh is idempotent — an
-# interrupted re-run fetches only what is missing or corrupt, and a complete
-# on-disk payload is re-verified (full sha256 pass) with zero downloads.
-# The repo is public; no HF_TOKEN required.
-set -euo pipefail
-
-REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-dest="${1:-/home/dank/models/Qwen3.8-Flash-Next-FP8}"
-
-exec bash "$REPO_ROOT/scripts/hf-fetch.sh" "$dest" \
-    "$REPO_ROOT/scripts/manifests/qwen3.8-flash-next-fp8.manifest" \
-    Qwen/Qwen3.8-Flash-Next-FP8
@@ -1,76 +0,0 @@
-#!/usr/bin/env bash
-# Download the z-lab Qwen3.5-9B-DFlash drafter for frank-dragoon's DFlash
-# speculative-decode arm (vLLM --speculative-config method=dflash). Public
-# repo — no auth header on the command line.
-#
-# The drafter is a 6-layer qwen3 draft whose dflash_config pins
-# target_layer_ids [1,5,9,13,17,21,25,29] and block_size 16; its hidden_size
-# 4096 / vocab_size 248320 match the MiMo-V2.6-Distill-Qwen-9B target exactly
-# (both preserve the Qwen3.5-9B geometry), which is what lets vLLM load it as
-# the draft for that target.
-#
-# Usage:
-#   scripts/download-frank-dragoon-dflash.sh [DEST_DIR] [--verify-only]
-set -euo pipefail
-
-REPO="z-lab/Qwen3.5-9B-DFlash"
-BASE="https://huggingface.co/${REPO}/resolve/main"
-
-DEST=""
-VERIFY_ONLY=0
-for arg in "$@"; do
-    case "$arg" in
-        --verify-only) VERIFY_ONLY=1 ;;
-        *) DEST="$arg" ;;
-    esac
-done
-DEST="${DEST:-/home/dank/models/Qwen3.5-9B-DFlash}"
-
-# name bytes sha256(- = non-LFS, size-only check)
-FILES=(
-  "model.safetensors 2583816465 0a42274b32554f48de1faa0d42824e9c2ceda649c30ae0a731cddf410dd698c7"
-  "config.json 1222 -"
-)
-
-mkdir -p "$DEST"
-status=0
-for entry in "${FILES[@]}"; do
-  read -r name size sha <<<"$entry"
-  f="$DEST/$name"
-  have=0
-  if [[ -f "$f" ]] && [[ "$(stat -c%s "$f")" == "$size" ]]; then
-    if [[ "$sha" == "-" ]] || sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-      have=1
-    fi
-  fi
-  if (( have )); then
-    echo "OK        $name"
-    continue
-  fi
-  if (( VERIFY_ONLY )); then
-    echo "MISSING   $name"
-    status=1
-    continue
-  fi
-  echo "FETCHING  $name"
-  tmp="$f.part"
-  curl -fsSL --fail-with-body -o "$tmp" "$BASE/$name"
-  mv "$tmp" "$f"
-  if [[ "$(stat -c%s "$f")" != "$size" ]]; then
-    echo "SIZE FAIL $name ($(stat -c%s "$f") != $size)"
-    status=1
-    continue
-  fi
-  if [[ "$sha" != "-" ]] && ! sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-    echo "SHA FAIL  $name"
-    status=1
-    continue
-  fi
-  echo "VERIFIED  $name"
-done
-if (( status == 0 )); then
-  echo "DOWNLOAD_DONE $DEST"
-else
-  echo "DOWNLOAD_FAILED $DEST" >&2
-fi
-exit "$status"
@@ -1,90 +0,0 @@
-#!/usr/bin/env bash
-# Download the BF16 MiMo-V2.6-Distill-Qwen-9B payload for frank-dragoon
-# (vLLM/kyuz0 gfx1151, Strix Halo iGPU). Public repo — no auth header on the
-# command line (a Bearer token in argv is world-readable via /proc).
-#
-# Per-file FRESH downloads, no resume: the house rule (see
-# download-frank-zealot.sh); -f/--fail-with-body plus size+sha256 against the
-# Hub LFS oid is what makes an access error fail instead of "succeeding".
-#
-# Usage:
-#   scripts/download-frank-dragoon-mimo.sh [DEST_DIR] [--verify-only]
-#
-# The verified set below is exactly what the 2026-10-01 bench window served:
-# 17.53 GiB of BF16 weights (4 shards, 18,819,720,848 B total with the rest).
-set -euo pipefail
-
-REPO="XiaomiMiMo/MiMo-V2.6-Distill-Qwen-9B"
-BASE="https://huggingface.co/${REPO}/resolve/main"
-
-DEST=""
-VERIFY_ONLY=0
-for arg in "$@"; do
-    case "$arg" in
-        --verify-only) VERIFY_ONLY=1 ;;
-        *) DEST="$arg" ;;
-    esac
-done
-DEST="${DEST:-/home/dank/models/MiMo-V2.6-Distill-Qwen-9B-BF16}"
-
-# name bytes sha256(- = non-LFS, size-only check)
-FILES=(
-  "model-00001-of-00004.safetensors 5276436216 aab052180118aee34abc3029b54eaa49096aac606b97d703866b420dceb703c3"
-  "model-00002-of-00004.safetensors 5033171280 7a0486565f06d25ac4628e9dba470dc3f604353471d240d5a0bf7128f64df396"
-  "model-00003-of-00004.safetensors 5234499504 6c73207563d1879bfd6c143a028cc70be68edff56280458c71a43df4240300f4"
-  "model-00004-of-00004.safetensors 3275613848 1379a7cf8c0b8555a39ab65a47e830e0eb45e776b46045734da3afd73c09eea2"
-  "model.safetensors.index.json 69217 -"
-  "config.json 2784 -"
-  "generation_config.json 126 -"
-  "chat_template.jinja 3916 -"
-  "tokenizer.json 19989325 06b9509352d2af50381ab2247e083b80d32d5c0aba91c272ca9ff729b6a0e523"
-  "tokenizer_config.json 1165 -"
-  "vocab.json 6722759 -"
-  "merges.txt 3353259 -"
-  "preprocessor_config.json 443 -"
-  "processor_config.json 1191 -"
-  "video_preprocessor_config.json 385 -"
-)
-
-mkdir -p "$DEST"
-status=0
-for entry in "${FILES[@]}"; do
-  read -r name size sha <<<"$entry"
-  f="$DEST/$name"
-  have=0
-  if [[ -f "$f" ]] && [[ "$(stat -c%s "$f")" == "$size" ]]; then
-    if [[ "$sha" == "-" ]] || sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-      have=1
-    fi
-  fi
-  if (( have )); then
-    echo "OK        $name"
-    continue
-  fi
-  if (( VERIFY_ONLY )); then
-    echo "MISSING   $name"
-    status=1
-    continue
-  fi
-  echo "FETCHING  $name"
-  tmp="$f.part"
-  curl -fsSL --fail-with-body -o "$tmp" "$BASE/$name"
-  mv "$tmp" "$f"
-  if [[ "$(stat -c%s "$f")" != "$size" ]]; then
-    echo "SIZE FAIL $name ($(stat -c%s "$f") != $size)"
-    status=1
-    continue
-  fi
-  if [[ "$sha" != "-" ]] && ! sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-    echo "SHA FAIL  $name"
-    status=1
-    continue
-  fi
-  echo "VERIFIED  $name"
-done
-if (( status == 0 )); then
-  echo "DOWNLOAD_DONE $DEST"
-else
-  echo "DOWNLOAD_FAILED $DEST" >&2
-fi
-exit "$status"
@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-# Download the source Qwen3.5-9B checkpoint — the ONLY place this model
-# family's MTP head (15 mtp.* tensors) exists. frank-dragoon runs it as the
-# vLLM cross-model MTP draft (MiMo-V2.6-Distill-Qwen-9B itself ships zero
-# mtp tensors; that is why SGLang's NEXTN on frank-zealot draws 0.00
-# acceptance). Public repo — no auth header on the command line.
-#
-# NOTE the odd upstream shard names (model.safetensors-0000N-of-00004...).
-#
-# Usage:
-#   scripts/download-frank-dragoon-qwen35.sh [DEST_DIR] [--verify-only]
-set -euo pipefail
-
-REPO="Qwen/Qwen3.5-9B"
-BASE="https://huggingface.co/${REPO}/resolve/main"
-
-DEST=""
-VERIFY_ONLY=0
-for arg in "$@"; do
-    case "$arg" in
-        --verify-only) VERIFY_ONLY=1 ;;
-        *) DEST="$arg" ;;
-    esac
-done
-DEST="${DEST:-/home/dank/models/Qwen3.5-9B}"
-
-# name bytes sha256(- = non-LFS, size-only check)
-FILES=(
-  "model.safetensors-00001-of-00004.safetensors 5276436216 db6f444b43d318c92f360a13a25561a6a65b10c0631b8ed305a426dbaa6c380e"
-  "model.safetensors-00002-of-00004.safetensors 5335161512 31c7d7e2dd5d207840b31cc59083c8f4c4718959149e0358c0364052bb9a0330"
-  "model.safetensors-00003-of-00004.safetensors 5368717440 7ec36ba3a4176a44c3c0876ad80c56a2f70c84bf008d82e9501df642f17dadec"
-  "model.safetensors-00004-of-00004.safetensors 3325995712 b62b0c4cd7e44edee103ee8f4fe225f246d5e768e07bfd5f25b63a8aa1fdd0c6"
-  "model.safetensors.index.json 79657 -"
-  "config.json 3126 -"
-  "chat_template.jinja 7756 -"
-  "tokenizer.json 12807982 5f9e4d4901a92b997e463c1f46055088b6cca5ca61a6522d1b9f64c4bb81cb42"
-  "tokenizer_config.json 16710 -"
-  "vocab.json 6722759 -"
-  "merges.txt 3353259 -"
-  "preprocessor_config.json 390 -"
-  "video_preprocessor_config.json 385 -"
-)
-
-mkdir -p "$DEST"
-status=0
-for entry in "${FILES[@]}"; do
-  read -r name size sha <<<"$entry"
-  f="$DEST/$name"
-  have=0
-  if [[ -f "$f" ]] && [[ "$(stat -c%s "$f")" == "$size" ]]; then
-    if [[ "$sha" == "-" ]] || sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-      have=1
-    fi
-  fi
-  if (( have )); then
-    echo "OK        $name"
-    continue
-  fi
-  if (( VERIFY_ONLY )); then
-    echo "MISSING   $name"
-    status=1
-    continue
-  fi
-  echo "FETCHING  $name"
-  tmp="$f.part"
-  curl -fsSL --fail-with-body -o "$tmp" "$BASE/$name"
-  mv "$tmp" "$f"
-  if [[ "$(stat -c%s "$f")" != "$size" ]]; then
-    echo "SIZE FAIL $name ($(stat -c%s "$f") != $size)"
-    status=1
-    continue
-  fi
-  if [[ "$sha" != "-" ]] && ! sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-    echo "SHA FAIL  $name"
-    status=1
-    continue
-  fi
-  echo "VERIFIED  $name"
-done
-if (( status == 0 )); then
-  echo "DOWNLOAD_DONE $DEST"
-else
-  echo "DOWNLOAD_FAILED $DEST" >&2
-fi
-exit "$status"
@@ -1,93 +0,0 @@
-#!/usr/bin/env bash
-# Download MiMo-V2.6-Distill-Qwen-9B-INT8-W8A16-AutoRound for frank-zealot
-# (SGLang, RTX 3090). Public repo — no auth header on the command line.
-#
-# Per-file FRESH downloads, no resume: `curl -C -` once produced a 213 MB
-# oversized file on a 31 GiB payload; a fresh -f fetch plus size+sha256 is
-# the house rule.
-#
-# Usage:
-#   scripts/download-frank-zealot.sh [DEST_DIR] [--verify-only]
-#
-# LFS shards are verified against the Hub LFS sha256; non-LFS text files
-# against their declared byte size. Idempotent: complete files are skipped.
-set -euo pipefail
-
-REPO="letechlead/MiMo-V2.6-Distill-Qwen-9B-INT8-W8A16-AutoRound"
-BASE="https://huggingface.co/${REPO}/resolve/main"
-
-DEST=""
-VERIFY_ONLY=0
-for arg in "$@"; do
-    case "$arg" in
-        --verify-only) VERIFY_ONLY=1 ;;
-        *) DEST="$arg" ;;
-    esac
-done
-DEST="${DEST:-/home/dank/models/MiMo-V2.6-Distill-Qwen-9B-INT8-W8A16-AutoRound}"
-
-# name bytes sha256(- = non-LFS, size-only check)
-FILES=(
-  "model-00001-of-00008.safetensors 2946296312 ddb6117c04cb6feaf7c265e5d75efadf21949037d73253a8e4521d40e164366d"
-  "model-00002-of-00008.safetensors 1402134792 2dc78d55d1d33d7b3b21dd6f8b4b817b62c2fb1376e6448b322428798c10e257"
-  "model-00003-of-00008.safetensors 1427365904 5c797d14e345309d67c78306b9de4aa01a21dbd92dd98e40b0ad69b2900e9203"
-  "model-00004-of-00008.safetensors 1420041856 7402f852e2c7a24ebf4694b98a220e71dfb2c93ba3776272cf2acfc65acd8126"
-  "model-00005-of-00008.safetensors 1410655648 991cbf2eda2ff91fc3ffbb15591d7fcac340fb10d9c33bd3da20010e2f3f4090"
-  "model-00006-of-00008.safetensors 1427627856 efc42448054cfb5e3061e154ba4539204088ce95176d689a95b58de885ef7eeb"
-  "model-00007-of-00008.safetensors 2035442408 75a101fc71ae6f2e1f5c4816f711d62cf1d7a0e02ef6e5182361b8c11e72b626"
-  "model-00008-of-00008.safetensors 822153664 0fb90cb50e2d336fbad58bd4c01880eeddbf537c1dca1cf0ae291195d5efbb4b"
-  "tokenizer.json 19989325 06b9509352d2af50381ab2247e083b80d32d5c0aba91c272ca9ff729b6a0e523"
-  "model.safetensors.index.json 106278 -"
-  "config.json 4608 -"
-  "generation_config.json 161 -"
-  "quantization_config.json 1654 -"
-  "chat_template.jinja 3916 -"
-  "tokenizer_config.json 1168 -"
-  "preprocessor_config.json 443 -"
-  "processor_config.json 1191 -"
-  "README.md 8448 -"
-)
-
-mkdir -p "$DEST"
-status=0
-for entry in "${FILES[@]}"; do
-  read -r name size sha <<<"$entry"
-  f="$DEST/$name"
-  have=0
-  if [[ -f "$f" ]] && [[ "$(stat -c%s "$f")" == "$size" ]]; then
-    if [[ "$sha" == "-" ]] || sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-      have=1
-    fi
-  fi
-  if (( have )); then
-    echo "OK        $name"
-    continue
-  fi
-  if (( VERIFY_ONLY )); then
-    echo "MISSING   $name"
-    status=1
-    continue
-  fi
-  echo "FETCHING  $name"
-  tmp="$f.part"
-  # no -C resume; -f + --fail-with-body so an HTTP error is not a success
-  curl -fsSL --fail-with-body -o "$tmp" "$BASE/$name"
-  mv "$tmp" "$f"
-  if [[ "$(stat -c%s "$f")" != "$size" ]]; then
-    echo "SIZE FAIL $name ($(stat -c%s "$f") != $size)"
-    status=1
-    continue
-  fi
-  if [[ "$sha" != "-" ]] && ! sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-    echo "SHA FAIL  $name"
-    status=1
-    continue
-  fi
-  echo "VERIFIED  $name"
-done
-if (( status == 0 )); then
-  echo "DOWNLOAD_DONE $DEST"
-else
-  echo "DOWNLOAD_FAILED $DEST" >&2
-fi
-exit "$status"
@@ -1,144 +0,0 @@
-.gitattributes 1635 
-LICENSE 3235 
-README.md 65400 
-chat_template.jinja 8952 
-config.json 72514 
-generation_config.json 202 
-merges.txt 3353259 
-model-00001-of-00131.safetensors 1040155912 774f0ceeadb40d165f2b3ff397d5f3840e6ca8fcb8f3d39d8acb4fea9e52c941
-model-00002-of-00131.safetensors 1678209208 6841fe21fa8a8a7a693c585efe65cd2732889095b696da88bda0cb287366910b
-model-00003-of-00131.safetensors 993901136 974a2a2ab551f8f1405a4955ab32a8721c68c73dd85b382491d9f0e6a34ee752
-model-00004-of-00131.safetensors 1678209208 591f488ab5cd5f0bd4fe28266099523761b9b9339137800734c34ffd84595538
-model-00005-of-00131.safetensors 1717267690 c50bf465a4a0129f1a1196c0e75d881048238f7107b356fc734007eac0d3b123
-model-00006-of-00131.safetensors 1600008328 57f103367fe36c9dc355c648d521d026caabb4ce5ba51038c78bd935f6593736
-model-00007-of-00131.safetensors 1600008328 cde2a12854770c706a74a5c7b85ffc140e3d4dba93dd4bee1cd7aa07cc348c90
-model-00008-of-00131.safetensors 1600008328 98ae323b5a61abdcf58a0dc9db7eb1a5a748cebc1ef1932804a1411500c09d84
-model-00009-of-00131.safetensors 1600008328 70f4b66bca5c4c0b441cf4284d4ab311670e182bfc5ec51c7294a4054baeb20f
-model-00010-of-00131.safetensors 1600008328 6d5dfa1dfa9a6c482f100f6e75c1f5e8ac02391c62e844e53f4a53996baf2206
-model-00011-of-00131.safetensors 1600008328 de085adb563e530e7ad157220cd1a219be189a1db0fcc3f2507886a2d78bd4e1
-model-00012-of-00131.safetensors 1600008328 97dac7c366ba19858d78c01364054136449ccb3cf60768587461cbf0bb582c90
-model-00013-of-00131.safetensors 1600008328 467be10b473d25e0581f8fb1bc986916c8b9301272f72e7a05762484ffc080a9
-model-00014-of-00131.safetensors 1600008328 38def6e9bbe6f242c2f92858c3e9a2b356d74d0180e323677158016dbee32ae7
-model-00015-of-00131.safetensors 1600008328 90c6c665f1f819bc6350714652c8fb77064fec57832ef51b878a0cdf9f602236
-model-00016-of-00131.safetensors 1600008328 88185c2530641b37dcad80d37b505c5257035e87ad29fa86640aae4814903e4f
-model-00017-of-00131.safetensors 1600008328 42e3b96359116d7471a74cb7de08f6a4e9e173830d562f1f74ff09d1d253ad38
-model-00018-of-00131.safetensors 1600008328 040adc7270efca6498c6f6a07dd7da14925d20217fe6de67223d6856fb4f2ad7
-model-00019-of-00131.safetensors 1600008328 b8a831992deb1a694439e37b7136ff2e181457a8683bff65f1f4b99772cabe58
-model-00020-of-00131.safetensors 1600008328 9426112fbd49ef4f5e9dd38dc2f93b046602e6d92cff732d33b96413ff1b40dc
-model-00021-of-00131.safetensors 1600008328 fce8426665f749ef38c4fad33b612f892b728c0f74fe60cab0e43ece785b4e77
-model-00022-of-00131.safetensors 1600008328 a20dd415f280774321538e6b9e78fba9f8e218a9090eae52ea7172b85b9c5a6d
-model-00023-of-00131.safetensors 1600008328 4100591839471a8721d9cedb251554dcef5ebc1dfd96ea7dce8912dd1e9921b2
-model-00024-of-00131.safetensors 1600008328 bbd6d7a4b54b6a6032e15b7c2fc9d6526377f89992d61da8837ad059f3210b45
-model-00025-of-00131.safetensors 1600008328 f9fa7b04de155dd2be74b5693d5b36e5463dabf956b9be36f67d4aae6b8dd304
-model-00026-of-00131.safetensors 1600008328 193c6b9da2c6b69c34d8a14b65234871db272761e712c2e56bac3f13c2d0cbf7
-model-00027-of-00131.safetensors 1600008328 d7efa372552c07ee8783e27c4b8ebd12fc75333f92553861bec8c7c0155a03fe
-model-00028-of-00131.safetensors 1600008328 5fc13d084d62c06b928dfb388a1b36f5c27cd25bd3cbb68a0b21e1c4cfc68e6e
-model-00029-of-00131.safetensors 1600008328 a11f5a6360b349159575871db5c553c40c37be68382b82551a2c2372f15f2811
-model-00030-of-00131.safetensors 1600008336 cac780a675f87fc699435a5207cbecb30a887271b5514b60b7e45d9bebe0e1ec
-model-00031-of-00131.safetensors 1600008336 d390a872eb3928b9d7c0a720ced792cc111613812a163d9fd6c97fd35d633897
-model-00032-of-00131.safetensors 1600008336 3b36fe4e7215a12cdc6c7499aafde51cfbce51266785184b99d3838a6b37b2c8
-model-00033-of-00131.safetensors 1600008336 3fb0504f406c0c71ee40e9e158492973c5c35337889c81b974892b407620c64c
-model-00034-of-00131.safetensors 1600008336 6d989a812a8d8d9330c8c4d21d7be98a0114705ca3bd7834d43bb268bad6be08
-model-00035-of-00131.safetensors 1600008336 8e56ba0a714198bd07a2d8fe9d91fbf5c72601c1b98edf09b289a2538445cb75
-model-00036-of-00131.safetensors 1600008336 c23fd6f6cfa9acfa961ba26e7c9c0dd7b05782c5bbf8f55e2526119b5c516fd4
-model-00037-of-00131.safetensors 942343240 b824a11bf460bd78c068e3d301e914a0bec2f243a6eea4679be7200d179248e7
-model-00038-of-00131.safetensors 1678211256 716eda81a763ffdefd1ac5306b4c80eef123c4dee24ed3a565a22438497581cb
-model-00039-of-00131.safetensors 877983696 b91e3bfbcd765ce704db85b78f69055da59456ae733df635e3973ff2f966a148
-model-00040-of-00131.safetensors 1678211256 3311ed7821b68bddb1542f06ca349feec72e68288113fe4899b08a3b8156343f
-model-00041-of-00131.safetensors 1103350296 1d79949b61730a0fa1f6cd1af149fa50fedc051566cdea48283de8c7a32d972c
-model-00042-of-00131.safetensors 1678211256 3f61684338e203cb2ccff6e451eda5705e10043d386b7ed55d4732d23eb5c77b
-model-00043-of-00131.safetensors 1000455912 bab92cfefbb811ee63c4e32595024117c7df3537f5359606eb1de23fe4f115b2
-model-00044-of-00131.safetensors 1678211256 1d05f138848edca4138c3d1c6be4a432a0817eb29fa65f12d8611ecc7685c493
-model-00045-of-00131.safetensors 993902176 4610384e28f7a91b8bf2a1527178c82cbe7d50ecd9a33b61ee878fa8e8bced85
-model-00046-of-00131.safetensors 1678211256 5ee9b0e45810300cbd4fd6f2acfe85080e7032a9ce5d77038b86f357b6700c23
-model-00047-of-00131.safetensors 878065752 efa6c0cc0e527486dc5955b00fa75665151d99997b722d8e56bd32da575e414c
-model-00048-of-00131.safetensors 1678211256 57b148a266c55a896f171b5c98b350092bf394c1fb836658c58c589a0a317ccf
-model-00049-of-00131.safetensors 1096817160 801dd3b475b43413ade810f4e8d3ace69d6ef5ee4bac5cb98d15e369343a5569
-model-00050-of-00131.safetensors 1678211256 b4d00aca34ba7a9f8427983fd0829408fb5e15b2bb7268199e4010bf0c460a04
-model-00051-of-00131.safetensors 993902176 f430125e9ac92c2de15bbb74bcd3c91bc5374eef389a1be1bc4a592f3a082f0c
-model-00052-of-00131.safetensors 1678211256 06c3d64136b097919b7e5a1715a70a60b8c2302fc4e80a33235607bb99d00f35
-model-00053-of-00131.safetensors 1000455920 147d38f786512f1a8f570a00100b46a3faab1bd649b3445ca0a50c00aa2e99a3
-model-00054-of-00131.safetensors 1678211256 31c08218039a246c333bfe0b068b8027fd92dddd542e581997af546eb104dd4d
-model-00055-of-00131.safetensors 877983696 971cd69c8d955bef6d557ebab3f170807a599517f7c69e9d8a6ba375214137f4
-model-00056-of-00131.safetensors 1678211256 a6a975ac346aa3bd1176cb816d8bbd31a4d7542aa3de9306ca5899bea44bd159
-model-00057-of-00131.safetensors 1103350288 d6acae1622abfa1e0253ae548bc1bdd4bc38cd9b096082acd455b6be592f4a54
-model-00058-of-00131.safetensors 1678209208 f02b6bd8f5cbd742e8bac3ba9537aa14a64c5a8f3fc75495227a14e1a5cec4ec
-model-00059-of-00131.safetensors 877982872 f3e2c94b8157a021b27e1efdb659333a8d1db330da5cd72ab9012fa0e5351506
-model-00060-of-00131.safetensors 1794100080 908cce7f5fe8dc34f4cca1fc8a676569ab6ce08bad536bd0091c4d75e7b65a05
-model-00061-of-00131.safetensors 1678211256 718532c88f4b7a4f402a50e4f1b6efc3cf71484c9e5a083ee30e96d5094a1bb3
-model-00062-of-00131.safetensors 1832994688 3c21b895a5a4f0dc03b669c730f8d8d9ce9a29cbc7628a25894a16ffda6f0a7a
-model-00063-of-00131.safetensors 1678211256 91d215e2135b2f5db5bc5a9541e5f6bf761205d67c6e7b8955ac73c815198f58
-model-00064-of-00131.safetensors 993902176 03a11cad2c283fb9752c6ac01c8f1d8b3127dcda963c5a8225b78f567239d872
-model-00065-of-00131.safetensors 1678211256 0f2f96331120779ce1ebd3f957882092d3c733aa9a6073ca87fc86c6eb4e9465
-model-00066-of-00131.safetensors 880605240 5dbe501e4e0cb9e3f37cc43da46673b4157fdffba09c065ca0b12d75092a79f2
-model-00067-of-00131.safetensors 1678211256 3ece325d2ca53eddf7b1782d5bbc4c376bc75c6d3da67813e110fd0af67cd09b
-model-00068-of-00131.safetensors 1096796552 0c5ef706afd6b3058af5bf8fdc1e0938cb6e29d0a526c771893c9dcb8e702463
-model-00069-of-00131.safetensors 1678211256 84999b24e3c55d2eae3ca187219a2e1a1872436ae9bafc91cc3e301180f36cfd
-model-00070-of-00131.safetensors 993907416 eac7940317ee401859caf38089b2b924274ab81a3e5fbd87c42d89923361aad8
-model-00071-of-00131.safetensors 1678211256 5ac60e474ccdab21257245630ed8240d75bc7115b3adb27ca65e39eb9ea8f20e
-model-00072-of-00131.safetensors 1000456024 b50a05c4c426fb00635d513a733a290da1007a89b8785f1ec02aad8e4d93d955
-model-00073-of-00131.safetensors 1678211256 9e0594d389debdfb26d22259725831ff34280edeef4144e683d70205050919d9
-model-00074-of-00131.safetensors 877983696 1b1a0294f8df2a431885783185cdb185106228c9567e67224fe2c3c6a2467f5a
-model-00075-of-00131.safetensors 1678211256 7dba189804ef7a8f9d926b27e1ddbe73767f1213cb7bb3cc582ab15fffec1792
-model-00076-of-00131.safetensors 1100073480 d95ebacb144b4220f2df60cce85a2c86e87cb8291b836d1bd04f9902fcbb9297
-model-00077-of-00131.safetensors 1678211256 26046977983e025defdf0f84cf5fc5f4ddfeabbd27e7abc43ff2b413265ab062
-model-00078-of-00131.safetensors 993984232 6fd46a95777392265b2afa66bf71d488856dafb7b76ff0337a0fe4ac857e961c
-model-00079-of-00131.safetensors 1678211256 77398002634ce852917c59cd642bec7dd3903381239da68912bf69743631e54e
-model-00080-of-00131.safetensors 877983688 f44aad95d36c443995b965aeef844c8e3a30ed172647dc57fcc0c5476c18d024
-model-00081-of-00131.safetensors 1678209208 b295a48088573654d1b4754e861ec329956504cb6687e9e2a8eb652b35eaf988
-model-00082-of-00131.safetensors 1096816112 83e0e171116c22eb8fdddfa3c387bebb9017eb0586410fd704ce70e7b3d23d68
-model-00083-of-00131.safetensors 1678211256 7e1021cde06c970e4b1d9eb3d02f66f29786c59a0da8a3f8879de1a4e3fbf6c0
-model-00084-of-00131.safetensors 877983696 8938fd3c7f88d61fd5b5306eb0ab253d3e42e7f64baf3c3e494d315c8ad5ab55
-model-00085-of-00131.safetensors 1678211256 cd5875a29d28d52578ae699fdd8891f605a0953cd64516bd88dc45dab50c383a
-model-00086-of-00131.safetensors 1103350296 885e570a662aaf266fd9af9562c65116998df5710b2a27d1bf6aa0c8708b3b74
-model-00087-of-00131.safetensors 1678211256 1472604826f0a0c2bbf7cd0f4a0c5b29f3012e4b3a4424d024d1ec17a3c9d0ea
-model-00088-of-00131.safetensors 1000455920 e7273f5435571e761429330ece81732e8fb3f8b5f0087bf80db693630cf702a1
-model-00089-of-00131.safetensors 1678211256 eb349562d23e330bbbd0a5f5ba90ac25ed0baa660dff230538a0fcaaf4c8b875
-model-00090-of-00131.safetensors 997179104 532915eebd4e231a240e185ba838a95a00ee14277e28fb04ad21508da5ff50aa
-model-00091-of-00131.safetensors 1678211256 68d8f46ffcd0ff46f4e73c848525cc6fd6af15eebbb9311ce9b4eb14638f5660
-model-00092-of-00131.safetensors 877983696 91abc087cd244ae62b8469576e209c8e25bc7726bc4fc020b687378059f5b5bd
-model-00093-of-00131.safetensors 1678211256 dacd0f2e5215fbf18fb7c6803f61963333e6243f404de83fcd5dfd38f43fe0d1
-model-00094-of-00131.safetensors 1096796928 cac515a778e89fb37e9f38fde6c8fdfa01ebf9d8944a2d6ff35c51ecf4bc875f
-model-00095-of-00131.safetensors 1678211256 a35975c2d21f18d58f21cb59e4eaf34a4bce11440e5112948e7fa6923658f8c4
-model-00096-of-00131.safetensors 993902176 03fd77f9d35024bba9e894c811300ef8aaf5b5ff99ebc2c89c9d9f87685adfe8
-model-00097-of-00131.safetensors 1678211256 f7b81ae09d97b8e2bb96a1916ede51da92209ec8481a31c56fb446acd691b8a8
-model-00098-of-00131.safetensors 993902176 70f208f47d99c25d5413cd32e0553cce22524cd3863c7797e2cfa37c2d526319
-model-00099-of-00131.safetensors 1678211256 de5c33dd717495657496067ea715442356fd9f7b64384d1a4c10c9f8fe6f9b7d
-model-00100-of-00131.safetensors 877984072 43752e81a5c2b376073d5d0d7b70da8d08c49bdbbfcfeb695ea947a2913e4bc8
-model-00101-of-00131.safetensors 1678211256 c2e978f7238036063914fe909214246730640be77eca215e3cf66d65724de9f1
-model-00102-of-00131.safetensors 1096797160 639efed3ea400a8dddeae25db120096898a514697dfc4cbbc0cd15f621c18421
-model-00103-of-00131.safetensors 1678209208 f8da1b61296e012dc268b4f0d84c127ef0967df488fe65b037f74c8f893decd1
-model-00104-of-00131.safetensors 993901144 adff0f2aee7b7b701e39247cfdfa135c0cab8dfa4f8c7662352c0233adb78829
-model-00105-of-00131.safetensors 1678211256 6643d71382f00f7ffe16b05879e6ff0f6e56986dee8ec079a84aae82912c6987
-model-00106-of-00131.safetensors 1025359600 680495ea0a23e73844e91670437b7b2a5ac5d46f9582923fb7fa91fe640821df
-model-00107-of-00131.safetensors 1678211256 886528d121b77433c1d66654294c13b4f61a004f1e6d1abf2d445fb0a99f7234
-model-00108-of-00131.safetensors 1062060032 a966c28a6267d43052fe87cb19e2e5730bad6154b12eb806b9ce49e007bfec96
-model-00109-of-00131.safetensors 1678211256 f6074252e492ee5b0933f78cc48f3b90694a8096befb7666cc379c3d47093756
-model-00110-of-00131.safetensors 877983696 e3e45e96bc13b52b748a0e2f397a624ad49958396468667d73ed4d725c8b5c1c
-model-00111-of-00131.safetensors 1678211256 d1d354e691eab0b77607faf7eb4adf00a75ee7f270c1cbcbad06aefc19aeac94
-model-00112-of-00131.safetensors 1096797168 e61a9a6ef0e538afca09d97a3ccbf3e7e2c647f65cc8eeebebb18621d7779b02
-model-00113-of-00131.safetensors 1678211256 a14b94db5326bfaab1d8029296b8938f6daf91ba2dc07a4950a38afafa84f776
-model-00114-of-00131.safetensors 993907400 ce4aeac52776038ec0c885915bb270dc65ee07d70d5f71827d5fba1045e2b43b
-model-00115-of-00131.safetensors 1678211256 8185d8822428d2125876a9aa05aea11c8165713bc99e04ace29921eef0e1b683
-model-00116-of-00131.safetensors 993902176 65954dccfa3be20611728311d97679e7f5d78ad519e52312524aa7cf666a48e5
-model-00117-of-00131.safetensors 1678211256 12c8027363b1a7bb782282293314fa57b07be27d17670861858c0aed1e28a3ac
-model-00118-of-00131.safetensors 878004272 2d06ec9c1726f42bfc9ce0bbb47129917d8ab373c88eed4e758fb6940c92ad4a
-model-00119-of-00131.safetensors 1678211256 36008b48c4480085bfd1a81439d70d1029cfaf06cfdd037cec19b491a40659ec
-model-00120-of-00131.safetensors 1109903856 49e4f90d92f60f6489bfe6d3e5250d8fe879c5995ae72ce67379cc7187fa4b0a
-model-00121-of-00131.safetensors 1678209208 ae8e07cceeef2f568df035a7bc0c555656acb566ba5936f61a8a019df23361ad
-model-00122-of-00131.safetensors 993901136 b3b21d33b925e31d475a509757cf7459aa4d3e73cb493706f40461387541e137
-model-00123-of-00131.safetensors 1678209208 f32fec30685afadd76f09bbb1dda680445ad765a97ff1febfc3122b7f73d7ec3
-model-00124-of-00131.safetensors 891089968 e857f36ddd0db135f858c2c87c9fcf39c758965c626b280e47cb0c1e6c1423f8
-model-00125-of-00131.safetensors 1678209208 b9de3774218d3cd7946cdbf913dedfc82591c18212d9c3fc9b9484e7dc68e9fe
-model-00126-of-00131.safetensors 1096795496 29b39319522a00b1ef4ac909c4fb306059999f0a48fd07ca73cea687647631ee
-model-00127-of-00131.safetensors 1678209208 bf48ccb3b4ba75c288d9db2b94817c6a3993e9f84a5b9410d9f24edcec12e177
-model-00128-of-00131.safetensors 993901136 7feaa51c906a1a735e5fb52fd5499b59c473d442d77b44cbd610c9b6a3a9e0ba
-model-00129-of-00131.safetensors 1678209208 a5374c8d86aea48f21a4be2ad6cda37fbfbb01eff333d1179939a2e55d8db816
-model-00130-of-00131.safetensors 2136177320 204b122d02425f61115db9ab896648d95f6dadd6a716c65daf6aec297392ed56
-model-00131-of-00131.safetensors 1271398496 ba6fc69ebb6a9da1938c2e041b8ef625f4550b641812da75845bc7dd7c361d80
-model.safetensors.index.json 17410140 0419e2c2dfbb925257d7409405433a793cf7ff7d96f3eba882a815ec6d9fe7a6
-preprocessor_config.json 390 
-tokenizer.json 12809320 0997f410c57a1f4e53b09e4be8f4a172d90edd9564368fb0847030937229b9f3
-tokenizer_config.json 17928 
-video_preprocessor_config.json 385 
-vocab.json 6722759 
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# bench-frank-dragoon.sh — 64k-context benchmark for the frank-default-large stack.
+# bench-frank-large.sh — 64k-context benchmark for the frank-default-large stack.
 #
 # Measures generation throughput of Qwen3.6-27B Q8_K_P + DFlash + ngram-mod on
 # a single backend at 64k context. It starts llama-server on a scratch port,
@@ -7,15 +7,15 @@
 # prompt, and prints tokens/sec.
 #
 # Usage:
-#   ./scripts/bench-frank-dragoon.sh <ROCm0|Vulkan0> [--generations N]
+#   ./scripts/bench-frank-large.sh <ROCm0|Vulkan0> [--generations N]
 #
 # Example:
-#   ./scripts/bench-frank-dragoon.sh ROCm0
-#   ./scripts/bench-frank-dragoon.sh Vulkan0 --generations 3
+#   ./scripts/bench-frank-large.sh ROCm0
+#   ./scripts/bench-frank-large.sh Vulkan0 --generations 3
 set -euo pipefail

 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-DEVICE="${1:?usage: bench-frank-dragoon.sh <ROCm0|Vulkan0> [--generations N]}"
+DEVICE="${1:?usage: bench-frank-large.sh <ROCm0|Vulkan0> [--generations N]}"
 GENERATIONS=1
 if [ "${2:-}" = "--generations" ]; then
    GENERATIONS="${3:?--generations needs a count}"
@@ -41,7 +41,7 @@ SERVICE_HEALTH[dankclaw]="http://127.0.0.1:7770/health"
 # Drop page caches before restart: with the model's pages fully cached, the
 # KV/graph allocation stalls at load (VRAM stuck at 28 GiB). See AGENTS.md.
 DROP_CACHES[dankclaw]=1
-# Passwordless restart helper (root-owned, installed via /etc/sudoers.d/frank-dragoon).
+# Passwordless restart helper (root-owned, installed via /etc/sudoers.d/frank-large).
 # When present, deploy.sh uses it instead of inline sudo commands.
 HELPER[dankclaw]="/usr/local/sbin/frank-restart-large.sh"
 # Health wait in iterations of 2s. Cold loads after the cache drop measured
@@ -1,6 +1,6 @@
-# Tunables for the Ling-3.0-flash TRAIL on dankclaw (frank-dragoon-ling).
+# Tunables for the Ling-3.0-flash TRAIL on dankclaw (frank-large-ling).
 # This REPLACES frank-default-large (Qwen3.6-27B) temporarily. To switch
-# back: systemctl stop frank-dragoon-ling && systemctl start frank-default-large.
+# back: systemctl stop frank-large-ling && systemctl start frank-default-large.
 # Runtime: llama.cpp FORK bailingmoe3-support; Vulkan + AMD GTT.
 #
 # Memory model (amdgpu Strix Halo gfx1151, 8x16GB LPDDR5 = 128 GiB physical):
@@ -1,5 +1,5 @@
 [Unit]
-Description=llama.cpp Ling-3.0-flash Q6_K Vulkan+MTP (frank-dragoon-ling TRIAL)
+Description=llama.cpp Ling-3.0-flash Q6_K Vulkan+MTP (frank-large-ling TRIAL)
 After=network.target

 [Service]
@@ -8,7 +8,7 @@
 # Vulkan exposes as an ~111 GiB heap). MTP drafter is bundled in the same
 # GGUF (block 42) - no separate --spec-draft-model needed.
 #
-# Tie-back: to restore the Qwen3.6-27B service, stop frank-dragoon-ling and
+# Tie-back: to restore the Qwen3.6-27B service, stop frank-large-ling and
 # start frank-default-large (its env/unit are committed and unchanged).
 #
 # Tunables come from frank-default-large.ling.env in this directory unless
@@ -4,11 +4,11 @@
 # Runtime: llama.cpp llama-server (>= b10411).
 #
 # Tunables come from frank-default-large.env in this directory unless the
-# FRANK_DRAGOON_ENV_FILE environment variable overrides that path.
+# FRANK_LARGE_ENV_FILE environment variable overrides that path.
 set -euo pipefail

 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-ENV_FILE="${FRANK_DRAGOON_ENV_FILE:-$SCRIPT_DIR/frank-default-large.env}"
+ENV_FILE="${FRANK_LARGE_ENV_FILE:-$SCRIPT_DIR/frank-default-large.env}"
 if [[ -f "$ENV_FILE" ]]; then
    set -a
    # shellcheck disable=SC1090
@@ -1,86 +0,0 @@
-# Subsurface Aquifer Monitoring Network - System Design Document (Revision 7)
-
-This document describes the deployment of a subsurface aquifer monitoring network for the Cascadia sedimentary basin. It is written for the operations crew and the regional water authority. Every sensor node, relay, aggregation service, calibration procedure, and failure mode below carries a stable alphanumeric identifier that appears in every table and in the field notes.
-
-## Sensor nodes
-Node SN-000-08B9 sits in a discharge lens at 359.0 m below datum and reports a salinity of 2.38 ppt with the fractured interval reading 5.40 degC at dawn and the wellhead porous 1.72 m3/d while the electrode pair returns 3157 uS/cm.
-Node SN-001-0A65 sits in a percolate lens at 25.9 m below datum and steps down to a salinity of 2.13 ppt with the diapir interval reading 8.55 degC at dawn and the wellhead silty 0.67 m3/d while the electrode pair returns 979 uS/cm.
-Node SN-002-0571 sits in a diapir lens at 287.8 m below datum and peaks at a salinity of 7.63 ppt with the karst interval reading 4.26 degC at dawn and the wellhead spooned 11.50 m3/d while the electrode pair returns 2987 uS/cm.
-Node SN-003-0CE9 sits in a confining lens at 169.5 m below datum and logs a salinity of 0.96 ppt with the alluvial interval reading 5.03 degC at dawn and the wellhead salinized 12.08 m3/d while the electrode pair returns 2607 uS/cm.
-Node SN-004-0E2A sits in a freshened lens at 70.4 m below datum and settles near a salinity of 8.68 ppt with the spooned interval reading 4.88 degC at dawn and the wellhead siphon 4.38 m3/d while the electrode pair returns 2707 uS/cm.
-Node SN-005-0DDD sits in a percolate lens at 44.6 m below datum and reports a salinity of 6.25 ppt with the alluvial interval reading 10.85 degC at dawn and the wellhead brackish 13.99 m3/d while the electrode pair returns 3618 uS/cm.
-Node SN-006-0EFC sits in a till lens at 309.5 m below datum and reports a salinity of 3.49 ppt with the lacustrine interval reading 7.38 degC at dawn and the wellhead spooned 3.21 m3/d while the electrode pair returns 1253 uS/cm.
-Node SN-007-0B02 sits in a recharge lens at 262.0 m below datum and steps down to a salinity of 2.38 ppt with the discharge interval reading 8.18 degC at dawn and the wellhead perched 4.05 m3/d while the electrode pair returns 3900 uS/cm.
-Node SN-008-0448 sits in a karst lens at 406.5 m below datum and reports a salinity of 7.32 ppt with the upconing interval reading 6.17 degC at dawn and the wellhead fluvial 0.75 m3/d while the electrode pair returns 1448 uS/cm.
-Node SN-009-043C sits in a alluvial lens at 159.3 m below datum and flags a salinity of 6.20 ppt with the percolate interval reading 7.60 degC at dawn and the wellhead brackish 13.01 m3/d while the electrode pair returns 2025 uS/cm.
-Node SN-010-0FF5 sits in a karst lens at 264.2 m below datum and flags a salinity of 7.05 ppt with the freshened interval reading 7.88 degC at dawn and the wellhead siphon 8.41 m3/d while the electrode pair returns 1635 uS/cm.
-Node SN-011-098A sits in a drain lens at 365.7 m below datum and reports a salinity of 8.11 ppt with the wedge interval reading 5.51 degC at dawn and the wellhead glacial 2.52 m3/d while the electrode pair returns 2916 uS/cm.
-Node SN-012-0AE8 sits in a till lens at 259.6 m below datum and steps down to a salinity of 9.13 ppt with the recharge interval reading 11.60 degC at dawn and the wellhead spooned 0.46 m3/d while the electrode pair returns 3077 uS/cm.
-Node SN-013-0B83 sits in a salinized lens at 171.2 m below datum and peaks at a salinity of 2.83 ppt with the lacustrine interval reading 5.56 degC at dawn and the wellhead discharge 0.35 m3/d while the electrode pair returns 3083 uS/cm.
-Node SN-014-032E sits in a drain lens at 249.6 m below datum and flags a salinity of 1.09 ppt with the salinized interval reading 9.58 degC at dawn and the wellhead perched 12.00 m3/d while the electrode pair returns 2221 uS/cm.
-Node SN-015-004F sits in a aeolian lens at 264.4 m below datum and reports a salinity of 7.34 ppt with the salinized interval reading 8.76 degC at dawn and the wellhead perched 0.31 m3/d while the electrode pair returns 1483 uS/cm.
-Node SN-016-07C6 sits in a aeolian lens at 155.9 m below datum and reports a salinity of 0.64 ppt with the mineralized interval reading 11.75 degC at dawn and the wellhead diluted 13.46 m3/d while the electrode pair returns 524 uS/cm.
-Node SN-017-06C5 sits in a salinized lens at 72.1 m below datum and averages a salinity of 4.52 ppt with the siphon interval reading 8.93 degC at dawn and the wellhead confining 3.98 m3/d while the electrode pair returns 3687 uS/cm.
-Node SN-018-0E64 sits in a siphon lens at 334.9 m below datum and steps down to a salinity of 6.73 ppt with the salinized interval reading 7.63 degC at dawn and the wellhead freshened 9.64 m3/d while the electrode pair returns 1681 uS/cm.
-Node SN-019-0122 sits in a spooned lens at 117.2 m below datum and logs a salinity of 3.24 ppt with the fractured interval reading 9.26 degC at dawn and the wellhead karst 3.50 m3/d while the electrode pair returns 1065 uS/cm.
-Node SN-020-021D sits in a karst lens at 414.3 m below datum and recovers to a salinity of 0.76 ppt with the glacial interval reading 6.25 degC at dawn and the wellhead silty 9.60 m3/d while the electrode pair returns 1041 uS/cm.
-Node SN-021-06C6 sits in a percolate lens at 379.2 m below datum and drifts to a salinity of 7.61 ppt with the wedge interval reading 5.84 degC at dawn and the wellhead karst 1.65 m3/d while the electrode pair returns 1913 uS/cm.
-Node SN-022-0DC9 sits in a spooned lens at 327.1 m below datum and reports a salinity of 9.25 ppt with the freshened interval reading 5.05 degC at dawn and the wellhead silty 5.90 m3/d while the electrode pair returns 1544 uS/cm.
-Node SN-023-0717 sits in a karst lens at 222.0 m below datum and steps down to a salinity of 4.02 ppt with the alluvial interval reading 6.60 degC at dawn and the wellhead siphon 3.77 m3/d while the electrode pair returns 3892 uS/cm.
-Node SN-024-02A9 sits in a fractured lens at 479.7 m below datum and drifts to a salinity of 7.88 ppt with the silty interval reading 12.53 degC at dawn and the wellhead discharge 13.18 m3/d while the electrode pair returns 3592 uS/cm.
-Node SN-025-0C8F sits in a wedge lens at 434.3 m below datum and holds a salinity of 1.63 ppt with the alluvial interval reading 4.22 degC at dawn and the wellhead till 5.73 m3/d while the electrode pair returns 3905 uS/cm.
-Node SN-026-04BF sits in a colluvial lens at 460.0 m below datum and averages a salinity of 9.36 ppt with the diapir interval reading 8.98 degC at dawn and the wellhead brackish 10.29 m3/d while the electrode pair returns 802 uS/cm.
-Node SN-027-0DA4 sits in a silty lens at 265.7 m below datum and steps down to a salinity of 7.06 ppt with the percolate interval reading 4.69 degC at dawn and the wellhead freshened 8.42 m3/d while the electrode pair returns 2201 uS/cm.
-Node SN-028-01EB sits in a perched lens at 49.5 m below datum and recovers to a salinity of 1.83 ppt with the silty interval reading 9.32 degC at dawn and the wellhead drain 9.69 m3/d while the electrode pair returns 1126 uS/cm.
-Node SN-029-042C sits in a karst lens at 30.6 m below datum and averages a salinity of 0.86 ppt with the percolate interval reading 9.85 degC at dawn and the wellhead recharge 8.16 m3/d while the electrode pair returns 1452 uS/cm.
-
-## Relays
-Relay RL-00-02181 reburses the upconing trunk from the brackish margin and peaks at a round-trip time of 131.8 ms with a frame loss of 1.04 percent across the night window.
-Relay RL-01-00262 reburses the spooned trunk from the fluvial margin and holds a round-trip time of 372.2 ms with a frame loss of 3.65 percent across the night window.
-Relay RL-02-03691 reburses the recharge trunk from the percolate margin and steps down to a round-trip time of 398.5 ms with a frame loss of 0.29 percent across the night window.
-Relay RL-03-0E117 reburses the lacustrine trunk from the confining margin and averages a round-trip time of 373.9 ms with a frame loss of 3.44 percent across the night window.
-Relay RL-04-0B41B reburses the aeolian trunk from the colluvial margin and peaks at a round-trip time of 70.7 ms with a frame loss of 3.25 percent across the night window.
-Relay RL-05-0D12D reburses the recharge trunk from the diluted margin and steps down to a round-trip time of 264.7 ms with a frame loss of 0.03 percent across the night window.
-Relay RL-06-043B4 reburses the colluvial trunk from the upconing margin and reports a round-trip time of 49.5 ms with a frame loss of 3.42 percent across the night window.
-Relay RL-07-09AD6 reburses the fractured trunk from the freshened margin and averages a round-trip time of 225.3 ms with a frame loss of 1.06 percent across the night window.
-Relay RL-08-04394 reburses the brackish trunk from the fluvial margin and steps down to a round-trip time of 88.6 ms with a frame loss of 2.47 percent across the night window.
-Relay RL-09-017A0 reburses the wedge trunk from the lacustrine margin and drifts to a round-trip time of 363.0 ms with a frame loss of 3.30 percent across the night window.
-Relay RL-10-0217D reburses the mineralized trunk from the lacustrine margin and peaks at a round-trip time of 26.2 ms with a frame loss of 1.30 percent across the night window.
-Relay RL-11-08F97 reburses the perched trunk from the freshened margin and logs a round-trip time of 181.8 ms with a frame loss of 2.75 percent across the night window.
-Relay RL-12-02628 reburses the fractured trunk from the glacial margin and steps down to a round-trip time of 378.5 ms with a frame loss of 2.69 percent across the night window.
-Relay RL-13-06E06 reburses the silty trunk from the mineralized margin and flags a round-trip time of 153.4 ms with a frame loss of 2.15 percent across the night window.
-
-## Aggregation services
-Aggregator AG-00-3BB logs a queue depth of 5.2 messages and a histogram bucket of 6.82 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-01-0FF reports a queue depth of 86.4 messages and a histogram bucket of 4.10 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-02-37F drifts to a queue depth of 34.7 messages and a histogram bucket of 10.25 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-03-3B3 averages a queue depth of 93.5 messages and a histogram bucket of 13.59 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-04-33E flags a queue depth of 83.2 messages and a histogram bucket of 17.58 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-05-2F2 settles near a queue depth of 84.8 messages and a histogram bucket of 0.84 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-06-2AD averages a queue depth of 75.4 messages and a histogram bucket of 7.65 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-07-06E drifts to a queue depth of 26.5 messages and a histogram bucket of 14.26 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-08-0E3 averages a queue depth of 83.9 messages and a histogram bucket of 15.51 seconds before the dedupe pass settles the stream for the next rotation.
-Aggregator AG-09-138 averages a queue depth of 78.6 messages and a histogram bucket of 8.50 seconds before the dedupe pass settles the stream for the next rotation.
-
-## Calibration procedures
-Procedure CP-00-047 steps the probe through a two-point rinse, then applies a trim of 0.2084 at the 66 milli-bar mark and records a residual of 0.02052 before the next field seal is crimped.
-Procedure CP-01-0A4 steps the probe through a two-point rinse, then applies a trim of 0.7793 at the 96 milli-bar mark and records a residual of 0.01468 before the next field seal is crimped.
-Procedure CP-02-054 steps the probe through a two-point rinse, then applies a trim of 0.4634 at the 68 milli-bar mark and records a residual of 0.04234 before the next field seal is crimped.
-Procedure CP-03-02D steps the probe through a two-point rinse, then applies a trim of 0.8459 at the 12 milli-bar mark and records a residual of 0.04855 before the next field seal is crimped.
-Procedure CP-04-098 steps the probe through a two-point rinse, then applies a trim of 0.5267 at the 97 milli-bar mark and records a residual of 0.00287 before the next field seal is crimped.
-Procedure CP-05-09B steps the probe through a two-point rinse, then applies a trim of 0.3968 at the 72 milli-bar mark and records a residual of 0.01637 before the next field seal is crimped.
-Procedure CP-06-030 steps the probe through a two-point rinse, then applies a trim of 0.8860 at the 12 milli-bar mark and records a residual of 0.04508 before the next field seal is crimped.
-Procedure CP-07-0EC steps the probe through a two-point rinse, then applies a trim of 0.2367 at the 70 milli-bar mark and records a residual of 0.00108 before the next field seal is crimped.
-Procedure CP-08-0BC steps the probe through a two-point rinse, then applies a trim of 0.7278 at the 68 milli-bar mark and records a residual of 0.04707 before the next field seal is crimped.
-Procedure CP-09-0AA steps the probe through a two-point rinse, then applies a trim of 0.6069 at the 37 milli-bar mark and records a residual of 0.00443 before the next field seal is crimped.
-
-## Failure modes
-Mode FM-00-27 declares a fluvial excursion when two independent probes disagree beyond the band for three rotations; the fleet reports a mean time between failures of 36902 hours for this class of excursion.
-Mode FM-01-13 declares a drain excursion when two independent probes disagree beyond the band for three rotations; the fleet peaks at a mean time between failures of 29042 hours for this class of excursion.
-Mode FM-02-14 declares a till excursion when two independent probes disagree beyond the band for three rotations; the fleet peaks at a mean time between failures of 26976 hours for this class of excursion.
-Mode FM-03-0C declares a diapir excursion when two independent probes disagree beyond the band for three rotations; the fleet drifts to a mean time between failures of 22578 hours for this class of excursion.
-Mode FM-04-39 declares a perched excursion when two independent probes disagree beyond the band for three rotations; the fleet recovers to a mean time between failures of 27383 hours for this class of excursion.
-Mode FM-05-19 declares a siphon excursion when two independent probes disagree beyond the band for three rotations; the fleet logs a mean time between failures of 23152 hours for this class of excursion.
-
-## End of document
-Summarize the network's dominant risk in one paragraph, then list the three node identifiers whose readings most limit the model this month.
@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-Decode throughput benchmark for frank-dragoon.
+Decode throughput benchmark for frank-large.
 Starts the server with a given --threads-batch value, sends an 8K+ token prompt,
 generates 256 tokens, measures generation tok/s.

@@ -13,12 +13,12 @@ SERVE = "/home/dank/GitPackages/ROCmFPX/build-qwen38/bin/llama-server"
 PORT = 7770
 N_GEN = 256
 PROMPT_FILE = "/tmp/bench-prompts/prompt_code.txt"
-ENV_FILE = os.path.join(os.path.dirname(__file__), "frank-dragoon.env")
+ENV_FILE = os.path.join(os.path.dirname(__file__), "frank-large.env")
 SERVER_DIR = os.path.dirname(SERVE)
 ROCM_PATH = "/opt/rocm"

 def make_env():
-    """Build the same env as serve-frank-dragoon.sh."""
+    """Build the same env as serve-frank-large.sh."""
    env = {**os.environ, "HSA_OVERRIDE_GFX_VERSION": "11.5.1", "HIP_VISIBLE_DEVICES": "0"}
    
    # Source env file for tunables
@@ -59,7 +59,7 @@ def wait_ready():
 def send_request(prompt, max_tokens=N_GEN):
    """Send chat completion, measure generation throughput."""
    body = json.dumps({
-        "model": "frank-dragoon",
+        "model": "frank-large",
        "messages": [{"role": "user", "content": prompt}],
        "max_tokens": max_tokens,
        "stream": False,
@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-Benchmark n-gram speculative decoding vs no-spec for frank-dragoon.
+Benchmark n-gram speculative decoding vs no-spec for frank-large.

 Tests prompt-processing throughput with 16K token prompts (manageable request size).
 Code-heavy prompt (high n-gram redundancy) vs prose prompt (low redundancy).
@@ -103,7 +103,7 @@ def start_server(port, spec_type):
 def run_test(prompt_text, spec_type, port):
    """Send a request and extract prompt processing metrics."""
    data = json.dumps({
-        "model": "frank-dragoon",
+        "model": "frank-large",
        "messages": [{"role": "user", "content": prompt_text}],
        "max_tokens": TEST_TOKENS,
        "stream": False,
@@ -189,7 +189,7 @@ def main():
        print(f"  Prose: {prose_prompt_file.stat().st_size:,} bytes")

    print("=" * 60)
-    print("  N-gram Mod Benchmark — frank-dragoon")
+    print("  N-gram Mod Benchmark — frank-large")
    print(f"  STRIX ROCmFP4 · 64K context · 16K prompts")
    print("=" * 60)

@@ -1,19 +1,19 @@
 #!/usr/bin/env bash
-# Benchmark n-gram speculative decoding vs no-spec for frank-dragoon.
+# Benchmark n-gram speculative decoding vs no-spec for frank-large.
 #
 # This tests prompt-processing throughput at 64k context with two distinct
 # prompts: one code-heavy and one prose-heavy. Uses llama-server on scratch
 # ports with the OpenAI-compatible API to measure prompt_eval_duration_ms.
 #
 # Run on Dankclaw after stopping the production service:
-#   sudo systemctl stop frank-dragoon
+#   sudo systemctl stop frank-large
 #   ./scripts/bench-ngram-mod.sh
-#   sudo systemctl start frank-dragoon
+#   sudo systemctl start frank-large

 set -euo pipefail

 SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
-ENV_FILE="${FRANK_DRAGOON_ENV_FILE:-$SCRIPT_DIR/frank-dragoon.env}"
+ENV_FILE="${FRANK_LARGE_ENV_FILE:-$SCRIPT_DIR/frank-large.env}"
 if [[ -f "$ENV_FILE" ]]; then
    set -a; source "$ENV_FILE"; set +a
 fi
@@ -184,7 +184,7 @@ run_single_test() {
    response=$(curl -s -X POST "http://127.0.0.1:$port/v1/completions" \
        -H "Content-Type: application/json" \
        -d "{
-            \"model\": \"frank-dragoon\",
+            \"model\": \"frank-large\",
            \"prompt\": \"$prompt_text\",
            \"max_tokens\": 128,
            \"temperature\": 0,
@@ -220,7 +220,7 @@ run_single_test() {
 }

 echo "╔══════════════════════════════════════════════════════════╗"
-echo "║  N-gram Mod Benchmark — frank-dragoon             ║"
+echo "║  N-gram Mod Benchmark — frank-large             ║"
 echo "║  STRIX ROCmFP4 · 64k context · two prompts             ║"
 echo "╚══════════════════════════════════════════════════════════╝"
 echo ""
@@ -15,9 +15,9 @@ import time
 import urllib.request
 import urllib.error

-SERVICE = "frank-dragoon"
-ENV_FILE = "/home/dank/serverAppConfigs/scripts/frank-dragoon.env"
-ALIAS = "frank-dragoon"
+SERVICE = "frank-large"
+ENV_FILE = "/home/dank/serverAppConfigs/scripts/frank-large.env"
+ALIAS = "frank-large"
 DEFAULT_HOST = "localhost"
 DEFAULT_PORT = 7770
 DEFAULT_MAX_TOKENS = 16384
@@ -1,4 +1,4 @@
-# Tunables for frank-dragoon (mradermacher i1-Q4_K_M of
+# Tunables for frank-large (mradermacher i1-Q4_K_M of
 # orcarouter/Qwen3.8-Flash-Next-Uncensored on ik_llama.cpp, Dankclaw,
 # RTX 3090 CUDA + Strix Halo CPU path, since 2026-09-15).
 #
@@ -65,7 +65,7 @@ MMPROJ_PATH=/home/dank/models/mradermacher-Qwen3.8-Flash-Next-Uncensored-i1-Q4_K
 CHAT_TEMPLATE_FILE=/home/dank/serverAppConfigs/scripts/chat-template.jinja

 # Alias + network.
-ALIAS=frank-dragoon
+ALIAS=frank-large
 BIND_ADDR=0.0.0.0
 LISTEN_PORT=7770

@@ -1,5 +1,5 @@
 [Unit]
-Description=ik_llama.cpp Qwen3.8-Flash-Next-Uncensored i1-Q4_K_M 177B MoE (dankclaw, frank-dragoon)
+Description=ik_llama.cpp Qwen3.8-Flash-Next-Uncensored i1-Q4_K_M 177B MoE (dankclaw, frank-large)
 After=network-online.target
 Wants=network-online.target

@@ -12,8 +12,8 @@ Group=dank
 # budget still needs room. Parity with the halogen quadlet's
 # Ulimit=memlock=-1:-1.
 LimitMEMLOCK=infinity
-Environment="FRANK_DRAGOON_ENV_FILE=/home/dank/serverAppConfigs/scripts/frank-dragoon.env"
-ExecStart=/home/dank/serverAppConfigs/scripts/serve-frank-dragoon.sh
+Environment="FRANK_LARGE_ENV_FILE=/home/dank/serverAppConfigs/scripts/frank-large.env"
+ExecStart=/home/dank/serverAppConfigs/scripts/serve-frank-large.sh
 Restart=on-failure
 RestartSec=10

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Serve mradermacher/Qwen3.8-Flash-Next-Uncensored i1-Q4_K_M as frank-dragoon
+# Serve mradermacher/Qwen3.8-Flash-Next-Uncensored i1-Q4_K_M as frank-large
 # via ik_llama.cpp on Dankclaw.
 #
 # Topology (ikawrakow's hybrid recipe; upstream issue #2402 for the PLE):
@@ -26,7 +26,7 @@
 set -euo pipefail

 SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
-ENV_FILE="${FRANK_DRAGOON_ENV_FILE:-$SCRIPT_DIR/frank-dragoon.env}"
+ENV_FILE="${FRANK_LARGE_ENV_FILE:-$SCRIPT_DIR/frank-large.env}"
 if [[ -f "$ENV_FILE" ]]; then
    set -a
    # shellcheck disable=SC1090
@@ -66,7 +66,7 @@ fi
 # CPU-overridden weights mmapped (src/llama-load-tensors.cpp); the env file
 # sets it. Refuse to run without it.
 if [[ "${GGML_CUDA_NO_PINNED_WEIGHTS:-}" != "1" ]]; then
-    echo "frank-dragoon: refusing to start — GGML_CUDA_NO_PINNED_WEIGHTS=1 is mandatory on this host" >&2
+    echo "frank-large: refusing to start — GGML_CUDA_NO_PINNED_WEIGHTS=1 is mandatory on this host" >&2
    exit 1
 fi

@@ -112,7 +112,7 @@ fi
 : "${SPEC_DRAFT_POLL_BATCH:=1}"

 # Text only: the server must not try to autoload the vision tower.  Vision
-# stays on frank-dragoon (Dankclaw), which is where the fleet routes images.
+# stays on frank-large (Dankclaw), which is where the fleet routes images.
 NO_MMPROJ="${NO_MMPROJ:-1}"

 export HIP_VISIBLE_DEVICES
@@ -1,43 +0,0 @@
-#!/usr/bin/env bash
-# apply-protected-cast.sh — RUNS ON DANKSERVER. Rewrite the recipe's
-# PROTECTED-BEGIN/END section from Swift's OWN calibration grams: run
-# derive-protected-experts.py over the calib dir, splice its cast lines into
-# the marked section of the recipe in place, keep the pre-edit recipe in the
-# campaign trash. Refuses to run twice (marker text says derived).
-set -euo pipefail
-CALIB=${1:-/home/dank/corpora/calib}
-RECIPE=${2:-/home/dank/serverAppConfigs-swift15/scripts/recipes/qwen4exp-swift15-w4dn8-i8-hc8m.recipe}
-PY=/home/dank/venvs/radcorpus/bin/python
-DERIVE=/home/dank/serverAppConfigs-swift15/scripts/derive-protected-experts.py
-TS=$(date +%Y%m%d-%H%M%S)
-
-grep -q "derive-protected-experts.py rewrote" "$RECIPE" && {
-    echo "recipe already carries derived cast lines; refusing to re-derive" >&2; exit 1; }
-grep -q "PROTECTED-BEGIN" "$RECIPE" || { echo "no PROTECTED markers in $RECIPE" >&2; exit 1; }
-
-"$PY" "$DERIVE" "$CALIB" > "/tmp/protected-cast-$TS.txt"
-N=$(grep -c 'cast dtype=bf16' "/tmp/protected-cast-$TS.txt")
-[ "$N" -ge 2 ] || { echo "derive produced $N cast lines; refusing" >&2; exit 1; }
-echo "derived $N protected experts -> /tmp/protected-cast-$TS.txt"
-
-cp -f "$RECIPE" "/home/dank/.AGENTTRASH/$TS-qwen4exp-swift15-w4dn8-i8-hc8m.recipe"
-"$PY" - "$RECIPE" "/tmp/protected-cast-$TS.txt" <<'PYEOF'
-import sys
-recipe, castfile = sys.argv[1], sys.argv[2]
-lines = open(recipe).read().splitlines()
-cast = [l for l in open(castfile).read().splitlines() if 'cast dtype=bf16' in l]
-out, insec = [], False
-for l in lines:
-    if 'PROTECTED-BEGIN' in l:
-        insec = True
-        out.append(l)
-        out.extend(cast)
-    elif 'PROTECTED-END' in l:
-        insec = False
-        out.append(l)
-        out.append('# (derive-protected-experts.py rewrote this section from Swift\'s own grams)')
-    elif not insec:
-        out.append(l)
-open(recipe, 'w').write('\n'.join(out) + '\n')
-print(f'spliced {len(cast)} cast lines into {recipe}')
-PYEOF
@@ -1,141 +0,0 @@
-#!/usr/bin/env python3
-"""autoresearch-bench.py — deterministic greedy battery for frank-dragoon.
-
-Runs ON Dankclaw (no LAN jitter) against the candidate container on :7770.
-Fixed embedded corpus, temperature 0, streaming so decode speed is measured
-between real token arrivals (not request totals). Median of REPS samples per
-metric is the reported value; medians are far more stable than means under
-GPU thermal drift.
-
-Metrics emitted (stdout, one per line):
-  METRIC decode_tokens_per_sec=<float>   primary, higher better
-  METRIC prefill_tokens_per_sec=<float>  secondary
-  METRIC ttft_ms=<float>                 secondary, lower better
-Exit non-zero if the endpoint is unhealthy or the served alias is wrong.
-"""
-import argparse
-import json
-import statistics
-import sys
-import time
-import urllib.request
-
-# Fixed corpus: deterministic, ~28k tokens after tokenization (same scale as
-# the 2026-10-01 bench window). Built by repeating a fixed paragraph block a
-# fixed number of times - NO random, NO clock, NO network.
-_BLOCK = (
-    "The rendering pipeline walks the scene graph once per frame, resolving "
-    "material bindings into descriptor sets before any draw call is recorded. "
-    "Because the allocator recycles command buffers only after their fence "
-    "signals, a submission that outlives its frame must pin the pool entry; "
-    "otherwise the next frame overwrites recorded commands in flight. The "
-    "validation layer flags exactly this class of lifetime bug, but only for "
-    "buffers it can see - GPU-side timestamps and queue-family ownership "
-    "transfers hide in the driver's own bookkeeping, which is why release "
-    "builds must lean on explicit barriers and why a frame-time regression "
-    "often shows up as corruption one frame later than its cause.\n"
-)
-LONG_CTX = _BLOCK * 220  # ~28k-token prefill, matching the deployed workload
-_LONG = LONG_CTX + "\nNow, in one focused paragraph (80-150 words), explain " \
-    "which lifetime bugs this pipeline can still suffer and what explicit " \
-    "mitigations the text implies."
-_SHORT = "Design a rate limiter for a homelab reverse proxy that must not " \
-    "lock out the LAN. Think it through, then give the algorithm."
-
-REPS = 3
-MAX_TOKENS = 256
-REQ_TIMEOUT = 900
-
-
-def stream_completion(url: str, model: str, prompt: str):
-    """Greedy streaming completion.
-
-    Returns (ttft_s, decode_tps, prefill_tps, prompt_tokens, n_tokens).
-    ttft is RELATIVE to request send: time.perf_counter()'s epoch is host
-    boot, and returning the raw stamp read as an 11-day first token.
-    """
-    body = json.dumps({
-        "model": model,
-        "messages": [{"role": "user", "content": prompt}],
-        "max_tokens": MAX_TOKENS,
-        "temperature": 0,
-        "stream": True,
-        "stream_options": {"include_usage": True},
-    }).encode()
-    req = urllib.request.Request(
-        url.rstrip("/") + "/v1/chat/completions", data=body,
-        headers={"Content-Type": "application/json"})
-    t0 = time.perf_counter()
-    first = None
-    stamps = []
-    usage = {}
-    with urllib.request.urlopen(req, timeout=REQ_TIMEOUT) as resp:
-        for raw in resp:
-            line = raw.decode(errors="replace").strip()
-            if not line.startswith("data:"):
-                continue
-            payload = line[5:].strip()
-            if payload == "[DONE]":
-                break
-            chunk = json.loads(payload)
-            if chunk.get("usage"):
-                usage = chunk["usage"]
-            for ch in chunk.get("choices", []):
-                d = ch.get("delta") or {}
-                # reasoning AND content deltas both arrive token by token;
-                # count either so greedy text length drives the rate.
-                # (llama.cpp names the thinking field reasoning_content.)
-                if d.get("content") or d.get("reasoning") or d.get("reasoning_content"):
-                    now = time.perf_counter()
-                    if first is None:
-                        first = now
-                    stamps.append(now)
-    if first is None or len(stamps) < 2:
-        # A zero-argmax degenerate answer would poison the median; raise.
-        raise RuntimeError(f"stream produced {len(stamps)} tokens")
-    ttft_s = first - t0
-    decode_s = stamps[-1] - stamps[0]
-    decode_tps = (len(stamps) - 1) / decode_s if decode_s > 0 else 0.0
-    prompt_tokens = usage.get("prompt_tokens") or 0
-    prefill_tps = prompt_tokens / ttft_s if prompt_tokens else 0.0
-    return ttft_s, decode_tps, prefill_tps, prompt_tokens, len(stamps)
-
-
-def main():
-    ap = argparse.ArgumentParser()
-    ap.add_argument("--url", default="http://127.0.0.1:7770")
-    ap.add_argument("--model", default="frank-dragoon")
-    args = ap.parse_args()
-
-    with urllib.request.urlopen(args.url.rstrip("/") + "/v1/models",
-                                timeout=10) as r:
-        ids = [m["id"] for m in json.load(r)["data"]]
-    if args.model not in ids:
-        print(f"FATAL: served ids {ids}, expected {args.model}",
-              file=sys.stderr)
-        sys.exit(2)
-
-    # Warmup (compile/graph warm + allocator settle), NOT measured.
-    stream_completion(args.url, args.model, _SHORT)
-
-    decodes, prefills, ttfts = [], [], []
-    for rep in range(REPS):
-        for name, prompt in (("long", _LONG), ("short", _SHORT)):
-            ttft, dt, pt, ptk, ntok = stream_completion(
-                args.url, args.model, prompt)
-            decodes.append(dt)
-            ttfts.append(ttft * 1000.0)
-            if name == "long":
-                prefills.append(pt)
-            print(f"  rep{rep} {name:5s} ttft={ttft*1000:8.1f}ms "
-                  f"prefill={pt:8.1f} t/s decode={dt:6.2f} t/s "
-                  f"({ntok} tok, prompt {ptk})", file=sys.stderr)
-
-    med = lambda xs: statistics.median(xs)
-    print(f"METRIC decode_tokens_per_sec={med(decodes):.2f}")
-    print(f"METRIC prefill_tokens_per_sec={med(prefills):.1f}")
-    print(f"METRIC ttft_ms={med(ttfts):.1f}")
-
-
-if __name__ == "__main__":
-    main()
@@ -1,187 +0,0 @@
-#!/usr/bin/env bash
-# autoresearch-frank-archon.sh — RUNS ON DANKSERVER, driven over ssh by the
-# dev-box autoresearch.sh. It is the canonical frank-archon benchmark entry
-# point for the autoresearch loop.
-#
-# Method (mandated by the Benchmarking Policy): the production service serves
-# real users and shares the two R9700s, so a bench beside it starves the GPUs
-# and corrupts results. This script therefore:
-#   1. stops the production frank-archon unit (root, relink symlink: stop,
-#      NOT mask — mask refuses to replace a symlinked unit file),
-#   2. boots a scratch radiance container named `arbench` on the SAME two
-#      cards with the candidate engine argv (the env file the loop edits),
-#   3. polls /health until the listener is live (it binds AFTER the full
-#      load, so a bare curl is an honest gate),
-#   4. runs ONE self-contained completion request locally (127.0.0.1, no LAN
-#      jitter): a fixed ~140k-char real-text prompt (~32k tokens) decoded for
-#      256 tokens, greedy. The engine's `timings` object reports the honest
-#      prefill and decode rates for that single request.
-#   5. prints METRIC lines and tears the scratch down,
-#   6. restores production (systemctl start), via a trap so a failed bench
-#      never leaves frank-archon down (the stale-probe-tail lesson).
-#
-# Determinism: the prompt is built from a fixed, sorted corpus of repo files
-# with a fixed random seed, so prompt_n is stable across runs. Sampling is
-# greedy (temperature 0), so the decode length is fixed; the only residual
-# nondeterminism is the wht6 lossy TP all-reduce, which is a constant across
-# runs and cancels in A/B comparisons.
-#
-# The scratch mirrors the production container contract exactly (serve-frank-
-# primary.sh): --network host, --init, seccomp=unconfined (io_uring for the
-# n-gram table), memlock unbounded (the ~132 GiB pinned ledger), /dev/kfd +
-# /dev/dri, the .rad ro, the state dir rw, the tune cache mount. The ONLY
-# differences: the container name (arbench, so prod's identity is untouched)
-# and a FRESH prefix-cache disk tier (arbench/, wiped per run) so the cold
-# prefill is cold — the prod tier at kvcache/frank-archon is left intact.
-set -uo pipefail
-
-ENV_FILE="${1:-/home/dank/serverAppConfigs/scripts/frank-archon.env}"
-SCRATCH=arbench
-PORT=7770
-HEALTH="http://127.0.0.1:$PORT/health"
-COMPLETE="http://127.0.0.1:$PORT/v1/completions"
-BODY=/tmp/arbench-body.json
-LOG=/home/dank/logs/arbench.log
-
-restore() {
-  podman rm -f "$SCRATCH" >/dev/null 2>&1 || true
-  sudo systemctl start frank-archon >/dev/null 2>&1 || true
-}
-trap restore EXIT
-
-# --- source the candidate config (same file the production unit reads) ------
-if [ ! -f "$ENV_FILE" ]; then
-  echo "no env file at $ENV_FILE" >&2; exit 1
-fi
-# shellcheck disable=SC1090
-set -a; . "$ENV_FILE"; set +a
-
-# --- stop production; the scratch needs both cards to itself ----------------
-sudo systemctl stop frank-archon >/dev/null 2>&1 || true
-podman rm -f "$SCRATCH" >/dev/null 2>&1 || true
-
-# --- fresh prefix-cache tier for a cold prefill (prod's tier untouched) ------
-FRESH_KV="$FRANK_ARCHON_STATE_DIR/kvcache/$SCRATCH"
-rm -rf "$FRESH_KV"; mkdir -p "$FRESH_KV"
-mkdir -p "$FRANK_ARCHON_STATE_DIR/tune"
-
-# --- boot the scratch: the production run line, scratch name + fresh KV ------
-podman run -d --name "$SCRATCH" \
-  --network host \
-  --init \
-  --security-opt seccomp=unconfined \
-  --ulimit memlock=-1:-1 \
-  --device /dev/kfd --device /dev/dri \
-  -v "$FRANK_ARCHON_MODEL_DIR":/models:ro \
-  -v "$FRANK_ARCHON_STATE_DIR":/data \
-  -v "$FRANK_ARCHON_STATE_DIR/tune":/opt/radiance/share/radiance/tune \
-  -v "$FRANK_ARCHON_TEMPLATE":/templates/template.jinja:ro \
-  "$FRANK_ARCHON_IMAGE" \
-  --model "/models/$FRANK_ARCHON_MODEL_FILE" \
-  --host :: --port "$PORT" \
-  --served-model-name "$FRANK_ARCHON_SERVED_NAME" \
-  --override-chat-template /templates/template.jinja \
-  --tp "$FRANK_ARCHON_TP" --tp-wire "$FRANK_ARCHON_TP_WIRE" \
-  --max-num-seqs "$FRANK_ARCHON_MAX_SEQS" \
-  --max-model-len "$FRANK_ARCHON_MAX_MODEL_LEN" \
-  --placement "$FRANK_ARCHON_PLACEMENT" \
-  --host-pool-mib "$FRANK_ARCHON_HOST_POOL_MIB" \
-  --gpu-headroom-mib "$FRANK_ARCHON_GPU_HEADROOM_MIB" \
-  --vram-weights-mib "$FRANK_ARCHON_VRAM_WEIGHTS_MIB" \
-  --vram-kv-mib "$FRANK_ARCHON_VRAM_KV_MIB" \
-  --kv-cache-dtype "$FRANK_ARCHON_KV_DTYPE" \
-  --prefix-cache-host-mib "$FRANK_ARCHON_PREFIX_HOST_MIB" \
-  --prefix-cache-dir "/data/kvcache/$SCRATCH" \
-  --prefix-cache-disk-mib "$FRANK_ARCHON_PREFIX_DISK_MIB" \
-  --ngram-placement "$FRANK_ARCHON_NGRAM_PLACEMENT" \
-  --num-speculative-tokens "$FRANK_ARCHON_SPEC_TOKENS" \
-  --max-num-batched-tokens "$FRANK_ARCHON_MAX_BATCHED_TOKENS" \
-  ${FRANK_ARCHON_EXTRA_ARGS:+$FRANK_ARCHON_EXTRA_ARGS} \
-  > "$LOG" 2>&1
-if [ $? -ne 0 ]; then echo "scratch boot failed; see $LOG" >&2; exit 1; fi
-
-# --- poll health (listener binds after the full load; cold boot ~110 s) ------
-ok=0
-for _ in $(seq 1 360); do
-  code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 3 "$HEALTH" 2>/dev/null || echo 000)
-  if [ "$code" = "200" ]; then ok=1; break; fi
-  sleep 2
-done
-if [ "$ok" -ne 1 ]; then
-  echo "scratch never reached health 200; tail of $LOG:" >&2
-  tail -30 "$LOG" >&2; exit 1
-fi
-
-# --- build the workload: a fixed ~140k-char real-text prompt (repo corpus) ---
-python3 - "$BODY" <<'PY'
-import json, sys, random, glob
-random.seed(1234)
-root = "/home/dank/serverAppConfigs"
-files = sorted(
-    glob.glob(f"{root}/serverAppConfigs-docs/**/*.md", recursive=True)
-    + glob.glob(f"{root}/scripts/*.sh")
-    + glob.glob(f"{root}/scripts/*.py")
-    + glob.glob(f"{root}/AGENTS.md")
-)
-corpus = []
-total = 0
-for f in files:
-    try:
-        t = open(f, encoding="utf-8", errors="ignore").read()
-    except Exception:
-        continue
-    if not t.strip():
-        continue
-    corpus.append(t)
-    total += len(t)
-    if total > 240000:
-        break
-corpus = "\n".join(corpus)
-TGT = 140000
-parts, n = [], 0
-while n < TGT:
-    start = random.randint(0, max(0, len(corpus) - 500))
-    seg = corpus[start:start + random.randint(200, 500)]
-    parts.append(seg)
-    n += len(seg) + 1
-prompt = " ".join(parts)
-json.dump(
-    {"model": "frank-archon", "prompt": prompt,
-     "max_tokens": 256, "temperature": 0.0, "stream": False,
-     "stop": ["<|im_end|>"]},
-    open(sys.argv[1], "w"),
-)
-PY
-if [ ! -f "$BODY" ]; then echo "prompt build failed" >&2; exit 1; fi
-
-# --- the bench request (prefill ~32k + decode 256, greedy) -------------------
-RESP=$(curl -s --max-time 600 -X POST "$COMPLETE" \
-  -H 'Content-Type: application/json' -d "@$BODY")
-echo "$RESP" > /tmp/arbench-resp.json
-
-# --- parse the timings into METRIC lines -------------------------------------
-python3 - <<'PY'
-import json, sys
-try:
-    r = json.load(open("/tmp/arbench-resp.json"))
-except Exception as e:
-    sys.stderr.write(f"unparseable response: {e}\n"); sys.exit(1)
-if "timings" not in r:
-    sys.stderr.write(f"no timings in response: {json.dumps(r)[:500]}\n"); sys.exit(1)
-t = r["timings"]
-dtps = t.get("predicted_per_second")
-ptps = t.get("prompt_per_second")
-pms  = t.get("prompt_ms")
-dn   = t.get("draft_n", 0)
-da   = t.get("draft_n_accepted", 0)
-if dtps is None:
-    sys.stderr.write("predicted_per_second null (no decode produced)\n"); sys.exit(1)
-print(f"METRIC decode_tps={dtps:.4f}")
-if ptps is not None:
-    print(f"METRIC prefill_tps={ptps:.4f}")
-if pms is not None:
-    print(f"METRIC ttft_ms={pms:.4f}")
-if dn:
-    print(f"METRIC draft_accept={da/dn:.4f}")
-print(f"INFO prompt_n={t.get('prompt_n')} cache_n={t.get('cache_n')} predicted_n={t.get('predicted_n')}")
-PY
@@ -1,176 +0,0 @@
-#!/usr/bin/env bash
-# frank-archon-arms.sh — run a SEQUENCE of frank-archon bench arms and keep
-# every arm's evidence. Runs on the operator box; each arm is one full window
-# of ./autoresearch.sh (stop+mask -> boot the arm as the service -> measure ->
-# restore production and verify), so the fleet is only ever down for one arm at
-# a time and the production unit is back up between arms.
-#
-# An arm is the repo's own frank-archon.env plus an OVERLAY of engine knobs
-# appended after it (later assignment wins when the serve script sources it),
-# staged through FRANK_ARCHON_AR_ENV_FILE so the checkout is never mutated and
-# each arm gets its own fingerprint (the memo can never answer one arm with
-# another arm's numbers).
-#
-# Usage:  scripts/autoresearch/frank-archon-arms.sh [arm ...]
-#         scripts/autoresearch/frank-archon-arms.sh --list
-# Output, under /tmp/frank-archon-arms-<UTC stamp>/ (override with ARMS_DIR):
-#
-#   <arm>.out        full autoresearch output (metrics + engine evidence)
-#   <arm>.env        the exact staged env
-#   <arm>.rc         window exit code
-#   summary.tsv      arm, rc, decode_tps, decode_tps_t0.7, kv_tokens, boot_s
-#
-# Exit 0 when every arm produced metrics; 1 if any arm failed (a failed boot is
-# a RESULT — the window still restored production, and the rc says which arm).
-set -uo pipefail
-
-SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
-REPO="$(cd -- "$SCRIPT_DIR/../.." && pwd)"
-BASE_ENV="$REPO/scripts/frank-archon.env"
-ARMS_DIR="${ARMS_DIR:-/tmp/frank-archon-arms-$(date -u +%Y%m%dT%H%M%SZ)}"
-
-# --- arms ------------------------------------------------------------------
-# baseline: the shipped shape E, measured with THIS harness so the comparison is
-# matched (the ~29.6 t/s figure in the docs is an older shape, and no shape-E
-# decode number exists yet).
-OVER_baseline=()
-# B: MTP3 with the vendor's probabilistic draft sampling, a capture ladder whose
-# step is num_speculative_tokens + 1 = 4, and the sampling override. Precise
-# memory stays ON — this arm is simultaneously the MTP test and the test of
-# whether MTP's drafter workspace and the fitted 5.25 GiB overhead can coexist.
-SPEC3='{"method":"mtp","num_speculative_tokens":3,"draft_sample_method":"probabilistic"}'
-LADDER3='{"cudagraph_capture_sizes":[4,8,12],"max_cudagraph_capture_size":12,"inductor_compile_config":{"combo_kernels":false,"benchmark_combo_kernel":false}}'
-# The value must arrive in the staged env file SINGLE-QUOTED: sourcing an env
-# file performs quote removal, so an unquoted {"temperature":0.7} would reach
-# the engine as {temperature:0.7}.
-GEN07='{"temperature":0.7}'
-OVER_B=(
-    "FRANK_ARCHON_SPEC='$SPEC3'"
-    "FRANK_ARCHON_COMPCONFIG='$LADDER3'"
-    'FRANK_ARCHON_GEN_CONFIG='"'$GEN07'"
-)
-# B2: identical to B with the default (7.60 GiB) overhead, i.e. precise memory
-# OFF. It is the fallback if B dies at graph capture, and it prices the arena
-# that precise memory buys (7,522 slots -> ~6,496).
-OVER_B2=(
-    "FRANK_ARCHON_SPEC='$SPEC3'"
-    "FRANK_ARCHON_COMPCONFIG='$LADDER3'"
-    'FRANK_ARCHON_GEN_CONFIG='"'$GEN07'"
-    'FRANK_ARCHON_PRECISE_MEMORY='
-)
-# C: the vendor's concurrency shape — SEQS 16 with the [4..32] ladder and util
-# 0.95. This is also the direct test of the theory that pinning the capture
-# ladder unlocks SEQS > 3 (the SEQS=2 failure was query_start_loc specialised to
-# the constant 3, which is NOT in the default ladder; 4 is).
-LADDER16='{"cudagraph_capture_sizes":[4,8,12,16,20,24,28,32],"max_cudagraph_capture_size":32,"inductor_compile_config":{"combo_kernels":false,"benchmark_combo_kernel":false}}'
-OVER_C=(
-    "FRANK_ARCHON_SPEC='$SPEC3'"
-    "FRANK_ARCHON_COMPCONFIG='$LADDER16'"
-    'FRANK_ARCHON_GEN_CONFIG='"'$GEN07'"
-    'FRANK_ARCHON_SEQS=16'
-    'FRANK_ARCHON_MNBT=4096'
-    'FRANK_ARCHON_UTIL=0.95'
-)
-
-# D/E: the CONTEXT arms. Measured 2026-10-02 (arms run 20261002T233855Z): the
-# KV pool is a hard byte request divided by a PER-TOKEN PRICE, and MTP raises
-# that price because the drafter keeps its own KV per position:
-#   no spec: 3.15e9 / 398,658 tokens =  7,901 B/token  (1.99x of 200,704)
-#   MTP3:    3.15e9 / 313,002 tokens = 10,064 B/token  (1.56x)
-# So arm C lost a fifth of the context to the drafter, not to util. Frank's
-# contract is >=401,400 tokens over >=2 seqs = 2.00x of 200,704, which at
-# 10,064 B/token costs 4.04e9 -> ask 4.05e9 (+0.83 GiB/rank).
-# D is arm B with EXACTLY ONE variable changed (the KV bytes), so its result
-# says whether the 4k-depth collapse (B 23.09 vs baseline 33.99) was KV or the
-# batch shape.
-KV401K='FRANK_ARCHON_KV_BYTES=4050000000'
-OVER_D=(
-    "FRANK_ARCHON_SPEC='$SPEC3'"
-    "FRANK_ARCHON_COMPCONFIG='$LADDER3'"
-    'FRANK_ARCHON_GEN_CONFIG='"'$GEN07'"
-    "$KV401K"
-)
-# E: D with C's max_num_batched_tokens (4096 — C is the only arm that did NOT
-# collapse at 4k depth: 33.15 where B gave 23.09) and util 0.99, the value
-# Frank asked about. 0.99 is affordable on paper — production at util 0.98
-# measures 30.37/34.21 GiB per card, 3.58 GiB physically unused — but it leaves
-# only 0.32 GiB above the allowance while the CUDA-graph cost is an ANALYTIC
-# estimate (C's was 1.47 GiB over 24 graphs), so it is measured, not assumed.
-OVER_E=(
-    "FRANK_ARCHON_SPEC='$SPEC3'"
-    "FRANK_ARCHON_COMPCONFIG='$LADDER3'"
-    'FRANK_ARCHON_GEN_CONFIG='"'$GEN07'"
-    "$KV401K"
-    'FRANK_ARCHON_MNBT=4096'
-    'FRANK_ARCHON_UTIL=0.99'
-)
-
-arm_overlay() {
-    case "$1" in
-        baseline) ;;                       # the shipped env, no overlay
-        B)  printf '%s\n' "${OVER_B[@]}" ;;
-        B2) printf '%s\n' "${OVER_B2[@]}" ;;
-        C)  printf '%s\n' "${OVER_C[@]}" ;;
-        D)  printf '%s\n' "${OVER_D[@]}" ;;
-        E)  printf '%s\n' "${OVER_E[@]}" ;;
-        *) return 1 ;;
-    esac
-}
-if [ "${1:-}" = "--list" ]; then
-    printf 'baseline B B2 C D E\n'
-    exit 0
-fi
-
-[ -f "$BASE_ENV" ] || { echo "[arms] missing $BASE_ENV" >&2; exit 1; }
-if [ "$#" -gt 0 ]; then ARMS=("$@"); else ARMS=(baseline B B2 C); fi
-mkdir -p "$ARMS_DIR"
-echo "[arms] dir $ARMS_DIR  arms: ${ARMS[*]}" >&2
-
-: >"$ARMS_DIR/summary.tsv"
-printf 'arm\trc\tdecode_tps\tdecode_tps_t0.7\tkv_tokens\tboot_s\n' >>"$ARMS_DIR/summary.tsv"
-overall=0
-
-for arm in "${ARMS[@]}"; do
-    if ! arm_overlay "$arm" >"$ARMS_DIR/$arm.overlay"; then
-        echo "[arms] unknown arm: $arm" >&2
-        overall=1
-        continue
-    fi
-    { cat "$BASE_ENV"; echo; echo "# --- arm $arm overlay ($(date -u +%FT%TZ)) ---"
-      arm_overlay "$arm"; } >"$ARMS_DIR/$arm.env"
-    # Gate the staged env BEFORE burning a ~20-minute window: every knob that
-    # holds JSON must still be one valid JSON object after the file is SOURCED
-    # (that is the step that silently eats unquoted braces).
-    if ! bash -c 'set -a; . "$1" >/dev/null; set +a
-        for k in FRANK_ARCHON_SPEC FRANK_ARCHON_COMPCONFIG FRANK_ARCHON_GEN_CONFIG; do
-            v="${!k:-}"
-            [ -n "$v" ] || continue
-            case "$v" in
-                "{"*) python3 -c "import json,sys; json.loads(sys.argv[1])" "$v" \
-                        || { echo "[arms] $k is not valid JSON: $v" >&2; exit 1; } ;;
-                *) echo "[arms] $k is not a JSON object: $v" >&2; exit 1 ;;
-            esac
-        done' _ "$ARMS_DIR/$arm.env"; then
-        echo "[arms] $arm: staged env rejected, window not opened" >&2
-        echo 99 >"$ARMS_DIR/$arm.rc"
-        overall=1
-        continue
-    fi
-
-    echo "[arms] === $arm: opening window $(date -u +%H:%M:%S)Z ===" >&2
-    FRANK_ARCHON_AR_ENV_FILE="$ARMS_DIR/$arm.env" \
-        "$REPO/autoresearch.sh" >"$ARMS_DIR/$arm.out" 2>&1
-    rc=$?
-    echo "$rc" >"$ARMS_DIR/$arm.rc"
-    echo "[arms] === $arm: rc=$rc $(date -u +%H:%M:%S)Z ===" >&2
-    grep -E '^METRIC ' "$ARMS_DIR/$arm.out" | sed 's/^METRIC //' >"$ARMS_DIR/$arm.metrics" || true
-    metric() { local v; v="$(sed -n "s/^$1=//p" "$ARMS_DIR/$arm.metrics" | tail -1)"; printf '%s' "${v:-$2}"; }
-    printf '%s\t%s\t%s\t%s\t%s\t%s\n' "$arm" "$rc" \
-        "$(metric decode_tps FAIL)" "$(metric decode_tps_t0.7 FAIL)" \
-        "$(metric kv_tokens ?)" "$(metric boot_seconds ?)" >>"$ARMS_DIR/summary.tsv"
-    [ "$rc" -ne 0 ] && overall=1
-done
-
-echo "[arms] summary:" >&2
-cat "$ARMS_DIR/summary.tsv" >&2
-exit "$overall"
@@ -1,216 +0,0 @@
-#!/usr/bin/env python3
-"""frank-archon decode measurement — runs INSIDE the engine container.
-
-The method is the fleet's established one (the 2026-09-29 / 2026-10-01
-tuning campaigns, /home/dank/mtp_measure.py): SSE chunk counting is invalid
-under speculative decoding because rejected drafts change the accounting, so
-decode is measured from the server's own usage counters:
-
-    decode_tok_s = completion_tokens / (wall - ttft)
-
-with ttft = wall time to the FIRST content-bearing chunk (thinking arrives in
-`reasoning`/`delta.reasoning` on this stack and is excluded from the decode
-window — and is deterministic per prompt at temperature 0, so the exclusion
-cancels in any A/B on the same workload).
-
-Workload (fixed, deterministic, offline):
-  * prompts built from a large fixed-seed shuffled word list so tokens rarely
-    repeat (no n-gram/prefix predictability of the text itself), sized with
-    the server's own /v1/messages/count_tokens counter
-  * depths 115 / 1056 / 4096 target prompt tokens
-  * one 64-token warm pass per depth (warms the expert arena), then
-    max_tokens=256, 3 runs, median — repeated for every temperature in AR_TEMPS
-    (default 0 and 0.7). The prompt workload is deterministic (fixed seed, no
-    network, no time-of-day dependence); at temperature > 0 the generated text
-    is not, but the measured window is bounded by max_tokens, so the rate stays
-    comparable and the non-determinism is exactly the sampling that a
-    speculative-decode arm must survive.
-
-Env:
-  AR_BASE             endpoint (default http://127.0.0.1:7770)
-  AR_MODEL            served name (default frank-archon)
-  AR_PROMPT_CEILING   hard prompt ceiling in tokens (default 100000)
-  AR_TEMPS            comma-separated sampling temperatures (default "0,0.7")
-
-Output: progress on stderr, ONE json object on stdout (the last line).
-Exit codes: 0 ok, 2 endpoint unhealthy / no usable completion, 3 bad usage.
-"""
-import json
-import os
-import random
-import statistics
-import sys
-import time
-import urllib.error
-import urllib.request
-
-BASE = os.environ.get("AR_BASE", "http://127.0.0.1:7770")
-MODEL = os.environ.get("AR_MODEL", "frank-archon")
-PROMPT_CEILING = int(os.environ.get("AR_PROMPT_CEILING", "100000"))
-DEPTHS = (115, 1056, 4096)
-WARM_TOKENS = 64
-MAX_TOKENS = 256
-RUNS = 3
-# Temperature sweep. The unsuffixed keys are temperature 0 — byte-comparable to
-# every historical measurement — and AR_TEMPS adds more. The second one matters
-# for speculative decode: draft ACCEPTANCE is sampling-dependent (a greedy draft
-# matches a greedy target exactly and is rejected more under a non-greedy
-# target), so an MTP arm judged only at temp 0 would be judged on half the
-# contract. Production traffic is non-zero temperature (the payload's
-# generation_config says 1.0; an override to 0.7 is under test).
-TEMPS = tuple(float(x) for x in os.environ.get("AR_TEMPS", "0,0.7").split(","))
-
-# 43-word x 12 = 516-word vocabulary, seed 1234 — the campaign's exact list
-# and seed, so prompts are byte-identical to the historical measurements.
-_VOCAB = ("alpha bravo charlie delta echo foxtrot golf hotel india juliet kilo lima "
-          "mike november oscar papa quebec romeo sierra tango uniform victor whiskey "
-          "xray yankee zulu cardinal ordinal topology kernel scheduler resident "
-          "unified aperture expert arena slab offload prefetch gemm triton quant "
-          "tensor shard checkpoint manifest embed router cache page table window "
-          "gradient sparse dense moe attention head dim block stream decode prefill "
-          "bandwidth latency throughput residency eviction tier swap pin memlock").split()
-_R = random.Random(1234)
-_ORDER = list(range(len(_VOCAB)))
-_R.shuffle(_ORDER)
-
-
-def log(msg):
-    print("[measure] %s" % msg, file=sys.stderr, flush=True)
-
-
-def post_json(path, body, timeout):
-    req = urllib.request.Request(
-        BASE + path, data=json.dumps(body).encode(),
-        headers={"Content-Type": "application/json"})
-    with urllib.request.urlopen(req, timeout=timeout) as r:
-        return json.load(r)
-
-
-def count_tokens(text):
-    """Token count without a prefill, from the server's own counter."""
-    body = {"model": MODEL,
-            "messages": [{"role": "user", "content": text}]}
-    r = post_json("/v1/messages/count_tokens", body, timeout=300)
-    n = r.get("input_tokens") or r.get("count") or r.get("token_count")
-    if not n:
-        raise RuntimeError("count_tokens returned no count: %r" % (r,))
-    return int(n)
-
-
-def words(n):
-    return " ".join(_VOCAB[_ORDER[i % len(_VOCAB)]] for i in range(n))
-
-
-def calibrate():
-    """Measure words->tokens from the server's own counter."""
-    return 2000.0 / count_tokens(words(2000))
-
-
-def prompt_for(target_tokens, wpt):
-    n = max(1, int(target_tokens * wpt))
-    text = words(n)
-    pt = count_tokens(text)
-    while pt > PROMPT_CEILING:
-        n = max(1, int(n * (PROMPT_CEILING / pt) * 0.98))
-        text = words(n)
-        pt = count_tokens(text)
-    return text, pt
-
-
-def measured(prompt, max_tokens, temperature=0):
-    """Return (ttft_s, decode_tok_s, completion_tokens) via usage counters."""
-    body = {"model": MODEL,
-            "messages": [{"role": "user", "content": prompt}],
-            "max_tokens": max_tokens, "temperature": temperature,
-            "stream": True, "stream_options": {"include_usage": True}}
-    req = urllib.request.Request(
-        BASE + "/v1/chat/completions", data=json.dumps(body).encode(),
-        headers={"Content-Type": "application/json"})
-    t0 = time.time()
-    ttft = None
-    usage = {}
-    with urllib.request.urlopen(req, timeout=1800) as r:
-        for raw in r:
-            line = raw.decode("utf-8", "replace").strip()
-            if not line.startswith("data:"):
-                continue
-            s = line[5:].strip()
-            if s == "[DONE]":
-                break
-            try:
-                ev = json.loads(s)
-            except json.JSONDecodeError:
-                continue
-            if ev.get("usage"):
-                usage = ev["usage"]
-            for ch in ev.get("choices", []):
-                if (ch.get("delta") or {}).get("content"):
-                    if ttft is None:
-                        ttft = time.time() - t0
-    wall = time.time() - t0
-    ct = int(usage.get("completion_tokens") or 0)
-    if ct <= 0:
-        # No usage on the stream: the endpoint is unhealthy or the model
-        # returned nothing (e.g. HTTP 200 with an error payload).
-        raise RuntimeError("no completion_tokens in usage: %r" % (usage,))
-    dec_window = max(wall - (ttft or 0.0), 1e-9)
-    return (ttft or wall), (ct / dec_window), ct
-
-
-def fmt_temp(t):
-    return ("%.1f" % t).rstrip("0").rstrip(".") if t else "0"
-
-
-def main():
-    log("base=%s model=%s ceiling=%d temps=%s"
-        % (BASE, MODEL, PROMPT_CEILING, ",".join(fmt_temp(t) for t in TEMPS)))
-    try:
-        wpt = calibrate()
-    except Exception as e:
-        log("endpoint unhealthy during calibration: %s" % e)
-        return 2
-    log("words/token: %.3f" % wpt)
-
-    result = {"words_per_token": round(wpt, 5)}
-    for tgt in DEPTHS:
-        try:
-            p, pt = prompt_for(tgt, wpt)
-            measured(p, WARM_TOKENS)  # warm the arena and the prefix cache
-        except Exception as e:
-            log("warm pass failed at depth %d: %s" % (tgt, e))
-            return 2
-        for temp in TEMPS:
-            suffix = "" if temp == 0 else "_t%s" % fmt_temp(temp)
-            rates, tts, cts = [], [], []
-            for i in range(RUNS):
-                try:
-                    tt, r, ct = measured(p, MAX_TOKENS, temp)
-                except Exception as e:
-                    log("run %d/%d failed at depth %d temp %s: %s"
-                        % (i + 1, RUNS, tgt, fmt_temp(temp), e))
-                    continue
-                rates.append(r)
-                tts.append(tt)
-                cts.append(ct)
-            if len(rates) < 2:
-                log("only %d usable run(s) at depth %d temp %s — refusing to median"
-                    % (len(rates), tgt, fmt_temp(temp)))
-                return 2
-            result["decode_tps_%d%s" % (tgt, suffix)] = round(statistics.median(rates), 2)
-            result["ttft_ms_%d%s" % (tgt, suffix)] = round(1000.0 * statistics.median(tts), 1)
-            result["completion_tokens_%d%s" % (tgt, suffix)] = int(statistics.median(cts))
-            result["prompt_tokens_%d%s" % (tgt, suffix)] = pt
-            log("depth %5d tok temp %-4s decode %7.2f t/s  ttft %.3f s  (runs=%d)"
-                % (pt, fmt_temp(temp), result["decode_tps_%d%s" % (tgt, suffix)],
-                   result["ttft_ms_%d%s" % (tgt, suffix)] / 1000.0, len(rates)))
-
-    for temp in TEMPS:
-        suffix = "" if temp == 0 else "_t%s" % fmt_temp(temp)
-        meds = [result["decode_tps_%d%s" % (t, suffix)] for t in DEPTHS]
-        result["decode_tps%s" % suffix] = round(statistics.median(meds), 2)
-    print(json.dumps(result))
-    return 0
-
-
-if __name__ == "__main__":
-    sys.exit(main())
@@ -1,218 +0,0 @@
-#!/usr/bin/env bash
-# frank-archon-window.sh — one full bench window for frank-archon, run ON
-# DANKSERVER as the deploy user (invoked over ssh by ./autoresearch.sh).
-#
-# Discipline (AGENTS.md Benchmarking Policy): the production unit is
-# STOPPED + MASKED first, the candidate config boots AS THE SERVICE itself
-# (same serve script, same container name, same port 7770 — no scratch
-# ports, no co-tenant GPU), the in-container measure runs, and the window
-# ALWAYS ends by restoring the production unit and verifying its health.
-# The EXIT trap makes the restore unconditional: a boot failure, a measure
-# failure, or a dead ssh session all end with production back up.
-#
-# Staging layout (created by the orchestrator, ephemeral — never a config
-# source; the repo checkout is):
-#   /home/dank/.autoresearch-frank-archon/
-#     serve.sh             staged candidate serve script
-#     frank-archon.env    staged candidate env (the candidate knobs)
-#     measure.py           the in-container measure client
-#     hash                 candidate fingerprint
-#     run.json             result (metrics + boot + kv + fingerprint)
-#     serve.out/measure.out/fail.log
-#     last/                memo: run.json + hash of the last FULLY
-#                          successful window (bench AND verified restore)
-#
-# This script logs to stderr and exits 0 only when the measure produced a
-# usable result (the restore happens in the trap regardless of the bench
-# outcome; a failed restore forces exit 1).
-set -uo pipefail
-
-STAGE="${FRANK_ARCHON_AR_STAGE:-/home/dank/.autoresearch-frank-archon}"
-UNIT="${FRANK_ARCHON_AR_UNIT:-frank-archon}"
-CTR="${FRANK_ARCHON_AR_CTR:-frank-archon-qwen}"
-HEALTH_URL="http://127.0.0.1:7770/health"
-MODELS_URL="http://127.0.0.1:7770/v1/models"
-BOOT_TIMEOUT="${FRANK_ARCHON_AR_BOOT_TIMEOUT:-1200}"
-RESTORE_TIMEOUT="${FRANK_ARCHON_AR_RESTORE_TIMEOUT:-1200}"
-MEASURE_TIMEOUT="${FRANK_ARCHON_AR_MEASURE_TIMEOUT:-1800}"
-SERVED="$(sed -n 's/^FRANK_ARCHON_SERVED_NAME=//p' "$STAGE/frank-archon.env" 2>/dev/null | head -1)"
-SERVED="${SERVED:-frank-archon}"
-
-RESTORED=0
-
-log() { printf '[window %s] %s\n' "$(date '+%H:%M:%S')" "$*" >&2; }
-
-container_state() { podman inspect -f '{{.State.Status}}' "$CTR" 2>/dev/null || echo absent; }
-
-wait_port_free() {
-    local i
-    for i in $(seq 1 90); do
-        [ "$(container_state)" != "running" ] && return 0
-        sleep 2
-    done
-    return 1
-}
-
-wait_health() { # $1 = timeout seconds
-    local t0 code
-    t0=$(date +%s)
-    while :; do
-        code="$(curl -s -o /dev/null -w '%{http_code}' --max-time 10 "$HEALTH_URL" 2>/dev/null || echo 000)"
-        [ "$code" = "200" ] && return 0
-        [ "$(( $(date +%s) - t0 ))" -ge "$1" ] && return 1
-        sleep 2
-    done
-}
-
-capture_bench_failure() {
-    log "capturing bench-boot failure evidence"
-    {
-        echo "=== podman logs (tail 400) ==="
-        podman logs --tail 400 "$CTR" 2>&1 || true
-        echo "=== staged serve.out (tail 60) ==="
-        tail -60 "$STAGE/serve.out" 2>/dev/null || true
-        echo "=== engine log (tail 60) ==="
-        tail -60 /home/dank/logs/frank_archon.log 2>/dev/null || true
-    } >"$STAGE/fail.log" 2>&1 || true
-    grep -E 'OutOfMemory|Tried to allocate|Engine core initialization failed|Error|error' \
-        "$STAGE/fail.log" 2>/dev/null | tail -25 >&2 || true
-}
-
-restore() {
-    [ "$RESTORED" = 1 ] && return 0
-    RESTORED=1
-    log "restoring production unit $UNIT"
-    if [ -f "$STAGE/serve.pid" ]; then
-        kill "$(cat "$STAGE/serve.pid" 2>/dev/null)" 2>/dev/null || true
-    fi
-    podman stop -t 120 "$CTR" >/dev/null 2>&1 || true
-    wait_port_free || log "WARNING: bench container still draining after 180s"
-    sudo systemctl unmask "$UNIT" 2>/dev/null || true
-    if ! sudo systemctl start "$UNIT"; then
-        log "ERROR: systemctl start $UNIT failed — operator intervention required"
-        return 1
-    fi
-    if wait_health "$RESTORE_TIMEOUT"; then
-        if curl -s --max-time 10 "$MODELS_URL" 2>/dev/null | grep -q "$SERVED"; then
-            log "production restored and verified ($SERVED answering on :7770)"
-            # Memo promotion lives HERE: a cached result is only ever the
-            # product of a fully successful window (bench AND verified
-            # restore), never of a bare bench success.
-            cp "$STAGE/run.json" "$STAGE/last/" 2>/dev/null || true
-            cp "$STAGE/hash" "$STAGE/last/" 2>/dev/null || true
-        else
-            log "ERROR: health 200 but /v1/models does not list $SERVED"
-            return 1
-        fi
-    else
-        log "ERROR: production not healthy within ${RESTORE_TIMEOUT}s — unit left to systemd (Restart=always)"
-        return 1
-    fi
-    return 0
-}
-trap 'restore; rc=$?; [ "$rc" -ne 0 ] && exit 1' EXIT
-
-main() {
-    local f
-    for f in serve.sh frank-archon.env measure.py hash; do
-        [ -f "$STAGE/$f" ] || { log "staged file missing: $STAGE/$f"; exit 1; }
-    done
-    mkdir -p "$STAGE/last"
-    rm -f "$STAGE/run.json" "$STAGE/fail.log" "$STAGE/measure.out" "$STAGE/evidence.log"
-
-    local t_start t0 i kvline kv_tokens kv_conc measure_json boot_seconds
-    t_start="$(date +%s)"
-
-    log "stopping and masking production unit $UNIT"
-    sudo systemctl stop "$UNIT" 2>/dev/null || true
-    # Explicit stop is not auto-restarted even with Restart=always; the mask
-    # is belt-and-braces against a stray start during the window.
-    sudo systemctl mask "$UNIT" 2>/dev/null || \
-        log "WARNING: mask failed — relying on explicit-stop semantics"
-    wait_port_free || log "note: production container still draining"
-
-    t0="$(date +%s)"
-    log "starting bench instance from staged config (fingerprint $(tr -d '[:space:]' <"$STAGE/hash"))"
-    FRANK_ARCHON_ENV_FILE="$STAGE/frank-archon.env" \
-        setsid nohup bash "$STAGE/serve.sh" >"$STAGE/serve.out" 2>&1 </dev/null &
-    echo "$!" >"$STAGE/serve.pid"
-
-    for i in $(seq 1 45); do
-        [ "$(container_state)" = "running" ] && break
-        sleep 2
-    done
-    if [ "$(container_state)" != "running" ]; then
-        log "bench container never reached running state"
-        tail -40 "$STAGE/serve.out" >&2 || true
-        exit 1
-    fi
-
-    if wait_health "$BOOT_TIMEOUT"; then
-        boot_seconds=$(( $(date +%s) - t0 ))
-        log "bench healthy after ${boot_seconds}s"
-    else
-        if [ "$(container_state)" = "running" ]; then
-            log "bench boot timed out after ${BOOT_TIMEOUT}s (still loading)"
-        else
-            log "bench container died during boot"
-            capture_bench_failure
-        fi
-        exit 1
-    fi
-
-    log "running measure in container (timeout ${MEASURE_TIMEOUT}s)"
-    if ! podman cp "$STAGE/measure.py" "$CTR":/tmp/ar-measure.py; then
-        log "podman cp of measure client failed"
-        exit 1
-    fi
-    if ! timeout "$MEASURE_TIMEOUT" podman exec "$CTR" python3 /tmp/ar-measure.py \
-            >"$STAGE/measure.out" 2>&1; then
-        log "measure failed or timed out"
-        tail -40 "$STAGE/measure.out" >&2 || true
-        exit 1
-    fi
-
-    # Capacity facts for the run (context-size experiments change these).
-    kvline="$(podman logs "$CTR" 2>&1 | grep -E 'GPU KV cache size' | tail -1 || true)"
-    kv_tokens="$(printf '%s' "$kvline" | sed -E 's/.*GPU KV cache size: ([0-9,]+) tokens.*/\1/' | tr -d ',' || true)"
-    kv_conc="$(printf '%s' "$kvline" | sed -E 's/.*per request: ([0-9.]+x).*/\1/' || true)"
-
-    # Human-facing evidence, in a sidecar file because it is multi-line prose,
-    # not metrics: the expert-plan lines (the ONLY place the arena / runtime
-    # overhead / KV-reserve numbers exist — they are never in /metrics), the
-    # compile path (cold build vs cache hit), the graph-capture sizes, the
-    # speculative-decode counters, and any OOM signature. Without this an arm
-    # that loses decode speed is unexplainable afterwards.
-    {
-        echo "=== engine plan / capacity / spec evidence ==="
-        podman logs "$CTR" 2>&1 | grep -E \
-'KV cache size|Maximum concurrency|layers split|expert cache|runtime overhead|non-default args|r4d all-reduce|Using \[|cudagraph|CUDA graph|Capturing|graph for compile range|torch.compile took|Directly load the compiled|speculative|Speculative|acceptance|Acceptance|offload|precise|OutOfMemory|Tried to allocate|Engine core initialization failed' \
-            | tail -150 || true
-        echo "=== /metrics counters (spec decode, caches, success) ==="
-        curl -s --max-time 15 http://127.0.0.1:7770/metrics 2>/dev/null \
-            | grep -E '^vllm:(spec_decode|gpu_cache|prefix_cache|request_success|generation_tokens|iteration)' \
-            | head -80 || true
-    } >"$STAGE/evidence.log" 2>&1 || true
-    log "engine evidence -> $STAGE/evidence.log ($(wc -l <"$STAGE/evidence.log") lines)"
-
-    measure_json="$(grep -E '^\{' "$STAGE/measure.out" | tail -1 || true)"
-    if [ -z "$measure_json" ]; then
-        log "measure produced no JSON result line"
-        tail -40 "$STAGE/measure.out" >&2 || true
-        exit 1
-    fi
-
-    # The measure line is already JSON, so the run object can be assembled
-    # without any host-side interpreter.
-    printf '{"hash":"%s","boot_seconds":%s,"kv_tokens":%s,"kv_concurrency":"%s","total_seconds":%s,"measure":%s}\n' \
-        "$(tr -d '[:space:]' <"$STAGE/hash")" \
-        "$boot_seconds" "${kv_tokens:-0}" "${kv_conc:-unknown}" \
-        "$(( $(date +%s) - t_start ))" "$measure_json" >"$STAGE/run.json"
-
-    log "bench window complete in $(( $(date +%s) - t_start ))s"
-    # Memo only after a FULL success; the restore below still has to verify.
-    exit 0
-}
-
-main "$@"
-exit "$?"
@@ -1,269 +0,0 @@
-#!/usr/bin/env python3
-"""bench-conversation.py — what an endpoint actually feels like, in tokens/s.
-
-The other harnesses here answer engine questions (which batch, which proposer,
-which cache). This one answers the user question: give the same ten jobs to an
-OpenAI-compatible endpoint and report the rate it answers them at. Every job is
-a real conversation turn — system prompt plus one user turn — because that is
-the shape the fleet serves, and it is measured by STREAMING so prefill and
-decode are separated:
-
-  ttft          seconds to the first content delta  -> prefill + queue
-  decode tok/s  completion_tokens / (total - ttft)  -> the rate you read at
-
-Both arms of a comparison must run the SAME prompt bytes, so a per-run salt
-rides in the system prompt: it changes the prompt itself, which is llama.cpp's
-prefix-cache key and vLLM's APC key, so no arm silently inherits a warm cache
-from the one before it. Run one arm, restart the engine, run the next with a
-new salt.
-
-Answers are generated at temperature 0 so arms serving the SAME model can be
-compared for identity as well as speed; different runtimes serving different
-quants legitimately answer differently, which is why the first line of every
-answer is printed.
-
-Usage:
-    bench-conversation.py <base-url> [--model NAME] [--salt TAG]
-                          [--max-tokens N] [--burst N] [--out file.json]
-
-    bench-conversation.py http://127.0.0.1:7770 --model frank-medium --salt L1
-    bench-conversation.py http://127.0.0.1:7770 --model frank-medium --salt R2 --burst 4
-
-One engine at a time: on a single GPU pair there is no room for two copies of a
-27B model, and the benchmarking policy requires the production service to be
-stopped while anything measures.
-"""
-
-import argparse
-import json
-import statistics
-import sys
-import threading
-import time
-import urllib.error
-import urllib.request
-
-# Ten jobs that cover what this fleet is actually asked to do. Ordered roughly
-# by prefill size so a runtime that is good at short prompts and one that is
-# good at long ones cannot hide behind an average.
-SYSTEM = (
-    "You are a staff engineer on a homelab fleet. Be concise and concrete. "
-    "Salt: {salt}"
-)
-
-BATTERY = [
-    ("greet", 128, "Say hello in one sentence."),
-    ("shell", 192, "One bash command: find every file under /home modified in "
-     "the last 2 days, sorted by size, largest first."),
-    ("math", 256, "A train covers 180 km in 1h40m, then 240 km in 2h20m. "
-     "What is the average speed in km/h? Show the arithmetic."),
-    ("json", 384, "Emit exactly 12 JSON records, one per line, no prose, each "
-     'with keys "host", "service", "port" and "up" for hosts dankclaw, '
-     "dankserver and dankware running llama-server, caddy and grafana."),
-    ("review", 512, "Review this function for bugs and name the failure mode:\n"
-     "def rotate(cfg, n):\n    for k in cfg:\n        cfg[k] = cfg[k][n:] + cfg[k][:n]\n"
-     "    return cfg\n"),
-    ("explain", 448, "Explain in four sentences why PCIe atomic operation routing "
-     "matters for GPU collectives, and what fails when a bridge reports "
-     "AtomicOpsCap: Routing-."),
-    ("translate", 256, "Translate to German, then to Japanese, one line each: "
-     "The load balancer refused the connection because the port was still held."),
-    ("plan", 640, "Give a 6-step runbook for swapping the model behind a live "
-     "LLM endpoint on a host that serves real users, with a rollback at each step."),
-    ("debug", 512, "A systemd user service restarts every 10 seconds and its log "
-     "ends with 'Error starting server failed to bind udp listener on 10.89.1.1:53: "
-     "Cannot assign requested address'. What is the root cause and the repair?"),
-    ("longdoc", 512, None),  # filled from LONG_FILES at runtime
-]
-
-# The long-context job reads real repo files so prefill is large and identical
-# across arms (~30k characters).
-LONG_FILES = [
-    "/home/dank/serverAppConfigs/AGENTS.md",
-    "/home/dank/serverAppConfigs/serverAppConfigs-docs/LLM/"
-    "frank-medium-llamacpp-dflash2.md",
-]
-LONG_CHARS = 30_000
-
-
-def long_prompt() -> str:
-    parts = []
-    for path in LONG_FILES:
-        try:
-            with open(path, encoding="utf-8", errors="replace") as handle:
-                parts.append(handle.read())
-        except OSError:
-            continue
-    text = "\n\n".join(parts)[:LONG_CHARS]
-    return ("Using only this document, answer: which deployment shapes for "
-            "two GPUs are ruled out by missing PCIe atomics, and what is the "
-            "one software path that still lets both cards serve one model? "
-            "Cite the measured numbers.\n\n---\n" + text)
-
-
-def stream_chat(base: str, model: str, messages, max_tokens: int, timeout: int):
-    """One streamed chat completion -> (ttft, total, usage, delta_count, text).
-
-    usage is the engine's own {prompt_tokens, completion_tokens}, asked for with
-    stream_options.include_usage.  There is deliberately NO cheap non-streamed
-    pre-probe to learn the prompt length: that probe would populate the prefix
-    cache and turn the measured run's prefill into a cache hit, which is exactly
-    the difference between runtimes this harness is trying to see.
-
-    ttft is None when the engine produced no content delta.
-    """
-    body = {
-        "model": model,
-        "messages": messages,
-        "max_tokens": max_tokens,
-        "temperature": 0,
-        "stream": True,
-        "stream_options": {"include_usage": True},
-    }
-    request = urllib.request.Request(
-        base + "/v1/chat/completions",
-        data=json.dumps(body).encode(),
-        headers={"Content-Type": "application/json"},
-    )
-    start = time.perf_counter()
-    ttft = None
-    deltas = 0
-    usage = {}
-    text = []
-    with urllib.request.urlopen(request, timeout=timeout) as response:
-        for raw in response:
-            line = raw.decode("utf-8", "replace").strip()
-            if not line.startswith("data:"):
-                continue
-            payload = line[5:].strip()
-            if payload == "[DONE]":
-                break
-            try:
-                chunk = json.loads(payload)
-            except json.JSONDecodeError:
-                continue
-            if chunk.get("usage"):
-                usage.update(chunk["usage"])
-            for choice in chunk.get("choices", []):
-                piece = choice.get("delta") or {}
-                # llama.cpp streams thinking as reasoning_content; vLLM's
-                # reasoning parser streams it as reasoning.  Either one is a
-                # generated token, so TTFT must be the first token of ANY kind —
-                # counting only `content` made a thinking-heavy arm look like it
-                # answered instantly (measured 2026-09-20: radiance's geomean
-                # read 994 tok/s with 6 of 10 jobs recorded as "(empty)").
-                content = next((piece[k] for k in ("content", "reasoning",
-                               "reasoning_content") if piece.get(k)), "")
-                if content:
-                    if ttft is None:
-                        ttft = time.perf_counter() - start
-                    deltas += 1
-                    text.append(content)
-    total = time.perf_counter() - start
-    return ttft, total, usage, deltas, "".join(text)
-
-
-def main() -> int:
-    ap = argparse.ArgumentParser()
-    ap.add_argument("base")
-    ap.add_argument("--model", default="frank-medium")
-    ap.add_argument("--salt", default=f"C{int(time.time())}")
-    ap.add_argument("--max-tokens", type=int, default=None)
-    ap.add_argument("--burst", type=int, default=0,
-                    help="also run N concurrent copies of the plan job")
-    ap.add_argument("--timeout", type=int, default=1800)
-    ap.add_argument("--out", default=None)
-    args = ap.parse_args()
-
-    base = args.base.rstrip("/")
-    rows = []
-    print(f"# battery salt={args.salt} model={args.model} base={base}\n")
-    print(f"{'job':<10} {'ptok':>7} {'ctok':>6} {'ttft_s':>8} {'dec_tps':>8} "
-          f"{'total_s':>8}  answer")
-
-    for name, cap, prompt in BATTERY:
-        if prompt is None:
-            prompt = long_prompt()
-        messages = [
-            {"role": "system", "content": SYSTEM.format(salt=args.salt)},
-            {"role": "user", "content": prompt},
-        ]
-        limit = args.max_tokens or cap
-        try:
-            ttft, total, usage, deltas, text = stream_chat(
-                base, args.model, messages, limit, args.timeout)
-        except (urllib.error.URLError, urllib.error.HTTPError, TimeoutError) as exc:
-            print(f"{name:<10} FAILED {exc}")
-            rows.append({"job": name, "error": str(exc)})
-            continue
-        ptok = usage.get("prompt_tokens")
-        ctok = usage.get("completion_tokens") or deltas
-        decode = None
-        if ttft is not None and ctok and total > ttft:
-            decode = (ctok - 1) / (total - ttft)
-        prefill = (ptok / ttft) if (ptok and ttft) else None
-        first = text.strip().splitlines()[0][:48] if text.strip() else "(empty)"
-        print(f"{name:<10} {ptok or 0:>7} {ctok:>6} "
-              f"{(ttft or 0):>8.2f} {(decode or 0):>8.1f} {total:>8.2f}  {first}")
-        rows.append({"job": name, "prompt_tokens": ptok, "completion_tokens": ctok,
-                     "ttft_s": ttft, "decode_tps": decode, "prefill_tps": prefill,
-                     "total_s": total, "answer_head": first})
-
-    good = [r for r in rows if r.get("decode_tps")]
-    if good:
-        rates = [r["decode_tps"] for r in good]
-        ttfts = [r["ttft_s"] for r in good]
-        pre = [r["prefill_tps"] for r in good if r.get("prefill_tps")]
-        print(f"\ngeomean decode  {statistics.geometric_mean(rates):8.1f} tok/s"
-              f"   (min {min(rates):.1f} / max {max(rates):.1f})")
-        print(f"mean ttft       {statistics.mean(ttfts):8.2f} s")
-        if pre:
-            print(f"geomean prefill {statistics.geometric_mean(pre):8.1f} tok/s")
-
-    if args.burst > 1:
-        prompt = next(p for n, _, p in BATTERY if n == "plan")
-        messages = [
-            {"role": "system", "content": SYSTEM.format(salt=args.salt + "B")},
-            {"role": "user", "content": prompt},
-        ]
-        results = []
-        lock = threading.Lock()
-
-        def worker():
-            try:
-                ttft, total, usage, deltas, _ = stream_chat(
-                    base, args.model, messages, 640, args.timeout)
-                ctok = usage.get("completion_tokens") or deltas
-                with lock:
-                    results.append((ttft, total, ctok))
-            except Exception as exc:  # noqa: BLE001 - report, do not abort the burst
-                with lock:
-                    results.append((None, 0.0, str(exc)))
-
-        threads = [threading.Thread(target=worker) for _ in range(args.burst)]
-        t0 = time.perf_counter()
-        for thread in threads:
-            thread.start()
-        for thread in threads:
-            thread.join()
-        wall = time.perf_counter() - t0
-        ok = [r for r in results if r[0] is not None]
-        if ok:
-            tokens = sum(r[2] for r in ok if isinstance(r[2], int))
-            print(f"burst {args.burst}x plan: wall {wall:.1f}s  aggregate "
-                  f"{tokens / wall:.1f} tok/s  "
-                  f"per-stream {statistics.mean([r[2] / r[1] for r in ok]):.1f} tok/s"
-                  f"  mean ttft {statistics.mean([r[0] for r in ok]):.2f}s")
-        else:
-            print(f"burst {args.burst}x plan: all failed: {results[0][2]}")
-
-    if args.out:
-        with open(args.out, "w", encoding="utf-8") as handle:
-            json.dump({"salt": args.salt, "model": args.model, "base": base,
-                       "rows": rows, "burst": args.burst}, handle, indent=1)
-        print(f"wrote {args.out}")
-    return 0 if good else 1
-
-
-if __name__ == "__main__":
-    sys.exit(main())
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Decode throughput benchmark for frank-dragoon.
+# Decode throughput benchmark for frank-large.
 # Measures generation tok/s with 8K+ token prompts and 256 generated tokens.
 set -euo pipefail

@@ -57,7 +57,7 @@ run_bench() {
    # Warmup (small request)
    curl -s -m 60 http://127.0.0.1:$PORT/v1/chat/completions \
        -H "Content-Type: application/json" \
-        -d '{"model":"frank-dragoon","messages":[{"role":"user","content":"Hi"}],"max_tokens":16,"stream":false}' > /dev/null 2>&1 || true
+        -d '{"model":"frank-large","messages":[{"role":"user","content":"Hi"}],"max_tokens":16,"stream":false}' > /dev/null 2>&1 || true
    
    # Build 8K prompt
    local prompt
@@ -75,7 +75,7 @@ print(json.dumps(' '.join(words)))
    t0=$(date +%s%N)
    resp=$(curl -s -m 600 http://127.0.0.1:$PORT/v1/chat/completions \
        -H "Content-Type: application/json" \
-        -d "{\"model\":\"frank-dragoon\",\"messages\":[{\"role\":\"user\",\"content\":$prompt}],\"max_tokens\":$N_GEN,\"stream\":false}" 2>&1)
+        -d "{\"model\":\"frank-large\",\"messages\":[{\"role\":\"user\",\"content\":$prompt}],\"max_tokens\":$N_GEN,\"stream\":false}" 2>&1)
    t1=$(date +%s%N)
    
    if ! echo "$resp" | python3 -c "import sys,json; json.load(sys.stdin)" 2>/dev/null; then
@@ -1,48 +0,0 @@
-#!/usr/bin/env python3
-"""bench-probe.py — RUNS ON DANKSERVER. The campaign's decode probe: one
-/completion request, a prompt assembled from calib.jsonl to ~TARGET tokens,
-temperature 0, max_tokens 512. Reports the engine's own timings: decode rate,
-prefill rate, draft accept. Run 3x; the median is the arm's number."""
-import json, sys, urllib.request
-
-TARGET = 43600  # tokens
-BYTES_PER_TOK = 3.8
-URL = "http://localhost:7770/v1/completions"
-
-def build_prompt():
-    want = int(TARGET * BYTES_PER_TOK)
-    parts = []
-    n = 0
-    with open("/home/dank/corpora/out/calib.jsonl") as f:
-        for line in f:
-            d = json.loads(line)
-            p = d.get("prompt") or d.get("messages", [{}])[0].get("content", "")
-            parts.append(p)
-            n += len(p.encode())
-            if n >= want:
-                break
-    return "".join(parts)
-
-def probe(salt):
-    prompt = f"[probe {salt}]\n" + build_prompt()
-    body = json.dumps({
-        "model": "frank-archon",
-        "prompt": prompt, "temperature": 0.0, "max_tokens": 512,
-    }).encode()
-    req = urllib.request.Request(URL, data=body,
-        headers={"Content-Type": "application/json"})
-    with urllib.request.urlopen(req, timeout=1800) as r:
-        d = json.load(r)
-    t = d.get("timings", {})
-    return {
-        "prompt_n": t.get("prompt_n"),
-        "prefill_tps": round(t.get("prompt_per_second", 0), 1),
-        "pred_n": t.get("predicted_n"),
-        "decode_tps": round(t.get("predicted_per_second", 0), 2),
-        "draft_n": t.get("draft_n"),
-        "accept": (round(t["draft_n_accepted"] / t["draft_n"], 4)
-                   if t.get("draft_n") else None),
-    }
-
-if __name__ == "__main__":
-    print(json.dumps(probe(sys.argv[1] if len(sys.argv) > 1 else "a")))
@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-HTTP-based prefill-throughput sweep for frank-dragoon.
+HTTP-based prefill-throughput sweep for frank-large.
 Starts the server with a given --threads-batch value, sends a 64K-prompt via
 the chat API (max_tokens=0), measures prompt_tokens/wall_time.

@@ -39,7 +39,7 @@ def send_prefill_request():
    with open(PROMPT_FILE, "r") as f:
        prompt = f.read()
    body = json.dumps({
-        "model": "frank-dragoon",
+        "model": "frank-large",
        "messages": [{"role": "user", "content": prompt}],
        "max_tokens": 1,
        "stream": False
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Threads-batch sweep for frank-dragoon on dankclaw
+# Threads-batch sweep for frank-large on dankclaw
 # Benches prefill throughput at 65536 prompt tokens across threads-batch values.
 set -uo pipefail

@@ -10,7 +10,7 @@ TB_LIST=(16 32 48 64 80 96 128)
 ENV_FILE="/home/dank/GitPackages/ROCmFPX/build-qwen38/bin"

 echo "========================================"
-echo "THREADS-BATCH SWEEP — frank-dragoon"
+echo "THREADS-BATCH SWEEP — frank-large"
 echo "Model: $(basename "$MODEL") ($(du -h "$MODEL" | cut -f1))"
 echo "Threads-batch values: ${TB_LIST[*]}"
 echo "Prompt: 65536 tokens, n-gen: 0 (prefill-only)"
@@ -1,14 +1,14 @@
 #!/usr/bin/env bash
-# Benchmark ubatch with llama-bench for frank-dragoon.
+# Benchmark ubatch with llama-bench for frank-large.
 #
 # This is intentionally a ubatch-only benchmark. It uses one llama-bench
 # process, an 8K prompt workload, and equal batch/ubatch values. No server
 # process, HTTP requests, or log scraping are used.
 #
-# Run on Dankclaw after stopping frank-dragoon:
-#   sudo systemctl stop frank-dragoon
+# Run on Dankclaw after stopping frank-large:
+#   sudo systemctl stop frank-large
 #   ./scripts/bench-ubatch.sh
-#   sudo systemctl start frank-dragoon
+#   sudo systemctl start frank-large
 set -euo pipefail

 : "${LLAMA_BENCH:=/home/dank/GitPackages/ROCmFPX/build-strix-rocmfp4/bin/llama-bench}"
@@ -1,166 +0,0 @@
-#!/usr/bin/env bash
-# build-frank-archon-rad.sh — build frank-archon's .rad container from the
-# OFFICIAL Qwen/Qwen3.8-Flash-Next-FP8 checkpoint, at NATIVE precision.
-#
-#   bash scripts/build-frank-archon-rad.sh                # convert
-#   bash scripts/build-frank-archon-rad.sh --plan-only    # declare, no I/O
-#   bash scripts/build-frank-archon-rad.sh --restage      # redo staging
-#   bash scripts/build-frank-archon-rad.sh --force        # rebuild existing
-#
-# WHY A STAGING DIR (the one non-obvious step): rad-convert selects its
-# architecture plugin by the checkpoint's quantisation DESCRIPTOR —
-# derived from config.json's quantization_config (core/format/checkpoint.cpp:
-# "fp8" here). No shipped plugin claims (qwen4exp, "fp8"): the shipped
-# qwen4exp plugin claims (qwen4exp, ""), the descriptor recipe-built
-# containers carry (they are built from the bf16 upstream, which has no
-# quantization_config at all). The match is exact with no fallback, so an
-# unmodified convert refuses before declare. The descriptor is only a
-# selection key; per-weight encodings are data — the checkpoint reader
-# derives them from the tensors themselves (X.weight_scale_inv is the
-# scale plane; checkpoint.h). Staging drops the quantization_config key
-# (everything else is a relative symlink into the pristine download) so
-# the convert selects the shipped plugin. EVERY weight is then copied through
-# in its own encoding — block-FP8 codes + bf16 scale planes stay block-FP8 —
-# except TWO value-preserving reshapes that stack-qwen38-official-fp8.py
-# performs on the staging dir first, and ONE recipe rule that finishes the
-# PLE table:
-#   * experts: the plugin maps the STACKED layout (mlp.experts.gate_up_proj
-#     [E,2F,H] with the _scale_inv plane at the same index) while the official
-#     repo ships per-expert unfused tensors — staging byte-stacks them
-#     (gate rows first, no requantisation).
-#   * PLE: the plugin's fp8 branch wants the table codes beside a ONE-ELEMENT
-#     bf16 scale plane; the official repo ships 128 SCALELESS fp8 shards plus
-#     one bf16 scalar. Staging decodes to bf16 with the checkpoint's own
-#     scale, and the convert's rtn rule re-encodes at that same scale —
-#     every original code is restored exactly and the scale plane lands in
-#     the form the plugin declares.
-#
-# WHY A CONTAINER AT ALL: a checkpoint dir has no mapped/file tiers, and a
-# weight only a host kernel reads (the n-gram / PLE table, 51B params)
-# cannot be served from one (GUIDE §3.4). rad-convert also bakes the
-# tokenizer and the checkpoint's chat template; the runtime replaces the
-# template with froggeric's (--override-chat-template).
-#
-# The convert runs rad-convert inside the digest-pinned radiance image
-# (the host has no ROCm and needs none): /home/dank/models is mounted at
-# /models so the staging dir's RELATIVE symlinks resolve inside the
-# container. Output lands beside the raw download, owned by dank
-# (rootless podman maps container-root to the invoking user).
-set -euo pipefail
-
-SRC="/home/dank/models/Qwen/Qwen3.8-Flash-Next-FP8"
-STAGE="/home/dank/models/stage-qwen4exp-fp8"
-OUT_DIR="/home/dank/models/rad"
-OUT="$OUT_DIR/qwen4exp-fp8-native.rad"
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck disable=SC1091
-source "$SCRIPT_DIR/frank-archon.env"
-IMAGE="$FRANK_ARCHON_IMAGE"
-
-plan_only=0 restage=0 force=0
-for a in "$@"; do
-    case "$a" in
-        --plan-only) plan_only=1 ;;
-        --restage)   restage=1 ;;
-        --force)     force=1 ;;
-        *) echo "unknown flag: $a" >&2; exit 2 ;;
-    esac
-done
-
-if [ ! -f "$SRC/config.json" ]; then
-    echo "ERROR: raw checkpoint missing: $SRC (run scripts/download-frank-archon.sh --fetch)" >&2
-    exit 1
-fi
-echo "verifying raw checkpoint first..."
-bash "$SCRIPT_DIR/download-frank-archon.sh"
-
-if [ -f "$OUT" ] && [ "$plan_only" -eq 0 ] && [ "$force" -eq 0 ]; then
-    echo "container already exists: $OUT"
-    echo "rebuild it with --force (the old file moves to ~/.AGENTTRASH)"
-    exit 0
-fi
-
-# ---- staging ----------------------------------------------------------------
-if [ "$restage" -eq 1 ] && [ -e "$STAGE" ]; then
-    TRASH="$HOME/.AGENTTRASH/$(date +%Y%m%d)-frank-archon-stage"
-    mkdir -p "$TRASH"
-    mv "$STAGE" "$TRASH/stage-$(date +%H%M%S)"
-    echo "old staging dir moved to $TRASH"
-fi
-if [ ! -f "$STAGE/config.json" ]; then
-    mkdir -p "$STAGE"
-    python3 - "$SRC/config.json" "$STAGE/config.json" <<'PY'
-import json, sys
-src, dst = sys.argv[1], sys.argv[2]
-cfg = json.load(open(src))
-dropped = cfg.pop("quantization_config", None)
-json.dump(cfg, open(dst, "w"), indent=2)
-print(f"staging config.json written (quantization_config dropped: {dropped is not None})")
-PY
-    # The index is COPIED like config.json, never symlinked: the reshape step
-    # rewrites the stage's index, and a symlink would write through to the
-    # raw checkpoint (measured 2026-10-05: the raw index was restamped with
-    # the stacked layout and the raw verify failed 143/144). Shards stay
-    # relative symlinks — relative so the targets resolve inside the convert
-    # container (the stage's parent is mounted at /models).
-    for f in "$SRC"/*; do
-        name="$(basename "$f")"
-        case "$name" in config.json|model.safetensors.index.json) continue ;; esac
-        ln -sfn "../Qwen/Qwen3.8-Flash-Next-FP8/$name" "$STAGE/$name"
-    done
-    cp "$SRC/model.safetensors.index.json" "$STAGE/"
-    echo "staging dir ready: $STAGE ($(ls "$STAGE" | wc -l) entries)"
-fi
-
-# ---- checkpoint reshape (stacked experts + bf16 PLE table) -------------------
-# stack-qwen38-official-fp8.py reshapes the staged checkpoint in place
-# (idempotent) and writes the PLE scale to $STAGE/ple_scale.txt — see the
-# script's docstring for why each transform is value-preserving.
-echo "stacking experts + merging the PLE table (value-preserving)..."
-python3 "$SCRIPT_DIR/stack-qwen38-official-fp8.py" --stage "$STAGE"
-PLE_SCALE="$(tr -d '\n' < "$STAGE/ple_scale.txt")"
-echo "PLE fixed scale: $PLE_SCALE"
-
-# ---- convert ----------------------------------------------------------------
-# rad-convert needs no GPU: declare resolves kernels and asks each about the
-# encoding it will read — CPU-side layout questions only. (If a plugin load
-# ever demands a card, add --device /dev/kfd --device /dev/dri to this run.)
-# --plan-only runs the same declare phase and exits before a byte is written.
-echo "rad-convert: $SRC (staged) -> $OUT"
-mkdir -p "$OUT_DIR"
-CONVERT_ARGS=(/models/stage-qwen4exp-fp8 -o /models/rad/qwen4exp-fp8-native.rad
-              --home /opt/radiance/share/radiance)
-[ "$plan_only" -eq 1 ] && CONVERT_ARGS+=(--plan-only -v)
-# THE ONE RECIPE RULE (see header): the PLE table arrives from staging as a
-# bf16 merge of the checkpoint's own fp8 codes decoded with the checkpoint's
-# own scale; rtn re-encodes it at that same scale — the codes come back
-# exactly and the plugin's one-element scale plane is produced.
-CONVERT_ARGS+=(--quant "blk.*.ple_ngram.weight=rtn:codes=fp8_e4m3,block=*x*,scale=bf16,rule=fixed,scale_value=$PLE_SCALE")
-[ "$force" -eq 1 ] && [ -f "$OUT" ] && {
-    TRASH="$HOME/.AGENTTRASH/$(date +%Y%m%d)-frank-archon-rad"
-    mkdir -p "$TRASH"
-    mv "$OUT" "$TRASH/qwen4exp-fp8-native.rad.$(date +%H%M%S)"
-    echo "previous container moved to $TRASH"
-}
-podman run --rm \
-    --entrypoint rad-convert \
-    -v /home/dank/models:/models \
-    "$IMAGE" "${CONVERT_ARGS[@]}"
-
-if [ "$plan_only" -eq 1 ]; then
-    echo "plan-only run complete (no container written)"
-    exit 0
-fi
-
-# ---- record -----------------------------------------------------------------
-echo "rad-info summary:"
-podman run --rm --entrypoint rad-info -v /home/dank/models:/models:ro \
-    "$IMAGE" "/models/rad/qwen4exp-fp8-native.rad" | head -20
-MIB=$(( $(stat -c %s "$OUT") / 1048576 ))
-echo "container: $OUT (${MIB} MiB; env floor $FRANK_ARCHON_RAD_MIN_MIB MiB)"
-if [ "$MIB" -lt "$FRANK_ARCHON_RAD_MIN_MIB" ]; then
-    echo "ERROR: container below the env floor — the convert was truncated" >&2
-    exit 1
-fi
-echo "build complete"
@@ -1,96 +0,0 @@
-#!/usr/bin/env bash
-# Build the gufo runtime that serves frank-dragoon on Dankclaw.
-#
-#   bash scripts/build-gufo.sh              # build + install the pinned tag
-#   bash scripts/build-gufo.sh --verify     # only check the installed tree
-#
-# gufo (gufo-org/gufo) is the Strix Halo inference engine: it targets
-# gfx1151 specifically and has no prebuilt Linux release binaries, so the
-# runtime is built from the pinned git tag and installed to
-# /home/dank/GitPackages/gufo-<tag>/. Everything below is what Dankclaw
-# needs on top of AMD's Linux instructions.
-#
-# The host already carries the ROCm 7.2.4 stack (/opt/rocm -> /etc/
-# alternatives/rocm) with the HIP dev packages, so this script installs
-# only the ordinary system libraries gufo links against.
-#
-# Two host facts this build depends on, both discovered on 2026-09-28:
-#
-#   1. Ubuntu's librocwmma-dev ships a TRUNCATED rocWMMA header set (the
-#      public headers without rocwmma/internal/) into /usr/include, where
-#      it shadows AMD's complete copy under /opt/rocm/include. The first
-#      build died on "'internal/accessors.hpp' file not found" from
-#      /usr/include/rocwmma/rocwmma.hpp. A -I cannot fix it: in HIP mode
-#      the host compilation pass searches the system directories first.
-#      The package has no reverse dependencies, so it is removed.
-#   2. The ROCm clang picks the NEWEST /usr/include/c++ tree, which on
-#      Ubuntu 26.04 is GCC 16's. Its <atomic_wait.h> emits a symbol
-#      reference the installed libstdc++ (GLIBCXX_3.4.35, GCC 15) does not
-#      export, and the link fails with "undefined symbol:
-#      std::__detail::__notify_impl". --gcc-install-dir pins the headers to
-#      the same GCC the runtime library came from.
-set -euo pipefail
-
-GUFO_TAG="${GUFO_TAG:-v0.1.1}"
-GUFO_REPO="${GUFO_REPO:-https://github.com/gufo-org/gufo}"
-# The commit the tag resolved to when this runtime was qualified. A tag that
-# moves is an unreproducible runtime, so the pin is checked, not assumed.
-GUFO_COMMIT="${GUFO_COMMIT:-b0f8673470a3dcc2b5e9c9546c48a40b82b5ff31}"
-SRC_DIR="${GUFO_SRC_DIR:-/home/dank/GitPackages/gufo-src}"
-PREFIX="${GUFO_PREFIX:-/home/dank/GitPackages/gufo-${GUFO_TAG}}"
-JOBS="${JOBS:-$(nproc)}"
-# The GCC toolchain that owns the installed libstdc++ on this host.
-GCC_DIR="${GCC_DIR:-/usr/lib/gcc/x86_64-linux-gnu/15}"
-
-# check_pin — refuse a source tree that is not the qualified commit.
-check_pin() {
-    local commit
-    commit="$(git -C "$SRC_DIR" rev-parse HEAD 2>/dev/null || true)"
-    if [[ -n "$commit" && "$commit" != "$GUFO_COMMIT" ]]; then
-        echo "GUFO_COMMIT mismatch: $SRC_DIR is at $commit, pinned $GUFO_COMMIT" >&2
-        exit 1
-    fi
-}
-
-if [[ "${1:-}" == "--verify" ]]; then
-    # The pin first: a moved tag is the more urgent thing to hear about, and
-    # it is the check that must not be masked by a missing install.
-    check_pin
-    [[ -x "$PREFIX/bin/gufo" ]] || { echo "no gufo at $PREFIX/bin/gufo" >&2; exit 1; }
-    "$PREFIX/bin/gufo" diagnose | tail -n 5
-    exit 0
-fi
-
-echo "== system libraries gufo links against =="
-sudo -n apt-get install -y -qq --no-install-recommends \
-    build-essential cmake ninja-build pkg-config \
-    libicu-dev libcurl4-openssl-dev libssl-dev libpng-dev libjpeg-dev ffmpeg
-
-echo "== dropping Ubuntu's truncated rocWMMA headers =="
-if dpkg -s librocwmma-dev >/dev/null 2>&1; then
-    sudo -n apt-get remove -y -qq librocwmma-dev
-fi
-
-echo "== source: $GUFO_REPO @ $GUFO_TAG =="
-if [[ ! -d "$SRC_DIR/.git" ]]; then
-    mkdir -p "$(dirname "$SRC_DIR")"
-    git clone --depth 1 --branch "$GUFO_TAG" "$GUFO_REPO" "$SRC_DIR"
-fi
-git -C "$SRC_DIR" fetch --depth 1 origin "refs/tags/$GUFO_TAG"
-git -C "$SRC_DIR" checkout -q --detach "refs/tags/$GUFO_TAG"
-echo "   $(git -C "$SRC_DIR" rev-parse HEAD)"
-check_pin
-
-echo "== configure + build (release, HIP gfx1151) =="
-cd "$SRC_DIR"
-toolchain="--gcc-install-dir=$GCC_DIR"
-cmake --preset release \
-    -DCMAKE_INSTALL_PREFIX="$PREFIX" \
-    -DCMAKE_HIP_FLAGS="$toolchain" \
-    -DCMAKE_EXE_LINKER_FLAGS="$toolchain"
-cmake --build --preset release --parallel "$JOBS"
-cmake --install build/release
-
-echo "== verify =="
-"$PREFIX/bin/gufo" diagnose
-echo "frank-dragoon runtime ready: $PREFIX/bin/gufo ($GUFO_TAG @ $commit)"
@@ -1,96 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-readonly repo_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)"
-readonly ck_root="${KAIRIC_CK_ROOT:-$repo_root/third_party/composable_kernel}"
-readonly ck_commit=fdf4bb7fcc984811cef48ce817d89aac064b984a
-readonly ck_patch="$repo_root/patches/composable-kernel-gfx1151-iu4.patch"
-readonly build_dir="${BUILD_DIR:-$repo_root/build-kairic}"
-readonly rocm="${ROCM_PATH:-/opt/rocm}"
-readonly jobs="${JOBS:-$(nproc)}"
-
-for tool in cmake git ninja; do
-  command -v "$tool" >/dev/null || {
-    echo "missing required tool: $tool" >&2
-    exit 1
-  }
-done
-
-[[ -f "$ck_patch" ]] || {
-  echo "missing Composable Kernel patch: $ck_patch" >&2
-  exit 1
-}
-
-if [[ ! -d "$ck_root/.git" ]]; then
-  mkdir -p "$(dirname -- "$ck_root")"
-  git clone https://github.com/ROCm/composable_kernel.git "$ck_root"
-fi
-
-git -C "$ck_root" checkout "$ck_commit"
-if git -C "$ck_root" diff --quiet; then
-  git -C "$ck_root" apply --check "$ck_patch"
-  git -C "$ck_root" apply "$ck_patch"
-elif git -C "$ck_root" apply --reverse --check "$ck_patch"; then
-  echo "Composable Kernel release patch is already applied"
-else
-  echo "Composable Kernel checkout does not match the pinned patch" >&2
-  exit 1
-fi
-
-if [[ -x "$rocm/bin/amdclang++" ]]; then
-  hip_compiler="$rocm/bin/amdclang++"
-elif [[ -x "$rocm/llvm/bin/clang++" ]]; then
-  hip_compiler="$rocm/llvm/bin/clang++"
-else
-  echo "cannot find a HIP compiler below ROCM_PATH=$rocm" >&2
-  exit 1
-fi
-
-if [[ -n "${CC:-}" ]]; then
-  c_compiler="$(command -v "$CC")"
-elif [[ -x /usr/bin/gcc ]]; then
-  c_compiler=/usr/bin/gcc
-else
-  c_compiler="$(command -v gcc)"
-fi
-if [[ -n "${CXX:-}" ]]; then
-  cxx_compiler="$(command -v "$CXX")"
-elif [[ -x /usr/bin/g++ ]]; then
-  cxx_compiler=/usr/bin/g++
-else
-  cxx_compiler="$(command -v g++)"
-fi
-
-export ROCM_PATH="$rocm"
-export PATH="$rocm/bin:$rocm/lib/llvm/bin:$rocm/llvm/bin:$PATH"
-export LD_LIBRARY_PATH="$rocm/lib:$rocm/lib/rocm_sysdeps/lib:$rocm/lib/llvm/lib:$rocm/llvm/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"
-readonly hip_flags="-DGGML_ROCMFPX_RDNA35_MMID_MAX_BATCH=5 -DGGML_ROCMFPX_MOE_MMVQ_ROWS_PER_BLOCK=4${KAIRIC_HIP_TOOLCHAIN_FLAGS:+ $KAIRIC_HIP_TOOLCHAIN_FLAGS}"
-
-cmake -S "$repo_root" -B "$build_dir" -G Ninja \
-  -DCMAKE_BUILD_TYPE=Release \
-  -DCMAKE_C_COMPILER="$c_compiler" \
-  -DCMAKE_CXX_COMPILER="$cxx_compiler" \
-  -DCMAKE_HIP_COMPILER="$hip_compiler" \
-  -DCMAKE_HIP_FLAGS="$hip_flags" \
-  -DCMAKE_PREFIX_PATH="$rocm" \
-  -DBUILD_SHARED_LIBS=ON \
-  -DGGML_CPU=ON -DGGML_OPENMP=ON -DGGML_HIP=ON -DGGML_CUDA=OFF \
-  -DGGML_VULKAN=OFF -DGGML_HIP_FORCE_MMQ=ON -DGGML_HIP_GRAPHS=ON \
-  -DGGML_HIP_MMQ_MFMA=ON -DGGML_HIP_NO_VMM=ON \
-  -DGGML_HIP_ROCWMMA_FATTN=OFF -DGGML_NATIVE=ON \
-  -DAMDGPU_TARGETS=gfx1151 -DGPU_BUILD_TARGETS=gfx1151 \
-  -DPROMPTFORGE_CK_ROOT="$ck_root" \
-  -DLLAMA_BUILD_WEBUI=OFF \
-  -DGGML_BUILD_TESTS=OFF -DLLAMA_BUILD_TESTS=OFF -DLLAMA_BUILD_SERVER=ON
-
-cmake --build "$build_dir" --target llama-server -j"$jobs"
-
-"$build_dir/bin/llama-server" --version
-"$build_dir/bin/llama-server" --help | grep -A1 -- '--kairic-edge'
-ldd "$build_dir/bin/llama-server" 2>&1 | tee "$build_dir/llama-server.ldd.txt"
-if grep -Eiq 'not found|version .* required by .* not found' "$build_dir/llama-server.ldd.txt"; then
-  echo "runtime dependency verification failed" >&2
-  exit 1
-fi
-
-echo "Kairic Edge runtime built at $build_dir/bin/llama-server"
@@ -38,7 +38,6 @@ JOBS="${JOBS:-$(nproc)}"
 ROCM_VERSION="${ROCM_VERSION:-7.14.0a20260624}"
 ROCM_LOCAL_PATH="${ROCM_LOCAL_PATH:-${XDG_DATA_HOME:-$HOME/.local/share}/rocm-${ROCM_VERSION}}"
 HIP_ARCH="${HIP_ARCH:-gfx1201}"
-GGML_HIP_RCCL="${GGML_HIP_RCCL:-OFF}"

 # ── Source ────────────────────────────────────────────────────────────
 if [[ ! -d "$LLAMA_SRC/.git" ]]; then
@@ -71,13 +70,11 @@ export ROCM_PATH="$ROCM_LOCAL_PATH"
 export HIP_PATH="$ROCM_LOCAL_PATH"

 # ── Configure ─────────────────────────────────────────────────────────
-# GGML_HIP_RCCL defaults OFF: layer-split serving needs no collectives, and
-# until 2026-09-20 this host's second card could not dispatch a RCCL kernel at
-# all (its PCIe path had no atomic routing).  With RCCL off, llama.cpp logs
-# "internal AllReduce init failed ... falling back to meta-backend butterfly"
-# and only --split-mode row/tensor pays for it.  Set GGML_HIP_RCCL=ON (with a
-# distinct BUILD_DIR) for the collective-backed runtime; the atomics
-# precondition now holds on both cards.
+# GGML_HIP_RCCL stays OFF: this host's second card cannot dispatch a RCCL
+# kernel at all (its PCIe path has no atomic routing), and layer-split serving
+# needs no collectives.  With RCCL off, llama.cpp logs "internal AllReduce init
+# failed ... falling back to meta-backend butterfly" and only --split-mode
+# tensor pays for it.
 cmake -S "$LLAMA_SRC" -B "$BUILD_DIR" \
    -G Ninja \
    -DCMAKE_BUILD_TYPE=Release \
@@ -86,7 +83,7 @@ cmake -S "$LLAMA_SRC" -B "$BUILD_DIR" \
    -DCMAKE_CXX_FLAGS="-I${ROCM_LOCAL_PATH}/include" \
    -DCMAKE_POSITION_INDEPENDENT_CODE=ON \
    -DGGML_HIP=ON \
-    -DGGML_HIP_RCCL="$GGML_HIP_RCCL" \
+    -DGGML_HIP_RCCL=OFF \
    -DGGML_CUDA=OFF \
    -DGGML_VULKAN=OFF \
    -DGGML_NATIVE=OFF \
@@ -111,7 +108,7 @@ if command -v patchelf >/dev/null; then
    mkdir -p "$LIB_DIR"
    for pat in libamdhip64 librocblas libhipblas libhipblaslt librocsolver \
               libroctx64 libamd_comgr libhsa-runtime64 librocm_kpack \
-               librocroller librocprofiler-register librocm-core; do
+               librocroller librocprofiler-register; do
        cp -v "$ROCM_LOCAL_PATH/lib/$pat".so* "$LIB_DIR/" 2>/dev/null || true
    done
    cp -v "$ROCM_LOCAL_PATH/lib/llvm/lib"/libLLVM.so* \
@@ -119,13 +116,6 @@ if command -v patchelf >/dev/null; then
          "$ROCM_LOCAL_PATH/lib/llvm/lib"/libomp.so* \
          "$ROCM_LOCAL_PATH/lib/llvm/lib"/libomptarget.so* "$LIB_DIR/" 2>/dev/null || true
    cp -v "$ROCM_LOCAL_PATH/lib/rocm_sysdeps/lib"/librocm_sysdeps_*.so* "$LIB_DIR/" 2>/dev/null || true
-    # A RCCL build links librccl.so.1 (imported shared even with
-    # BUILD_SHARED_LIBS=OFF), and the binaries resolve libraries through
-    # $ORIGIN/../lib — so the collective library must ride beside the rest or
-    # llama-server fails to exec at all.
-    if [[ "$GGML_HIP_RCCL" == "ON" ]]; then
-        cp -v "$ROCM_LOCAL_PATH"/lib/librccl.so* "$LIB_DIR/" 2>/dev/null || true
-    fi
    # rocBLAS and hipBLASLt look for their device code at a FIXED depth under
    # the binary's lib dir: $ORIGIN/../lib/rocblas/library and
    # $ORIGIN/../lib/hipblaslt/library/<arch>. `cp -r SRC DST/` with a missing
@@ -1,89 +0,0 @@
-#!/usr/bin/env bash
-# Build the ROCmFPX runtime that serves frank-dragoon on Dankclaw.
-#
-#   bash scripts/build-rocmfpx.sh              # clone/fetch + build the pin
-#   bash scripts/build-rocmfpx.sh --verify     # only check the installed tree
-#
-# Runtime: kingjones30/ROCmFPX — charlie12345/ROCmFPX plus the model-card
-# patches, i.e. the fork that owns the ROCmFPx tensor formats. frank-dragoon's
-# payload is ftype 115 (`Q8_0_ROCMFPX_AGENT`): 311 tensors of
-# GGML_TYPE_Q8_0_ROCMFPX (103), a type that exists ONLY in this fork, so
-# stock llama.cpp, gufo and every other loader on the host reject the file.
-# This is the same tree that served the Qwen3.8-Flash-Next ROCmFP4 STRIX
-# endpoint 2026-08-30 → 09-11 (see the kingjones runbook), rebuilt here so a
-# fresh host can be brought up from the repo alone.
-#
-# Why this commit and not a newer one: 36e9acd (2026-08-28) is what was
-# qualified against this payload on 2026-10-02 — it loads ftype 115, survives
-# warmup, and drafts with the MTP head at acceptance 0.65. The five legacy
-# builds of 2026-08-25 crashed this same file in ggml_compute_forward_set_rows
-# (see kingjones-q8agent-rocmfpx.md), so the pin is load-bearing: do not bump
-# it without re-running that crash test.
-#
-# Host notes:
-#   * -DLLAMA_BUILD_WEBUI=OFF is REQUIRED on this box. The tree provisions its
-#     embedded UI assets via npm or the HF llama-ui bucket; npm is absent here
-#     and the bucket download half-failed, aborting the link at 98%. The API
-#     server is unaffected.
-#   * The build links against the host ROCm (/opt/rocm); no bundled toolchain
-#     like the gfx1201 R9700 build needed.
-set -euo pipefail
-
-ROCMFPX_REPO="${ROCMFPX_REPO:-https://github.com/kingjones30/ROCmFPX.git}"
-# The commit frank-dragoon was qualified with (measured 2026-10-02).
-ROCMFPX_COMMIT="${ROCMFPX_COMMIT:-36e9acd40e10a87cd3c3ef8ec734668757dc8520}"
-SRC_DIR="${ROCMFPX_SRC_DIR:-/home/dank/GitPackages/kingjones-ROCmFPX}"
-BUILD_DIR="${ROCMFPX_BUILD_DIR:-$SRC_DIR/build}"
-GPU_TARGET="${ROCMFPX_GPU_TARGET:-gfx1151}"
-JOBS="${JOBS:-$(nproc)}"
-
-# check_pin — refuse a source tree that is not the qualified commit. A moved
-# fork means different kernels under the same path, and on this model line a
-# wrong build is a segfault at first request, not a clean error.
-check_pin() {
-    local commit
-    commit="$(git -C "$SRC_DIR" rev-parse HEAD 2>/dev/null || true)"
-    if [[ -n "$commit" && "$commit" != "$ROCMFPX_COMMIT" ]]; then
-        echo "ROCMFPX_COMMIT mismatch: $SRC_DIR is at $commit, pinned $ROCMFPX_COMMIT" >&2
-        exit 1
-    fi
-}
-
-if [[ "${1:-}" == "--verify" ]]; then
-    check_pin
-    [[ -x "$BUILD_DIR/bin/llama-server" ]] || {
-        echo "no ROCmFPX llama-server at $BUILD_DIR/bin/llama-server" >&2
-        exit 1
-    }
-    # The format the endpoint exists for: the fork must carry the ROCmFPx
-    # tensor type, or the payload cannot load at all.
-    "$BUILD_DIR/bin/llama-server" --help 2>&1 | grep -q -- '--spec-type' || {
-        echo "$BUILD_DIR/bin/llama-server has no --spec-type: MTP drafting is impossible" >&2
-        exit 1
-    }
-    "$BUILD_DIR/bin/llama-server" --version | head -1
-    exit 0
-fi
-
-echo "== source: $ROCMFPX_REPO @ $ROCMFPX_COMMIT =="
-if [[ ! -d "$SRC_DIR/.git" ]]; then
-    mkdir -p "$(dirname "$SRC_DIR")"
-    git clone "$ROCMFPX_REPO" "$SRC_DIR"
-fi
-git -C "$SRC_DIR" fetch --quiet origin "$ROCMFPX_COMMIT" || true
-git -C "$SRC_DIR" checkout -q --detach "$ROCMFPX_COMMIT"
-check_pin
-echo "   $(git -C "$SRC_DIR" rev-parse HEAD)"
-
-echo "== configure + build (release, HIP $GPU_TARGET) =="
-cmake -S "$SRC_DIR" -B "$BUILD_DIR" \
-    -DGGML_HIP=ON \
-    -DGPU_TARGETS="$GPU_TARGET" \
-    -DGGML_NATIVE=ON \
-    -DCMAKE_BUILD_TYPE=Release \
-    -DLLAMA_BUILD_WEBUI=OFF
-cmake --build "$BUILD_DIR" --target llama-server llama-quantize -j "$JOBS"
-
-echo "== verify =="
-"$BUILD_DIR/bin/llama-server" --version | head -1
-echo "frank-dragoon runtime ready: $BUILD_DIR/bin/llama-server ($ROCMFPX_COMMIT)"
@@ -1,110 +0,0 @@
-#!/usr/bin/env python3
-"""calib-push.py — drive a calibration corpus through a radiance scratch
-server's prefill so its tap writes layer Hessians (docs/MOE-W4.md).
-
-Runs ON DANKSERVER next to the scratch server (the one autoresearch- /
-serve-style scratch container booted with RADIANCE_CALIB_DIR set).
-Reads the corpus JSONL produced by make-calib-corpus.py
-({"prompt": "..."} a line), POSTs each prompt to /v1/completions with
-max_tokens=1 (prefill-only cost, one token out), at N-way concurrency
-matching the scratch server's --max-num-seqs budget.
-
-Corpus rounds repeat until the engine prints the tap's completion line
-("calibration wrote layer Hessians") in `podman logs <container>` — that
-is the ground truth that RADIANCE_CALIB_TOKENS was reached. After that
-line, further prompts are pure waste, so the driver exits.
-
-Mechanics notes:
- requests carry no sampling params that matter (max_tokens=1, greedy).
- a per-request timeout of 30 min: at ~1k tok/s prefill a 12k-token
-  prompt is a few seconds; the timeout only catches a wedged engine.
- failures print and continue: the tap pools over tokens, a few lost
-  prompts do not bias the Hessians (the corpus is drawn round-robin over
-  source classes, so loss is class-neutral as long as failures are rare;
-  a systematic 4xx is loud in the log and must be fixed, not ignored).
-
-Usage: calib-push.py [--port 7770] [--parallel 64] [--container arbench]
-       [--corpus /home/dank/corpora/out/calib.jsonl] [--max-rounds 4]
-"""
-import argparse
-import concurrent.futures
-import json
-import subprocess
-import sys
-import time
-import urllib.request
-
-DONE_MARK = "calibration wrote"
-
-
-def tap_done(container):
-    """True if the engine logged the tap's completion line."""
-    try:
-        out = subprocess.run(
-            ["podman", "logs", "--tail", "50", container],
-            capture_output=True, text=True, timeout=30,
-        )
-    except Exception:
-        return False
-    return DONE_MARK in (out.stdout + out.stderr)
-
-
-def push_one(url, prompt):
-    body = json.dumps({
-        "model": "frank-archon",
-        "prompt": prompt,
-        "max_tokens": 1,
-        "temperature": 0,
-        "stream": False,
-    }).encode()
-    req = urllib.request.Request(
-        url, data=body, headers={"Content-Type": "application/json"})
-    try:
-        with urllib.request.urlopen(req, timeout=1800) as r:
-            r.read()
-        return True
-    except Exception as e:
-        print(f"FAIL {str(e)[:120]}", flush=True)
-        return False
-
-
-def main():
-    ap = argparse.ArgumentParser()
-    ap.add_argument("--port", type=int, default=7770)
-    ap.add_argument("--parallel", type=int, default=64)
-    ap.add_argument("--container", default="arbench")
-    ap.add_argument("--corpus", default="/home/dank/corpora/out/calib.jsonl")
-    ap.add_argument("--max-rounds", type=int, default=4)
-    a = ap.parse_args()
-    url = f"http://127.0.0.1:{a.port}/v1/completions"
-
-    prompts = []
-    with open(a.corpus) as f:
-        for line in f:
-            line = line.strip()
-            if line:
-                prompts.append(json.loads(line)["prompt"])
-    print(f"corpus: {len(prompts)} prompts", flush=True)
-
-    for rnd in range(1, a.max_rounds + 1):
-        if tap_done(a.container):
-            break
-        t0 = time.time()
-        ok = 0
-        with concurrent.futures.ThreadPoolExecutor(a.parallel) as ex:
-            for good in ex.map(lambda p: push_one(url, p), prompts):
-                ok += 1 if good else 0
-        dt = time.time() - t0
-        print(f"round {rnd}: {ok}/{len(prompts)} ok in {dt:.0f}s "
-              f"({sum(len(p) for p in prompts)/4/dt:.0f} chars/s est)",
-              flush=True)
-        if tap_done(a.container):
-            break
-    else:
-        print("max rounds exhausted, tap not done", flush=True)
-        sys.exit(1)
-    print("TAP_DONE: calibration wrote layer Hessians", flush=True)
-
-
-if __name__ == "__main__":
-    main()
@@ -1,73 +0,0 @@
-#!/usr/bin/env bash
-# convert-swift15-w4dn8.sh — RUNS ON DANKSERVER. The final recipe convert of
-# the Swift 1.5 checkpoint: gate_up experts through GPTQ against the 10M-token
-# calibration Grams, down projections block-fp8, protected experts bf16,
-# trunk int8, PLE fixed-scale fp8 (scripts/recipes/
-# qwen4exp-swift15-w4dn8-i8-hc8m.recipe).
-#
-# The convert engine is 1.0.13 — the SAME pin that will serve the result, so
-# the .rad crosses no version boundary. Only the Gram files cross versions
-# (1.2.0 wrote them; the RADGRAM2 magic, gram.r%d.%s.bin naming and the
-# calib_gram/calib_resolve/calib_stem symbols are byte-identical between the
-# two libquant.so). rad-convert runs on the host backend (no GPU visible in
-# the container) — production can stay up through this script.
-#
-# Prereqs (campaign order): calibration complete (calib-push printed TAP_DONE),
-# the protected-expert cast lines rewritten into the recipe by
-# derive-protected-experts.py, and the 335 GiB bf16 container deleted —
-# the peak-disk arithmetic needs that space (checkpoint 335.3 + output ~132
-# GiB on the volume; --reuse is NOT used, see the recipe header).
-set -euo pipefail
-
-PIN_1013=sha256:4c3f484564bb2872784e46b0a59cbd71becc9c1e746e301a3596ffae253c322e
-IMAGE="stilldeadcode/radiance@$PIN_1013"
-CKPT=/home/dank/models/ukisai/Swift1.5-Qwen3.8-Flash-Next
-RECIPE=/home/dank/serverAppConfigs-swift15/scripts/recipes/qwen4exp-swift15-w4dn8-i8-hc8m.recipe
-CALIB=/home/dank/corpora/calib
-OUT=/home/dank/models/rad/qwen4exp-swift15-w4dn8-i8-hc8m.rad
-LOG=/home/dank/logs/swift15_convert.log
-# gate_up ~37.6 + down ~18.8 + PLE 47.7 + trunk/embeddings/head ~10 GiB (all-w4 expert table;
-# the plugin's one-encoding law dropped the block-fp8 down tier -- see the recipe header).
-MIN_MIB=${FRANK_SWIFT15_RAD_MIN_MIB:-108000}
-
-# Gate 1: inputs. A missing Gram directory converts UNCALIBRATED with a
-# per-tensor stderr note, which is silently worse than failing here.
-[ -d "$CKPT" ] || { echo "no checkpoint at $CKPT" >&2; exit 1; }
-[ -f "$RECIPE" ] || { echo "no recipe at $RECIPE" >&2; exit 1; }
-GRAMS=$(find "$CALIB" -maxdepth 1 -name 'gram.r*.bin' 2>/dev/null | wc -l)
-[ "$GRAMS" -ge 48 ] || { echo "calib dir $CALIB holds $GRAMS gram files (<48)" >&2; exit 1; }
-if [ -e "$OUT" ]; then echo "$OUT already exists; move it to trash first" >&2; exit 1; fi
-if [ -e /home/dank/models/rad/qwen4exp-swift15-bf16.rad ]; then
-    echo "the bf16 container is still on disk; delete it first (peak disk)" >&2; exit 1
-fi
-
-# Gate 2: disk. Output ~132 GiB plus convert staging, 20 GiB of slack.
-FREE_MIB=$(df --output=avail -m /home/dank/models | tail -1 | tr -d ' ')
-[ "$FREE_MIB" -ge $((MIN_MIB + 20480)) ] || {
-    echo "only ${FREE_MIB} MiB free on /home/dank/models" >&2; exit 1; }
-
-# The recipe names $CALIB; rad-convert expands it from the environment
-# (MOE-W4.md:275). The recipe's cast section must name THIS checkpoint's
-# protected experts — derive-protected-experts.py rewrote it.
-echo "convert: $CKPT -> $OUT (gptq calib=$CALIB, $(date -Is))" | tee "$LOG"
-podman run --rm --name swift15-convert \
-    -v /home/dank/models:/models \
-    -v /home/dank/serverAppConfigs-swift15:/campaign:ro \
-    -v "$CALIB:/data/calib:ro" \
-    -e CALIB=/data/calib \
-    --entrypoint /opt/radiance/bin/rad-convert \
-    "$IMAGE" "/models/${CKPT#/home/dank/models/}" \
-    --recipe /campaign/"${RECIPE#/home/dank/serverAppConfigs-swift15/}" \
-    -o /models/rad/"$(basename "$OUT")" 2>&1 | tee -a "$LOG"
-rc=${PIPESTATUS[0]}
-[ "$rc" -eq 0 ] || { echo "rad-convert rc=$rc; log: $LOG" >&2; exit "$rc"; }
-
-# Gate 3: the artifact. rad-info's recipe echo is the receipt that GPTQ ran.
-SIZE_MIB=$(( $(stat -c %s "$OUT") / 1048576 ))
-[ "$SIZE_MIB" -ge "$MIN_MIB" ] || {
-    echo "$OUT is ${SIZE_MIB} MiB < floor ${MIN_MIB}" >&2; exit 1; }
-podman run --rm --entrypoint /opt/radiance/bin/rad-info \
-    -v /home/dank/models:/models:ro "$IMAGE" /models/rad/"$(basename "$OUT")" \
-    2>&1 | tee -a "$LOG" | grep -c 'gptq' >/dev/null \
-    || echo "WARNING: rad-info shows no gptq rule in the recorded recipe" >&2
-echo "CONVERT_DONE ${SIZE_MIB} MiB -> $OUT"
@@ -1,58 +0,0 @@
-#!/usr/bin/env bash
-# Pin Dankserver's fleet NIC (eno1, 192.168.0.235) as the primary default route.
-#
-# The 2026-09-20 board swap (TUF GAMING B650-E -> ProArt B850-Creator WiFi NEO)
-# brought up a second port, eno2, which took DHCP and — with NetworkManager's
-# default per-connection metric of 100 — came up with metric 101 while eno1's
-# static gateway got 102. Outbound traffic therefore started leaving by eno2
-# even though every fleet peer, Caddy upstream and monitoring target addresses
-# this host as .235. Keep eno2 (it is a real second link) but make it secondary:
-# route metrics decide the default route, so eno1 wins while eno2 stays a
-# failover.
-#
-# Run on Dankserver.  Idempotent; NetworkManager owns these connections (the
-# netplan files under /etc/netplan are its generated shim, so edit via nmcli).
-#
-#   bash scripts/dankserver-route-primary.sh [--check]
-set -euo pipefail
-
-PRIMARY='Wired connection 1'      # eno1, static 192.168.0.235, fleet address
-SECONDARY='Wired connection 2'    # eno2, DHCP 192.168.0.247
-PRIMARY_IF='eno1'
-SECONDARY_IF='eno2'
-PRIMARY_METRIC=100
-SECONDARY_METRIC=200
-
-show() {
-    printf 'routes:\n'; ip route show default
-    printf 'wanted: %s metric %s, %s metric %s\n' \
-        "$PRIMARY" "$PRIMARY_METRIC" "$SECONDARY" "$SECONDARY_METRIC"
-}
-
-if [[ "${1:-}" == '--check' ]]; then
-    for conn in "$PRIMARY" "$SECONDARY"; do
-        printf '%s: ipv4=%s ipv6=%s\n' "$conn" \
-            "$(nmcli -g ipv4.route-metric connection show "$conn")" \
-            "$(nmcli -g ipv6.route-metric connection show "$conn")"
-    done
-    show
-    exit 0
-fi
-
-nmcli connection modify "$PRIMARY" \
-    ipv4.route-metric "$PRIMARY_METRIC" ipv6.route-metric "$PRIMARY_METRIC"
-nmcli connection modify "$SECONDARY" \
-    ipv4.route-metric "$SECONDARY_METRIC" ipv6.route-metric "$SECONDARY_METRIC"
-
-# `nmcli device reapply <ifname>` pushes the edited profile without tearing the
-# link down.  `nmcli connection up` would re-run DHCP and briefly drop the route
-# this session rides on, and `connection reapply` is not a verb (NM 1.54).
-nmcli device reapply "$PRIMARY_IF"
-nmcli device reapply "$SECONDARY_IF"
-
-show
-if [[ "$(ip route show default | head -1)" != *"dev $PRIMARY_IF"* ]]; then
-    printf 'ERROR: eno1 is still not the preferred default route\n' >&2
-    exit 1
-fi
-printf 'eno1 is the preferred default route; eno2 remains up as failover.\n'
@@ -1,71 +0,0 @@
-#!/usr/bin/env bash
-# Single source of truth for Dankserver GLM-5.3 state.
-#
-# This exists because the ad-hoc status commands kept producing WRONG readings.
-# The specific trap: /proc/meminfo separates key from value with a TAB, so the
-# common idiom
-#   grep MemAvailable /proc/meminfo | tr -s " " | cut -d" " -f2
-# yields an empty field (tab is not a space) and awk then prints 0.0 -- which
-# reads as "host out of memory" when the host actually has 240 GiB free.
-# Everything below parses on a colon split, which is tab-agnostic, and the
-# memory figure is cross-checked before it is shown.
-set -uo pipefail
-
-MB=1048576
-GLM_CTR="${GLM_CTR:-glm-w4a16}"
-
-mem_field() { awk -v k="$1:" '$1==k {printf "%.1f", $2/'"$MB"'; exit}' /proc/meminfo; }
-section() { printf '\n== %s ==\n' "$1"; }
-
-section "time / host"
-printf '  %s   %s\n' "$(date +%H:%M:%S)" \
-  "$(awk -F: '/model name/{print $2; exit}' /proc/cpuinfo | sed 's/^ *//')"
-
-section "memory (GiB)"
-TOT=$(mem_field MemTotal); AVAIL=$(mem_field MemAvailable)
-printf '  MemTotal     %8s\n' "$TOT"
-printf '  MemAvailable %8s\n' "$AVAIL"
-printf '  Cached       %8s\n' "$(mem_field Cached)"
-awk -v t="$TOT" -v a="$AVAIL" 'BEGIN{
-  if (t+0 <= 0 || a+0 <= 0) { print "  *** PARSE BUG: zero value ***"; exit }
-  if (a+0 > t+0)         { print "  *** PARSE BUG: available > total ***"; exit }
-  printf "  check        ok (%.0f%% free)\n", 100*a/t
-}'
-
-section "swap"
-swapon --show=NAME,SIZE,USED --noheadings 2>/dev/null \
-  | awk '{printf "  %-12s %6s used of %s\n",$1,$3,$2}' || echo "  none"
-
-section "gpu"
-# CSV layout: device,VRAM Total Memory (B),VRAM Total Used Memory (B)
-rocm-smi --showmeminfo vram --csv 2>/dev/null | awk -F, '
-  NR>1 && $1 ~ /^card[0-9]+$/ {
-    printf "  %-8s %7.2f GiB used of %.2f\n", $1, $3/1073741824, $2/1073741824
-  }'
-printf '  compute util: '
-rocm-smi --showuse --csv 2>/dev/null | awk -F, 'NR>1 && $1 ~ /^card[0-9]+$/ {printf "%s=%s%% ", $1, $2}'
-echo
-
-section "disk"
-df -h /home/dank 2>/dev/null | awk 'NR==2{printf "  %s  %s used  %s free  (%s)\n",$1,$3,$4,$5}'
-
-section "llm containers"
-if podman ps -a --format '{{.Names}}' 2>/dev/null | grep -qE 'glm|frank'; then
-  podman ps -a --format '{{.Names}}|{{.Status}}' 2>/dev/null \
-    | awk -F'|' '$1 ~ /glm|frank/ {printf "  %-18s %s\n",$1,$2}'
-else
-  echo "  none"
-fi
-
-section "frank-archon unit"
-printf '  active:  %s\n' "$(systemctl is-active frank-archon 2>/dev/null | head -1)"
-printf '  enabled: %s\n' "$(systemctl is-enabled frank-archon 2>/dev/null | head -1)"
-
-section "glm serve tail"
-if podman ps -a --format '{{.Names}}' 2>/dev/null | grep -qx "$GLM_CTR"; then
-  podman logs "$GLM_CTR" 2>&1 | grep -viE 'multiproc_executor\.py:943' | tail -5 | sed 's/^/  /'
-else
-  echo "  (container $GLM_CTR not present)"
-fi
-
-section "done"
@@ -1,55 +0,0 @@
-#!/usr/bin/env python3
-"""deep-probe.py — one chat completion at ~43.6k prompt tokens, temp 0, 512
-generated, streamed; decode = completion_tokens / (total - ttft)."""
-import json, time, urllib.request
-
-TARGET_BYTES = int(43600 * 3.8)
-
-def build():
-    parts, n = [], 0
-    with open("/home/dank/corpora/out/calib.jsonl") as f:
-        for line in f:
-            p = json.loads(line)["prompt"]
-            parts.append(p)
-            n += len(p.encode())
-            if n >= TARGET_BYTES:
-                break
-    return "".join(parts)
-
-def main(salt):
-    body = json.dumps({
-        "model": "frank-archon",
-        "messages": [{"role": "user", "content": f"[probe {salt}] Continue and summarize this material in English, 400 words.\n\n" + build()}],
-        "temperature": 0.0, "max_tokens": 512,
-        "stream": True, "stream_options": {"include_usage": True},
-    }).encode()
-    req = urllib.request.Request("http://localhost:7770/v1/chat/completions",
-        data=body, headers={"Content-Type": "application/json"})
-    t0 = time.time(); ttft = None; ctok = 0; usage = {}
-    with urllib.request.urlopen(req, timeout=2400) as r:
-        for raw in r:
-            line = raw.decode().strip()
-            if not line.startswith("data:"):
-                continue
-            d = line[5:].strip()
-            if d == "[DONE]":
-                break
-            j = json.loads(d)
-            if j.get("usage"):
-                usage = j["usage"]
-            for ch in j.get("choices", []):
-                delta = (ch.get("delta") or {})
-                piece = delta.get("content") or delta.get("reasoning_content") or ""
-                if piece and ttft is None:
-                    ttft = time.time() - t0
-                ctok += 1
-    total = time.time() - t0
-    gen = usage.get("completion_tokens") or ctok
-    dec = gen / (total - (ttft or 0)) if total > (ttft or 0) else 0
-    print(json.dumps({"salt": salt, "prompt_tokens": usage.get("prompt_tokens"),
-                      "completion_tokens": gen, "ttft_s": round(ttft or 0, 2),
-                      "total_s": round(total, 1), "decode_tps": round(dec, 2)}))
-
-if __name__ == "__main__":
-    import sys
-    main(sys.argv[1] if len(sys.argv) > 1 else "x")
@@ -38,7 +38,6 @@ SERVICE_ORDER = (
    "loki",
    "alloy",
    "node-exporter",
-    "alertmanager",
    "authentik-postgres",
    "authentik-server",
    "authentik-worker",
@@ -52,7 +51,6 @@ SERVICE_ORDER = (
    "copyparty",
    "jellyfin",
    "calibre-web",
-    "calibre-server",
    "plex",
    "tautulli",
    "prowlarr",
@@ -61,9 +59,9 @@ SERVICE_ORDER = (
    "sonarr",
    "lidarr",
    "readarr",
-    "frank-dragoon",
-    "frank-zealot",
-    "frank-archon",
+    "frank-large",
+    "frank-small",
+    "frank-medium",
 )

 DANKCLAW_SERVICES = {
@@ -85,7 +83,6 @@ DANKCLAW_SERVICES = {
    "loki",
    "alloy",
    "node-exporter",
-    "alertmanager",
    "authentik-postgres",
    "authentik-server",
    "authentik-worker",
@@ -93,8 +90,8 @@ DANKCLAW_SERVICES = {
    "authentik-outpost-ldap",
    "caddy",
    "homepage",
-    "frank-dragoon",
-    "frank-zealot",
+    "frank-large",
+    "frank-small",
 }

 DANKSERVER_SERVICES = {
@@ -104,7 +101,6 @@ DANKSERVER_SERVICES = {
    "copyparty",
    "jellyfin",
    "calibre-web",
-    "calibre-server",
    "plex",
    "tautulli",
    "prowlarr",
@@ -113,7 +109,7 @@ DANKSERVER_SERVICES = {
    "sonarr",
    "lidarr",
    "readarr",
-    "frank-archon",
+    "frank-medium",
    "node-exporter",
 }

@@ -250,10 +246,6 @@ def services_for_path(path: str, target: str) -> set[str]:
            _add(services, "searxng")
        elif group == "prometheus":
            _add(services, "prometheus")
-            if len(parts) >= 3 and parts[2] == "alertmanager.yml":
-                # The Alertmanager config ships from this directory: a change
-                # to it must redeploy the service that installs it.
-                _add(services, "alertmanager")
        elif group == "loki":
            _add(services, "loki")
        elif group == "alloy":
@@ -316,8 +308,11 @@ def services_for_path(path: str, target: str) -> set[str]:
        if len(parts) >= 2 and parts[1] == "open-webui":
            _add(services, "open-webui")
            return services
-        # frank-dragoon left the quadlet shape on 2026-09-19 (CIRU v4.4.1 host
-        # build, root unit): its files live in scripts/ and map there.
+        if len(parts) >= 2 and parts[1] == "frank-large":
+            # The service is a rootless Quadlet container since 2026-09-11;
+            # its unit and fleet settings live in one .container file.
+            _add(services, "frank-large")
+            return services
        if len(parts) >= 2 and parts[1] == "observability":
            # The five observability containers became Quadlet units on
            # 2026-09-11. A unit change selects exactly its own service;
@@ -325,7 +320,7 @@ def services_for_path(path: str, target: str) -> set[str]:
            # consumer (prometheus before grafana, loki before alloy).
            if len(parts) >= 4 and parts[2] == "quadlet":
                name = parts[3].removesuffix(".container")
-                if name in {"prometheus", "grafana", "loki", "alloy", "node-exporter", "alertmanager"}:
+                if name in {"prometheus", "grafana", "loki", "alloy", "node-exporter"}:
                    _add(services, name)
            return services
        if len(parts) >= 2 and parts[1] == "gitea":
@@ -355,7 +350,6 @@ def services_for_path(path: str, target: str) -> set[str]:
                "romm": {"romm", "romm-mariadb", "romm-redis"},
                "jellyfin": {"jellyfin"},
                "calibre-web": {"calibre-web"},
-                "calibre-server": {"calibre-server"},
                "copyparty": {"copyparty"},
                "plex": {"plex"},
                "tautulli": {"tautulli"},
@@ -371,11 +365,13 @@ def services_for_path(path: str, target: str) -> set[str]:
                if name == "node-exporter":
                    _add(services, "node-exporter")
            return services
-        # frank-archon's quadlet-era directory left the tree on 2026-09-26
-        # (the Lucebox DS4.1 unit was retired for the llama.cpp root unit —
-        # the trio in scripts/ now maps it). Nothing lives under
-        # dankserver/frank-archon/ except dated trash, and trash plans
-        # nothing (the retire rule above the service blocks).
+        if len(parts) >= 2 and parts[1] == "frank-medium":
+            # frank-medium is a ROOT llama.cpp unit since 2026-09-16: its
+            # runtime is a native gfx1201 binary, not a container, so there is
+            # nothing under dankserver/frank-medium/ to plan any more. The
+            # retired vllm-radiance quadlets live in .AGENTTRASH/, which is
+            # archive material and plans nothing.
+            return services
        return services

    if parts[0] == "frankbook-pro":
@@ -395,37 +391,18 @@ def services_for_path(path: str, target: str) -> set[str]:
        name = p.name
        if name in {"homepage-status.py", "homepage-status.service", "homepage-status.timer"}:
            _add(services, "homepage")
-        if name in {"signal-relay.py", "signal-relay.service"}:
-            # The Signal relay is installed by the alertmanager deploy, so a
-            # change to it redeploying alertmanager is the only path that
-            # reaches it on the host.
-            _add(services, "alertmanager")
-        if name in {"frank-zealot.env", "frank-zealot.service", "serve-frank-zealot.sh"}:
-            # llama.cpp frank-zealot (2026-09-16) keeps its unit, env and serve
-            # files here; each one selects frank-zealot only. The ik_llama.cpp
+        if name in {"frank-small.env", "frank-small.service", "serve-frank-small.sh"}:
+            # llama.cpp frank-small (2026-09-16) keeps its unit, env and serve
+            # files here; each one selects frank-small only. The ik_llama.cpp
            # trio that lived here for two days is in scripts/.AGENTTRASH/,
            # which is archive material and plans nothing.
-            _add(services, "frank-zealot")
-        if name in {"frank-dragoon.env", "frank-dragoon.service", "serve-frank-dragoon.sh"}:
-            # CIRU v4.4.1 frank-dragoon (2026-09-19) keeps its unit, env and
-            # serve files here the same way: a root unit on a host-built
-            # runtime. The download script fetches the payload, which is
-            # host-side state, so it selects nothing.
-            _add(services, "frank-dragoon")
-        if name == "qwen-sharp-v22.4.0.jinja":
-            # The Qwen-Sharp chat template frank-dragoon loads via
-            # --chat-template-file. It lived under dankserver/frank-medium/ until
-            # the 2026-09-26 cutover retired that directory; editing it changes
-            # what the live frank-dragoon endpoint renders, so it plans
-            # frank-dragoon.
-            _add(services, "frank-dragoon")
-        if name in {"frank-archon.env", "frank-archon.service", "serve-frank-archon.sh"}:
-            # llama.cpp frank-archon (2026-09-26, replacing the Lucebox
-            # DS4.1 quadlet) keeps its unit, env and serve files here the
-            # same way: a root unit on the unsloth b11030-mix prebuilt
-            # serving Qwen3.8-Flash-Next Q8_0. The download script fetches
-            # the payload, which is host-side state, so it selects nothing.
-            _add(services, "frank-archon")
+            _add(services, "frank-small")
+        if name in {"frank-medium.env", "frank-medium.service", "serve-frank-medium.sh"}:
+            # llama.cpp frank-medium (2026-09-16) keeps its unit, env and serve
+            # files here the same way. The files that BUILD and FETCH its
+            # runtime and payload are host-side one-offs: they change no
+            # deployed state, so they select nothing.
+            _add(services, "frank-medium")
        # Deployment/test/benchmark scripts and other repo tooling do not
        # restart a runtime service.
        return services
@@ -435,6 +412,7 @@ def services_for_path(path: str, target: str) -> set[str]:
        return services
    return services

+
 def changed_paths(repo: str, base: str, head: str) -> list[str]:
    result = subprocess.run(
        ["git", "-C", repo, "diff", "--name-only", "--diff-filter=ACDMRTUXB", base, head],
@@ -86,16 +86,16 @@ service_is_allowed() {
        dankclaw:open-webui|dankclaw:gitea-postgres|dankclaw:gitea-server|\
        dankclaw:comfyui|dankclaw:hermes|\
        dankclaw:hermes-dashboard|dankclaw:hermes-webui|dankclaw:prometheus|dankclaw:grafana|\
-        dankclaw:loki|dankclaw:alloy|dankclaw:node-exporter|dankclaw:alertmanager|\
+        dankclaw:loki|dankclaw:alloy|dankclaw:node-exporter|\
        dankclaw:authentik-postgres|dankclaw:authentik-server|\
        dankclaw:authentik-worker|dankclaw:authentik-outpost|dankclaw:authentik-outpost-ldap|dankclaw:anubis|\
        dankclaw:caddy|dankclaw:homepage|dankclaw:seerr|dankclaw:marreta|\
-        dankclaw:frank-dragoon|dankclaw:frank-zealot|\
+        dankclaw:frank-large|dankclaw:frank-small|\
        dankserver:romm-mariadb|dankserver:romm-redis|dankserver:romm|\
-        dankserver:copyparty|dankserver:jellyfin|dankserver:calibre-web|dankserver:calibre-server|dankserver:plex|dankserver:tautulli|\
+        dankserver:copyparty|dankserver:jellyfin|dankserver:calibre-web|dankserver:plex|dankserver:tautulli|\
        dankserver:prowlarr|dankserver:qbittorrent|dankserver:radarr|\
        dankserver:sonarr|dankserver:lidarr|dankserver:readarr|\
-        dankserver:frank-archon|dankserver:node-exporter|\
+        dankserver:frank-medium|dankserver:node-exporter|\
        frankbook-pro:gluetun|frankbook-pro:qbittorrent|frankbook-pro:prowlarr|\
        frankbook-pro:radarr|frankbook-pro:sonarr|frankbook-pro:lidarr|\
        frankbook-pro:readarr)
@@ -177,22 +177,11 @@ add_pending_services() {
        if [[ "$status" != deployed ]]; then
            # A pending service was intentionally skipped or its handler
            # failed. Retry it even when the checkout has not advanced.
-            # But a pending entry for a service RETIRED from this target can
-            # never be deployable: retrying it fails the whole run before
-            # the e2e gate (the frank-default-sightsound lockout, found
-            # 2026-09-17). Drop such entries into the host trash instead.
-            if ! service_is_allowed "$service"; then
-                local trash="$HOME/.AGENTTRASH/$(date +%Y%m%d)-retired-deploy-state"
-                mkdir -p "$trash"
-                mv -- "$state_file" "$trash/$service"
-                echo "WARN: $service is retired on $TARGET; dropped its stale $status state to $trash" >&2
-                continue
-            fi
            SERVICES+=("$service")
            continue
        fi
        [[ -n "$recorded" && "$recorded" != "$REVISION" ]] || continue
-        if [[ "$TARGET" == dankserver && "$service" == frank-dragoon ]]; then continue; fi
+        if [[ "$TARGET" == dankserver && "$service" == frank-large ]]; then continue; fi
        if ! changed="$(python3 scripts/deploy-plan.py --target "$TARGET" \
            --repo "$REMOTE_DIR" --base "$recorded" --head "$REVISION")"; then
            echo "WARN: unable to compare state for $service; retaining it as pending" >&2
@@ -209,11 +198,6 @@ copy_searxng_config() {
    run_privileged mkdir -p /opt/searxng/config
    run_privileged cp shared/searxng/settings.yml /opt/searxng/config/settings.yml
    run_privileged cp shared/searxng/limiter.toml /opt/searxng/config/limiter.toml
-    # Bake ${KAGI_API_KEY}/${SEARXNG_SECRET}/${SEARXNG_BASE_URL} into the live
-    # copy from the host-side /opt/searxng/.env (SearXNG does not expand env
-    # vars in settings.yml). Fails the deploy if a placeholder is unresolvable.
-    run_privileged python3 scripts/searxng-render-settings.py \
-        /opt/searxng/.env /opt/searxng/config/settings.yml
 }

 copy_prometheus_config() {
@@ -226,53 +210,6 @@ copy_prometheus_config() {
        /opt/prometheus/config/rules/llm-fleet.yml
 }

-# Alertmanager config ships beside the Prometheus config: the two halves of
-# the alerting path change together, and a receiver with no route (or a
-# route with no receiver) fails silently.
-copy_alertmanager_config() {
-    run_privileged mkdir -p /opt/alertmanager/config /opt/alertmanager/data
-    run_privileged cp shared/prometheus/alertmanager.yml /opt/alertmanager/config/alertmanager.yml
-}
-
-# The Signal relay is Alertmanager's only webhook consumer and the only
-# thing on this host that talks to signal-cli. It is a plain systemd USER
-# unit (not a quadlet): it runs python3 from the checkout, so a deploy
-# updates it without a copy step, and — unlike generated quadlet units,
-# which this host's podman 5.x v1 generator rejects — a hand-written user
-# unit can be enabled, and Linger=yes for dank starts it at boot.
-install_signal_relay() {
-    local unit_dir="$HOME/.config/systemd/user"
-    mkdir -p "$unit_dir"
-    cp scripts/signal-relay.service "$unit_dir/signal-relay.service"
-    systemctl --user daemon-reload
-    systemctl --user enable signal-relay.service
-    systemctl --user restart signal-relay.service
-    # The relay binds the host's LAN IP (the one address a bridge container
-    # can reach as host.containers.internal), so keep the unauthenticated
-    # endpoint off the rest of the LAN: admit loopback, the host itself
-    # (its own health probe) and the podman bridge subnet only. Idempotent:
-    # -C before -I.
-    run_privileged iptables -C INPUT -p tcp --dport 18093 -s 127.0.0.1 -j ACCEPT 2>/dev/null \
-        || run_privileged iptables -I INPUT -p tcp --dport 18093 -s 127.0.0.1 -j ACCEPT
-    run_privileged iptables -C INPUT -p tcp --dport 18093 -s 192.168.0.143 -j ACCEPT 2>/dev/null \
-        || run_privileged iptables -I INPUT -p tcp --dport 18093 -s 192.168.0.143 -j ACCEPT
-    run_privileged iptables -C INPUT -p tcp --dport 18093 -s 10.89.0.0/16 -j ACCEPT 2>/dev/null \
-        || run_privileged iptables -I INPUT -p tcp --dport 18093 -s 10.89.0.0/16 -j ACCEPT
-    run_privileged iptables -C INPUT -p tcp --dport 18093 -j DROP 2>/dev/null \
-        || run_privileged iptables -I INPUT -p tcp --dport 18093 -j DROP
-    # The interpreter needs a moment to bind after restart; a one-shot curl
-    # raced the socket on 2026-09-17 and failed a healthy deploy.
-    local i
-    for i in $(seq 1 15); do
-        if curl -fsS -m 5 http://192.168.0.143:18093/health >/dev/null; then
-            return 0
-        fi
-        sleep 1
-    done
-    echo "signal-relay is not answering on 192.168.0.143:18093" >&2
-    return 1
-}
-
 copy_loki_config() {
    run_privileged mkdir -p /opt/loki/config
    run_privileged cp shared/loki/loki-config.yaml /opt/loki/config/loki-config.yaml
@@ -318,16 +255,10 @@ deploy_homepage() {
    fi
    run_privileged mkdir -p /srv/homepage
    run_privileged cp shared/homepage/index.html shared/homepage/admin.html shared/homepage/app.js \
-        shared/homepage/style.css shared/homepage/services.json shared/homepage/docs.html /srv/homepage/
+        shared/homepage/style.css shared/homepage/services.json /srv/homepage/
    if [[ -d shared/homepage/fonts ]]; then
        run_privileged cp -r shared/homepage/fonts /srv/homepage/
    fi
-    if [[ -d shared/homepage/img ]]; then
-        run_privileged cp -r shared/homepage/img /srv/homepage/
-    fi
-    if [[ -d shared/homepage/sfx ]]; then
-        run_privileged cp -r shared/homepage/sfx /srv/homepage/
-    fi
    local deployed_at
    deployed_at="$(git log -1 --format=%cI)"
    printf 'window.DEPLOYED_AT = "%s";\n' "$deployed_at" > /tmp/deployed.js
@@ -495,17 +426,13 @@ seed_grafana_env() {
 deploy_observability() {
    local service="$1"
    # Observability units live under <target>/observability/quadlet: Dankclaw
-    # has six, Dankserver one (node-exporter, since 2026-09-16). The config
+    # has five, Dankserver one (node-exporter, since 2026-09-16). The config
    # copies below are Dankclaw-owned state and run only there.
    local unit_dir="$TARGET/observability/quadlet"
    case "$service" in
        prometheus)
            copy_prometheus_config
            ;;
-        alertmanager)
-            copy_alertmanager_config
-            install_signal_relay
-            ;;
        loki)
            copy_loki_config
            build_compose_image loki
@@ -529,7 +456,6 @@ deploy_observability() {
    systemctl --user restart "$service.service"
    case "$service" in
        prometheus) wait_for_health prometheus http://127.0.0.1:9090/-/healthy 60 ;;
-        alertmanager) wait_for_health alertmanager http://127.0.0.1:9093/-/healthy 60 ;;
        grafana) wait_for_health grafana http://127.0.0.1:3002/api/health 90 ;;
        loki) wait_for_health loki http://127.0.0.1:3100/ready 60 ;;
        alloy) wait_for_health alloy http://127.0.0.1:12345/-/healthy 60 ;;
@@ -861,50 +787,6 @@ deploy_calibre_web() {
    systemctl --user restart calibre-web.service
 }

-# The content server's single admin account and the desktop's basic-auth
-# credential (same pair) are bootstrapped exactly once: the env file is the
-# plaintext store (mode 600), the userdb's pw column is plaintext too, so
-# its file is mode 600 as well. The password is piped on stdin with printf -
-# a trailing newline from echo lands in the stored password and breaks every
-# login (verified 2026-09-21).
-deploy_calibre_server() {
-    local data_root=/home/dank/Containers/calibre-server
-    mkdir -p "$data_root"
-    if [[ ! -f $data_root/env ]]; then
-        local pw
-        pw=$(openssl rand -base64 18 | tr -d '/+=' | head -c 20)
-        printf 'CUSTOM_USER=calibre\nCUSTOM_PASSWORD=%s\n' "$pw" > "$data_root/env"
-        chmod 600 "$data_root/env"
-        echo "calibre-server: generated credential (shown once): calibre / $pw"
-    fi
-    [[ -f $data_root/env ]] || {
-        echo "FAIL: $data_root/env does not exist; seed it before the first calibre-server deploy" >&2
-        return 1
-    }
-    if [[ ! -f $data_root/userdb.sqlite ]]; then
-        local pw
-        pw=$(grep '^CUSTOM_PASSWORD=' "$data_root/env" | cut -d= -f2)
-        touch "$data_root/userdb.sqlite"
-        printf '%s' "$pw" | podman run --rm -i --entrypoint /usr/bin/calibre-server \
-            -v "$data_root/userdb.sqlite:/userdb.sqlite" \
-            lscr.io/linuxserver/calibre:9.15.0 \
-            --userdb /userdb.sqlite --manage-users -- add calibre
-        chown 1000:1000 "$data_root/userdb.sqlite"
-        chmod 600 "$data_root/userdb.sqlite"
-    fi
-    [[ -f $data_root/userdb.sqlite && -s $data_root/userdb.sqlite ]] || {
-        echo "FAIL: $data_root/userdb.sqlite missing or empty; the --manage-users bootstrap failed" >&2
-        return 1
-    }
-    cp "dankserver/calibre-server/quadlet/calibre-server.container" "$quadlet_unit_dir/"
-    systemctl --user daemon-reload
-    if ! systemctl --user is-active -q calibre-server.service; then
-        podman stop calibre-server 2>/dev/null || true
-        podman rm calibre-server 2>/dev/null || true
-    fi
-    systemctl --user restart calibre-server.service
-}
-
 deploy_copyparty() {
    # The admin account is created from ${COPAY_ACCOUNT}:${COPAY_PASSWORD} expanded
    # at ExecStart time; a missing env file must fail the unit, not boot copyparty
@@ -941,24 +823,15 @@ deploy_plex() {
    fi
    systemctl --user restart plex.service
    # Readiness gate: /identity answers MediaContainer XML once PMS is up.
-    #
-    # HTTPS, NOT HTTP. PMS drops plain HTTP off-loopback: the probe's
-    # connection arrives on the container's eth0, so an http:// request is
-    # accepted and then answered with nothing (curl 52, Empty reply) against a
-    # perfectly healthy server. Measured 2026-10-02 — the gate burned its full
-    # 600s and failed a plex whose https://127.0.0.1:32400/identity answered
-    # 200 in 44 ms the whole time. The same law is why the Caddyfile dials the
-    # plex upstream over TLS (tests/caddyfile.bats pins it).
-    # -k: PMS presents its own self-signed cert on 32400.
-    #
    # Reality check from the 2026-09 cutover: the FIRST container boot of a
-    # years-old library ran ~10 min, so the gate still allows 600s.
+    # years-old library ran ~10 min (PMS pre-binds 32400 during boot and
+    # empty-replies until the HTTP layer is ready), so the gate allows 600s.
    # Fail the deploy (pending state preserved) rather than mark it deployed blind.
    for ((i = 1; i <= 120; i++)); do
-        curl -fsSk --max-time 3 https://127.0.0.1:32400/identity >/dev/null && return 0
+        curl -fsS --max-time 3 http://127.0.0.1:32400/identity >/dev/null && return 0
        sleep 5
    done
-    echo "FAIL: plex did not answer /identity over HTTPS within 600s" >&2
+    echo "FAIL: plex did not answer /identity within 600s" >&2
    return 1
 }

@@ -1092,47 +965,41 @@ deploy_anubis() {
    wait_container_healthy anubis 60 || return 1
 }

-# frank-dragoon is the halogen-flash-server CONTAINER (0.16.2, digest-pinned
-# through scripts/frank-dragoon.env) serving the Quat3rnion ABLITERATED
-# Swift1.5 finetune of peonist's Qwen3.8-Flash-Next v2 checkpoint —
-# qwen38-flash-next-v2-swift15-abliterated.hgn (66,687,678,464 B, ~62 GiB
-# resident) + the REQUIRED n-gram lookup table + the vision tower —
-# MTP spec decode (HALOGEN_SPEC_ADAPT=0), 2 slots x 200192, image input —
-# on the Strix Halo iGPU. It stays a ROOT unit because the serve script
-# drives `podman run` directly (the frank-archon pattern): relink_unit
-# points /etc/systemd/system/frank-dragoon.service at the repo file, boot
-# persistence is that unit's [Install], and LimitMEMLOCK=infinity is
-# fleet parity. 2026-10-06 cutover from the halogen 27B-dense shape —
-# rollback = revert the swap commit's trio; the 27B payload stays on
-# disk (~/models/halogen-qwen3.8-27b).
+# frank-large runs as a rootless Quadlet unit again since 2026-09-16: the
+# halogen-flash-server runtime is back (it replaced ik_llama.cpp, which had
+# replaced it), and the RTX 3090 it shared during that interlude now belongs
+# to frank-small.
 #
-# The gates mirror serve-frank-dragoon.sh's predicates EXACTLY (the
-# 2026-10-01 crash-loop lesson): image digest in dank's podman storage,
-# each .hgn payload (checkpoint, n-gram table, vision tower) at the exact
-# byte count, the tokenizer directory holding every named file as a
-# regular (not symlinked) file — a green deploy against a missing
-# artifact would leave a restart-looping unit and a dark endpoint. The
-# port gate is the same as every cutover since 2026-09-16: nothing
-# starts until 7770 is released.
-LLM_DRAGOON_IMAGE="${LLM_DRAGOON_IMAGE:-ghcr.io/peonist-ai/halogen-flash-server@sha256:0c61bf84ac22308a53f5d1ca6b86806702d7039e5ebc51cae4c66621b92fe04a}"
-LLM_DRAGOON_CKPT="${LLM_DRAGOON_CKPT:-/home/dank/models/halogen-flashnext-v2/qwen38-flash-next-v2-swift15-abliterated.hgn}"
-LLM_DRAGOON_CKPT_BYTES="${LLM_DRAGOON_CKPT_BYTES:-66687678464}"
-LLM_DRAGOON_NGRAM="${LLM_DRAGOON_NGRAM:-/home/dank/models/halogen-flashnext-v2/qwen38-flash-next-ngram.hgn}"
-LLM_DRAGOON_NGRAM_BYTES="${LLM_DRAGOON_NGRAM_BYTES:-51200246144}"
-LLM_DRAGOON_VISION="${LLM_DRAGOON_VISION:-/home/dank/models/halogen-flashnext-v2/qwen38-flash-next-vision.hgn}"
-LLM_DRAGOON_VISION_BYTES="${LLM_DRAGOON_VISION_BYTES:-897916416}"
-LLM_DRAGOON_TOK_DIR="${LLM_DRAGOON_TOK_DIR:-/home/dank/models/halogen-flashnext-v2/tokenizer}"
-LLM_DRAGOON_TOK_FILES="${LLM_DRAGOON_TOK_FILES:-tokenizer.json chat_template.jinja tokenizer_config.json merges.txt vocab.json generation_config.json}"
+# TWO MANAGERS, ONE UNIT NAME. The ik incarnation ran as a ROOT unit whose
+# file is a symlink into this checkout; the halogen unit is a USER (quadlet)
+# unit. Both must never exist at once — they would race for port 7770 — so the
+# root unit is retired first: stop, disable, move the /etc symlink into the
+# home trash (never `rm`), reload the root manager. This host's `systemctl
+# disable` has been observed to delete the unit file itself (2026-08-26
+# incident), so the move tolerates a file that is already gone.
+#
+# FIRST START fetches ~127 GB of weights, and /health cannot answer while it
+# does. wait_for_llm_large_ready recognises that (checkpoint absent) and waits
+# for the file instead of burning the health budget on a failure that is not
+# one.
+LLM_LARGE_CHECKPOINT="${LLM_LARGE_CHECKPOINT:-/home/dank/models/halogen/qwen38-flash-next-w4b.hgn}"

-retire_halogen_dragoon_quadlet() {
-    local trash="$HOME/.AGENTTRASH/20260919-orca-cutover/quadlet"
-    systemctl --user stop frank-dragoon.service 2>/dev/null || true
-    if [[ -e "$quadlet_unit_dir/frank-dragoon.container" ]]; then
+retire_root_llm_large() {
+    local trash="$HOME/.AGENTTRASH/20260916-halogen-restore/host-units"
+    run_privileged systemctl stop frank-large.service 2>/dev/null || true
+    run_privileged systemctl disable frank-large.service 2>/dev/null || true
+    if [[ -e /etc/systemd/system/frank-large.service || -L /etc/systemd/system/frank-large.service ]]; then
        mkdir -p "$trash"
-        mv -- "$quadlet_unit_dir/frank-dragoon.container" "$trash/frank-dragoon.container"
-        echo "retired quadlet frank-dragoon.container -> $trash"
+        run_privileged mv -- /etc/systemd/system/frank-large.service \
+            "$trash/frank-large.service"
+        echo "retired root unit frank-large.service -> $trash"
+    else
+        # This host's `systemctl disable` is allowed to delete the unit file
+        # outright (2026-08-26 incident), so there is often nothing left to
+        # move. Say so: previously no message meant no evidence either way.
+        echo "root unit frank-large.service was already removed by disable"
    fi
-    systemctl --user daemon-reload
+    run_privileged systemctl daemon-reload
 }

 # Wait until a TCP port has no socket on it at all -- listening, accepted, or
@@ -1154,242 +1021,167 @@ wait_port_free() {
    return 1
 }

-deploy_llm_dragoon() {
-    # Refuse rather than restart-loop; every gate below has a twin in
-    # serve-frank-dragoon.sh and they must agree (2026-10-01 lesson).
-    # Capture podman output before grepping: `podman images | grep -q`
-    # races under pipefail (SIGPIPE 141 becomes "no match", 2026-09-30).
-    if ! grep -qF "${LLM_DRAGOON_IMAGE#*@}" <<<"$(podman images --format '{{.RepoDigests}}' 2>/dev/null)"; then
-        echo "ERROR: halogen image absent: $LLM_DRAGOON_IMAGE" >&2
-        echo "frank-dragoon: pull it: podman pull ${LLM_DRAGOON_IMAGE%@*}" >&2
-        return 1
-    fi
-    if [[ ! -f "$LLM_DRAGOON_CKPT" ]]; then
-        echo "ERROR: halogen checkpoint absent at $LLM_DRAGOON_CKPT" >&2
-        echo "frank-dragoon: fetch it: bash scripts/download-frank-dragoon-flashnext.sh" >&2
-        return 1
-    fi
-    if [[ "$(stat -c %s "$LLM_DRAGOON_CKPT")" != "$LLM_DRAGOON_CKPT_BYTES" ]]; then
-        echo "ERROR: halogen checkpoint is not $LLM_DRAGOON_CKPT_BYTES bytes (partial download?)" >&2
-        echo "frank-dragoon: re-check: bash scripts/download-frank-dragoon-flashnext.sh --verify-only" >&2
-        return 1
-    fi
-    for gate in "$LLM_DRAGOON_NGRAM:$LLM_DRAGOON_NGRAM_BYTES:n-gram table" \
-                "$LLM_DRAGOON_VISION:$LLM_DRAGOON_VISION_BYTES:vision tower"; do
-        IFS=: read -r gpath gbytes gname <<<"$gate"
-        if [[ ! -f "$gpath" ]]; then
-            echo "ERROR: halogen $gname absent at $gpath" >&2
-            echo "frank-dragoon: fetch it: bash scripts/download-frank-dragoon-flashnext.sh" >&2
-            return 1
-        fi
-        if [[ "$(stat -c %s "$gpath")" != "$gbytes" ]]; then
-            echo "ERROR: halogen $gname is not $gbytes bytes (partial download?)" >&2
-            echo "frank-dragoon: re-check: bash scripts/download-frank-dragoon-flashnext.sh --verify-only" >&2
-            return 1
-        fi
-    done
-    if [[ -L "$LLM_DRAGOON_TOK_DIR" || ! -d "$LLM_DRAGOON_TOK_DIR" ]]; then
-        echo "ERROR: tokenizer dir missing or a symlink at $LLM_DRAGOON_TOK_DIR" >&2
-        echo "frank-dragoon: fetch it: bash scripts/download-frank-dragoon-flashnext.sh" >&2
-        return 1
-    fi
-    for tf in $LLM_DRAGOON_TOK_FILES; do
-        if [[ ! -f "$LLM_DRAGOON_TOK_DIR/$tf" || -L "$LLM_DRAGOON_TOK_DIR/$tf" ]]; then
-            echo "ERROR: tokenizer file missing or a symlink: $LLM_DRAGOON_TOK_DIR/$tf" >&2
-            echo "frank-dragoon: fetch it: bash scripts/download-frank-dragoon-flashnext.sh" >&2
-            return 1
-        fi
-    done
-
-    retire_halogen_dragoon_quadlet
-    # The predecessor on a re-deploy is THIS unit: stop it (ExecStop stops
-    # the container) before waiting on the port. The stray sweep is keyed
-    # on the FULL container name, which appears in the argv of a manual
-    # `podman run --name frank-dragoon-halogen` / `podman wait` but NOT in
-    # this deployer's own command line (`bash deploy-remote.sh
-    # frank-dragoon`) — so it cannot shoot itself in the foot (the fleet
-    # pkill law), and it can never match frank-zealot's llama-server.
-    run_privileged systemctl stop frank-dragoon.service 2>/dev/null || true
-    pkill -f 'frank-dragoon-halogen' 2>/dev/null || true
-    podman rm -f frank-dragoon frank-dragoon-halogen >/dev/null 2>&1 || true
-    # Nothing may start until the predecessor has released the port
-    # (2026-09-16: "Deactivated successfully" was not "port free").
+deploy_llm_large() {
+    retire_root_llm_large
+    # The predecessor can also be THIS quadlet -- a redeploy of a running
+    # frank-large -- so stop the user unit before waiting on the port. On a
+    # first cutover it is not running and this is a no-op.
+    systemctl --user stop frank-large.service 2>/dev/null || true
+    # Pull once, then run the localhost/-aliased tag: this host's quadlet path
+    # cannot resolve registry-prefixed refs from local storage at create time
+    # (same workaround as anubis/hermes), and Pull=never keeps boots off the
+    # registry.
+    local image="ghcr.io/peonist-ai/halogen-flash-server:0.5.8"
+    local alias="localhost/peonist-ai/halogen-flash-server:0.5.8"
+    podman pull "$image"
+    podman tag "$image" "$alias"
+    # The weights volume must exist, and the container needs it read-write:
+    # that is where a first start downloads into.
+    mkdir -p /home/dank/models/halogen
+    # Nothing may start until the predecessor has released the port. On
+    # 2026-09-16 this sequence failed exactly here: the ik server logged
+    # "Deactivated successfully", pasta tried to bind 7770 a second later and
+    # reported "Address already in use", and the unit exited 126. Restart=
+    # on-failure recovered it minutes later, but a deploy that starts a doomed
+    # container has not deployed anything -- so gate on the port, not on hope.
    wait_port_free 7770 || return 1
-    relink_unit frank-dragoon
-    run_privileged systemctl daemon-reload
-    run_privileged systemctl enable frank-dragoon.service
-    run_privileged systemctl restart frank-dragoon.service
-    wait_for_health frank-dragoon http://127.0.0.1:7770/health 1200
+    install_quadlet frank-large dankclaw/frank-large/quadlet frank-large
+    # No enable: generated units cannot be enabled on this host (v1 quadlet
+    # generator); boot persistence comes from [Install] in the unit file.
+    systemctl --user restart frank-large.service
+    wait_for_llm_large_ready
+    wait_for_health frank-large http://127.0.0.1:7770/health 1200
 }

-# deploy_llm_zealot — frank-zealot is llama.cpp (master build, CUDA sm_86) on
-# the RTX 3090 as a ROOT unit: the runtime is a native binary tree under
-# ~/GitPackages/llama-master/build-cuda, so there is no container image and
-# no generated unit to avoid. relink_unit points
-# /etc/systemd/system/frank-zealot.service at the repo file and boot
-# persistence is that unit's [Install] section.
-#
-# It is a SEPARATE endpoint on port 7771; frank-dragoon keeps 7770. The 3090 is
-# not shared: frank-dragoon's engine runs on the gfx1151 iGPU.
-LLM_ZEALOT_MODEL_FILE="${LLM_ZEALOT_MODEL_FILE:-/home/dank/models/Qwen35-9B-HauhauCS-Q6K/Qwen3.5-9B-Uncensored-HauhauCS-Aggressive-Q6_K.gguf}"
-LLM_ZEALOT_RUNTIME="${LLM_ZEALOT_RUNTIME:-/home/dank/GitPackages/llama-master/build-cuda/bin/llama-server}"
-# The projector IS the vision capability here: the model is natively
-# multimodal and the Q6_K file carries no vision tensors — the publisher ships
-# its own BF16 projector in the same repo, so a deploy that starts without
-# this file silently ships a text-only endpoint. Checked unconditionally, like
-# frank-dragoon's.
-LLM_ZEALOT_MMPROJ="${LLM_ZEALOT_MMPROJ:-/home/dank/models/Qwen35-9B-HauhauCS-Q6K/mmproj-Qwen3.5-9B-Uncensored-HauhauCS-Aggressive-BF16.gguf}"
-
-deploy_llm_zealot() {
-    # Refuse rather than restart-loop: a unit whose runtime or payload is
-    # missing never becomes healthy, and a green deploy would leave the
-    # endpoint dark with nothing in the log to say why.
-    if [[ ! -x "$LLM_ZEALOT_RUNTIME" ]]; then
-        echo "ERROR: llama.cpp runtime absent at $LLM_ZEALOT_RUNTIME" >&2
-        echo "frank-zealot: build it (cmake -B build-cuda -DGGML_CUDA=ON" >&2
-        echo "frank-zealot: -DCMAKE_CUDA_ARCHITECTURES=86 -DCMAKE_CUDA_HOST_COMPILER=/usr/bin/gcc-13" >&2
-        echo "frank-zealot: && cmake --build build-cuda --target llama-server) first." >&2
-        return 1
-    fi
-    for f in "$LLM_ZEALOT_MODEL_FILE" "$LLM_ZEALOT_MMPROJ"; do
-        if [[ ! -f "$f" ]]; then
-            echo "ERROR: frank-zealot payload file absent at $f" >&2
-            echo "frank-zealot: run scripts/download-frank-zealot.sh first;" >&2
-            echo "frank-zealot: refusing to start a unit that cannot load." >&2
-            return 1
-        fi
-    done
-    relink_unit frank-zealot
-    run_privileged systemctl daemon-reload
-    run_privileged systemctl enable frank-zealot.service
-    run_privileged systemctl restart frank-zealot.service
-    wait_for_health frank-zealot http://127.0.0.1:7771/health 900 || return 1
-    # False-green hardening (frank-dragoon's lesson): the port answering
-    # proves nothing about WHO answers — the unit must be active with a
-    # live MainPID, or a stray SGLang holdover is masquerading as deployed.
-    local main_pid
-    main_pid="$(run_privileged systemctl show -p MainPID --value frank-zealot.service)"
-    if [[ -z "$main_pid" || "$main_pid" == "0" ]]; then
-        echo "FAIL: :7771 answered but frank-zealot.service has no MainPID — a stray process holds the port" >&2
-        return 1
-    fi
-    echo "frank-zealot: health answered by unit MainPID $main_pid"
-}
-
-# deploy_llm_archon — frank-archon is the radiance engine (StillDeadcode,
-# digest-pinned stilldeadcode/radiance image) serving the PUBLISHER's
-# 4-bit-codebook container of the official Qwen/Qwen3.8-Flash-Next
-# (qwen3.8-next-flash-fp8-iq4r-moe.rad, fetched by
-# scripts/download-frank-archon-iq4r.sh) on BOTH R9700s (TP=2) as a
-# ROOT unit whose serve script drives `podman run` directly (the engine is
-# the image entrypoint; the image lives in dank's rootless podman storage).
-# 2026-10-15 payload swap from the in-house w4dn8 (payload on disk =
-# rollback).
-# 2026-10-05 cutover from FreeToken (pre-cutover tag
-# frank-archon-freetoken-pr587-20261005); before that, the tcclaviger vLLM
-# fork (tag frank-archon-vllm-shapeG-20261003). Same port and alias; the
-# harness models.yml id is unchanged.
-#
-# Gates: the image must exist under its digest ref in dank's rootless
-# storage (FRANK_ARCHON_IMAGE), the .rad container file must exist at the
-# env's size floor (FRANK_ARCHON_MODEL_FILE >= FRANK_ARCHON_RAD_MIN_MIB —
-# a truncated fetch is a guaranteed long-timeout boot), and the unit env
-# must be complete. Per-file sha256 verification is the fetch script's job
-# at download time and rad-convert/rad-info's job at build time, never
-# re-hashed here.
-LLM_ARCHON_CONTAINER=frank-archon
-LLM_ARCHON_LEGACY_CONTAINERS="frank-archon-qwen frank-archon-r9v qwen-fp8 glm-probe"
-
-deploy_llm_archon() {
-    # Refuse rather than restart-loop: a unit whose image or payload is
-    # missing never becomes healthy, and a green deploy would leave the
-    # endpoint dark with nothing in the log to say why.
-    local env_file="/home/dank/serverAppConfigs/scripts/frank-archon.env"
-    local image model_dir model_file rad_min mib
-    if [[ ! -f "$env_file" ]]; then
-        echo "ERROR: frank-archon env file absent: $env_file" >&2
-        return 1
-    fi
-    image="$(sed -n 's/^FRANK_ARCHON_IMAGE=//p' "$env_file" | tail -1)"
-    model_dir="$(sed -n 's/^FRANK_ARCHON_MODEL_DIR=//p' "$env_file" | tail -1)"
-    model_file="$(sed -n 's/^FRANK_ARCHON_MODEL_FILE=//p' "$env_file" | tail -1)"
-    rad_min="$(sed -n 's/^FRANK_ARCHON_RAD_MIN_MIB=//p' "$env_file" | tail -1)"
-    if [[ -z "$image" || -z "$model_dir" || -z "$model_file" || -z "$rad_min" ]]; then
-        echo "ERROR: frank-archon.env missing FRANK_ARCHON_IMAGE/MODEL_DIR/MODEL_FILE/RAD_MIN_MIB" >&2
-        return 1
-    fi
-    # The image gate is the digest ref itself: a name@sha256 ref exists in
-    # storage only if THAT manifest was pulled. One command — no
-    # pipefail/grep race (the 2026-09-30 lesson).
-    if ! podman image exists "$image"; then
-        echo "ERROR: runtime image absent from storage: $image" >&2
-        echo "frank-archon: podman pull docker://stilldeadcode/radiance:latest" >&2
-        return 1
-    fi
-    if [[ ! -f "$model_dir/$model_file" ]]; then
-        echo "ERROR: .rad container missing: $model_dir/$model_file" >&2
-        echo "frank-archon: run scripts/download-frank-archon-iq4r.sh --fetch" >&2
-        return 1
-    fi
-    mib=$(( $(stat -c %s "$model_dir/$model_file") / 1048576 ))
-    if [[ "$mib" -lt "$rad_min" ]]; then
-        echo "ERROR: .rad container too small: $model_dir/$model_file is ${mib} MiB, want >= $rad_min" >&2
-        echo "frank-archon: re-fetch it (scripts/download-frank-archon-iq4r.sh --fetch; delete the staged file first if its sha256 failed)" >&2
-        return 1
-    fi
-
-    # A stale container with the same name makes `podman run --name` fail at
-    # start; remove any leftover from a failed previous attempt.
-    # A stopped unit can leave its container running: systemd's cgroup kill
-    # races conmon's --rm cleanup, and the orphan holds the port and GPUs.
-    # Stop the unit, then remove the containers BEFORE waiting on the port.
-    # The legacy identities (the retired R9V container, the ad hoc
-    # experiment container qwen-fp8, the retired glm-probe) hold the same
-    # GPUs and die here too.
-    run_privileged systemctl stop frank-archon.service 2>/dev/null || true
-    local ctr
-    for ctr in $LLM_ARCHON_LEGACY_CONTAINERS "$LLM_ARCHON_CONTAINER"; do
-        podman rm -f "$ctr" >/dev/null 2>&1 || true
-    done
-    # Nothing starts until the port is released: the lucebox cutover
-    # (2026-09-26) and the frank-dragoon cutover (2026-09-16) both failed
-    # exactly here when the next engine bound 7770 a second too early.
-    wait_port_free 7770 || return 1
-    relink_unit frank-archon
-    run_privileged systemctl daemon-reload
-    run_privileged systemctl enable frank-archon.service
-    run_privileged systemctl restart frank-archon.service
-    # Cold start: .rad load + PLE pin + expert host-pool upload (the
-    # publisher's compose healthcheck allows a 15-minute start_period).
-    # Parity with every predecessor on this port. The HTTP listener binds
-    # AFTER the full load (main.cpp: engine.start() then engine.serve()),
-    # so during load the port REFUSES connections — a bare curl is honest
-    # here, unlike FreeToken's 200-while-loading body. (The MainPID check
-    # below still guards the stray-port case.)
-    local i ok=0
-    for ((i=1; i<=900; i++)); do
-        if curl -fsS http://127.0.0.1:7770/health 2>/dev/null >/dev/null; then
-            echo "frank-archon engine healthy after approximately $((i * 2))s"
-            ok=1
-            break
+# Bootstrap-aware gate: if the checkpoint is absent the container is fetching
+# it; wait for the file (the fetch resumes, and the unit restarts it on
+# failure) rather than gating on a /health that cannot answer yet. Reports
+# success either way, so a first deploy does not look like a failure while the
+# engine does exactly what it was told to.
+wait_for_llm_large_ready() {
+    [[ -f "$LLM_LARGE_CHECKPOINT" ]] && return 0
+    echo "frank-large: checkpoint absent at $LLM_LARGE_CHECKPOINT"
+    echo "frank-large: first start — the container is downloading ~127 GB from"
+    echo "frank-large: peonist-ai/halogen-qwen3.8-flash-next (resumes if interrupted)."
+    local i
+    for ((i = 1; i <= 1200; i++)); do
+        if [[ -f "$LLM_LARGE_CHECKPOINT" ]]; then
+            echo "frank-large: weights landed after approximately $((i * 2))s; gating on /health"
+            return 0
        fi
        sleep 2
    done
-    if [[ "$ok" != 1 ]]; then
-        echo "FAIL: frank-archon /health never answered 200 in 1800s" >&2
+    echo "WARN: frank-large download still in progress after 40m — NOT a failure." >&2
+    echo "WARN: the unit keeps fetching; re-run this deploy (or re-check /health) later." >&2
+    return 0
+}
+
+# deploy_llm_small — frank-small is mainline llama.cpp on the RTX 3090, as a
+# ROOT unit: the runtime is a native CUDA binary, so there is no container
+# image to install and no generated unit to avoid. relink_unit points
+# /etc/systemd/system/frank-small.service at the repo file and boot persistence
+# is that unit's [Install] section.
+#
+# It is a SEPARATE endpoint on port 7771; frank-large keeps 7770. The 3090 is
+# not shared: frank-large's halogen engine runs on the gfx1151 iGPU.
+LLM_SMALL_MODEL="${LLM_SMALL_MODEL:-/home/dank/models/Qwen3.8-27B-GSQ-RCO-IQ3_S-mtp/Qwen3.8-27B-GSQ-RCO-IQ3_S-mtp.gguf}"
+
+deploy_llm_small() {
+    if [[ ! -f "$LLM_SMALL_MODEL" ]]; then
+        echo "ERROR: model absent at $LLM_SMALL_MODEL" >&2
+        echo "frank-small: fetch ISTA-DASLab/Qwen3.8-27B-GSQ-RCO-GGUF (the -mtp build plus the mmproj) first;" >&2
+        echo "frank-small: refusing to start a unit that cannot load." >&2
        return 1
    fi
-    # False-green hardening (the 2026-09-26 lesson): a bare curl against the
-    # port cannot tell WHO answers — a stray probe holding :7770 satisfies
-    # it while the unit is stopped. The deploy is only green if the unit
-    # itself is active with a live MainPID behind the health answer.
-    local main_pid
-    main_pid="$(run_privileged systemctl show -p MainPID --value frank-archon.service)"
-    if [[ -z "$main_pid" || "$main_pid" == "0" ]]; then
-        echo "FAIL: :7770 answered but frank-archon.service has no MainPID — a stray process holds the port" >&2
-        return 1
+    relink_unit frank-small
+    run_privileged systemctl daemon-reload
+    run_privileged systemctl enable frank-small.service
+    run_privileged systemctl restart frank-small.service
+    wait_for_health frank-small http://127.0.0.1:7771/health 900
+}
+
+# deploy_llm_medium — frank-medium is mainline llama.cpp on the two R9700s as a
+# ROOT unit since the 2026-09-16 cutover: the runtime is a native gfx1201 HIP
+# binary, so there is no image to install and no generated unit to dodge. It
+# replaces the vllm-radiance replica pair + routing proxy, which held this
+# endpoint for a day and could never use both cards for one model (TP=2 needs
+# an RCCL collective, and the second card cannot dispatch one).
+#
+# Layer split in ONE process is what the successor does instead: layers are
+# distributed across the cards and only the activation at the boundary crosses
+# PCIe, once per forward pass. That is the "pipeline parallelism" the endpoint
+# wanted, with no collective anywhere in it.
+LLM_MEDIUM_BIN="${LLM_MEDIUM_BIN:-/home/dank/GitPackages/llama.cpp-dflash2/build-rdna4-rocm714/bin/llama-server}"
+LLM_MEDIUM_MODEL="${LLM_MEDIUM_MODEL:-/home/dank/models/Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF/Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-UD-Q8_K_XL.gguf}"
+LLM_MEDIUM_DRAFT="${LLM_MEDIUM_DRAFT:-/home/dank/models/Qwen3.8-27B-DFlash2-GGUF/Qwen3.8-27B-DFlash2-Q8_0.gguf}"
+LLM_MEDIUM_MMPROJ="${LLM_MEDIUM_MMPROJ:-/home/dank/models/Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF/mmproj-BF16.gguf}"
+
+# The three vLLM user units are retired HERE, not left to rot: the proxy
+# published 7770 on the host network, so the llama-server below cannot bind
+# until they are stopped and the port is released. Never `rm` — the unit files
+# move into the home trash; the images stay in local storage.
+retire_vllm_medium_quadlets() {
+    local trash="$HOME/.AGENTTRASH/20260916-vllm-radiance-retire" unit
+    systemctl --user stop frank-medium-a.service frank-medium-b.service \
+        frank-medium-proxy.service 2>/dev/null || true
+    for unit in frank-medium-a frank-medium-b frank-medium-proxy frank-medium; do
+        if [[ -e "$quadlet_unit_dir/$unit.container" ]]; then
+            mkdir -p "$trash"
+            mv -- "$quadlet_unit_dir/$unit.container" "$trash/$unit.container"
+            echo "retired quadlet $unit.container -> $trash"
+        fi
+    done
+    systemctl --user daemon-reload
+}
+
+deploy_llm_medium() {
+    # Refuse rather than restart-loop. A unit whose runtime or payload is
+    # missing never becomes healthy, and a green deploy would leave the
+    # endpoint dark with nothing in the deploy log to say why.
+    local missing=0
+    if [[ ! -x "$LLM_MEDIUM_BIN" ]]; then
+        echo "ERROR: llama-server absent at $LLM_MEDIUM_BIN" >&2
+        echo "frank-medium: build it ON the host (gfx1201): bash scripts/build-llama-rdna4.sh" >&2
+        missing=1
    fi
-    echo "frank-archon: health answered by unit MainPID $main_pid"
+    if [[ ! -f "$LLM_MEDIUM_MODEL" ]]; then
+        echo "ERROR: target model absent at $LLM_MEDIUM_MODEL" >&2
+        echo "frank-medium: fetch it: bash scripts/download-frank-medium-gguf.sh" >&2
+        missing=1
+    fi
+    if [[ ! -f "$LLM_MEDIUM_DRAFT" ]]; then
+        echo "ERROR: DFlash2 drafter absent at $LLM_MEDIUM_DRAFT" >&2
+        echo "frank-medium: fetch it: bash scripts/download-frank-medium-gguf.sh" >&2
+        missing=1
+    fi
+    if [[ ! -f "$LLM_MEDIUM_MMPROJ" ]]; then
+        echo "ERROR: vision projector absent at $LLM_MEDIUM_MMPROJ" >&2
+        echo "frank-medium: fetch it: bash scripts/download-frank-medium-gguf.sh" >&2
+        missing=1
+    fi
+    [[ "$missing" -eq 0 ]] || return 1
+
+    retire_vllm_medium_quadlets
+    # The thing holding 7770 is now THIS service: on a re-deploy the previous
+    # llama-server is still bound to it, so waiting for the port without
+    # stopping the unit deadlocks the deploy (measured 2026-09-16: "FAIL: port
+    # 7770 is still held after 90s", with the old server happily serving a
+    # scrape). Stop the unit first, then sweep a stray manual run of the same
+    # binary -- that is how a benchmark harness leaves the port busy. `pkill -x
+    # llama-server` matches the process name exactly and can never match the
+    # deploying shell; never `pkill -f` here.
+    run_privileged systemctl stop frank-medium.service 2>/dev/null || true
+    pkill -x llama-server 2>/dev/null || true
+    sleep 2
+    # pasta released the retired proxy's socket at container teardown, and a
+    # stopped engine lingers in TIME_WAIT just past that. Same gate as
+    # frank-large's cutover (2026-09-16 addressed-in-use failure).
+    wait_port_free 7770 || return 1
+    relink_unit frank-medium
+    run_privileged systemctl daemon-reload
+    run_privileged systemctl enable frank-medium.service
+    run_privileged systemctl restart frank-medium.service
+    wait_for_health frank-medium http://127.0.0.1:7770/health 900
 }

 wait_for_health() {
@@ -1576,18 +1368,17 @@ deploy_service() {
        anubis) deploy_anubis ;;
        seerr) deploy_seerr ;;
        marreta) deploy_marreta ;;
-        frank-dragoon) deploy_llm_dragoon ;;
-        frank-zealot) deploy_llm_zealot ;;
-        frank-archon) deploy_llm_archon ;;
+        frank-large) deploy_llm_large ;;
+        frank-small) deploy_llm_small ;;
+        frank-medium) deploy_llm_medium ;;
        hermes|hermes-dashboard|hermes-webui) deploy_hermes ;;
        romm|romm-mariadb|romm-redis|mariadb|redis) deploy_romm_stack "$service" ;;
        jellyfin) deploy_jellyfin ;;
        calibre-web) deploy_calibre_web ;;
-        calibre-server) deploy_calibre_server ;;
        copyparty) deploy_copyparty ;;
        plex) deploy_plex ;;
        tautulli) deploy_tautulli ;;
-        prometheus|grafana|loki|alloy|node-exporter|alertmanager) deploy_observability "$service" ;;
+        prometheus|grafana|loki|alloy|node-exporter) deploy_observability "$service" ;;
        comfyui) deploy_comfyui ;;
        *) deploy_compose_service "$service" ;;
    esac
@@ -35,7 +35,7 @@ Options:
 Examples:
  ./scripts/deploy.sh dankclaw
  ./scripts/deploy.sh dankclaw --service searxng
-  ./scripts/deploy.sh dankserver --service frank-archon
+  ./scripts/deploy.sh dankserver --service frank-medium
  ./scripts/deploy.sh dankclaw --dry-run
 EOF
 }
@@ -138,15 +138,14 @@ valid_service() {
        dankclaw:gitea-server|dankclaw:homepage|\
        dankclaw:comfyui|dankclaw:hermes|dankclaw:hermes-dashboard|\
        dankclaw:hermes-webui|dankclaw:prometheus|dankclaw:grafana|dankclaw:loki|dankclaw:alloy|\
-        dankclaw:alertmanager|\
        dankclaw:node-exporter|dankclaw:authentik-postgres|dankclaw:authentik-server|\
        dankclaw:authentik-worker|dankclaw:authentik-outpost|dankclaw:authentik-outpost-ldap|dankclaw:anubis|dankclaw:seerr|\
-        dankclaw:frank-dragoon|dankclaw:frank-zealot|\
+        dankclaw:frank-large|dankclaw:frank-small|\
        dankserver:romm-mariadb|dankserver:romm-redis|dankserver:romm|\
-        dankserver:copyparty|dankserver:jellyfin|dankserver:calibre-web|dankserver:calibre-server|dankserver:plex|dankserver:tautulli|\
+        dankserver:copyparty|dankserver:jellyfin|dankserver:calibre-web|dankserver:plex|dankserver:tautulli|\
        dankserver:qbittorrent|dankserver:radarr|dankserver:sonarr|\
        dankserver:lidarr|dankserver:readarr|dankserver:node-exporter|\
-        dankserver:frank-archon|\
+        dankserver:frank-medium|\
        frankbook-pro:gluetun|frankbook-pro:qbittorrent|frankbook-pro:prowlarr|\
        frankbook-pro:radarr|frankbook-pro:sonarr|frankbook-pro:lidarr|\
        frankbook-pro:readarr)
@@ -196,21 +195,6 @@ else
    printf '    - %s\n' "${PLAN[@]}"
 fi

-# --- frankbook e2e trigger --------------------------------------------------
-# The *arr/qBittorrent e2e units walk links that terminate on FrankBook-Pro
-# (192.168.0.112), which sleeps when idle. The [3/3] e2e gate therefore runs
-# the frankbook Playwright project ONLY when something in its blast radius
-# changed since origin/main: the frankbook spec itself, the frankbook-pro
-# stack, the homepage registry, or the Caddyfile serving the arr vhosts.
-# Every other deploy skips it (tests/e2e/run.sh excludes the project by
-# default). See tests/e2e/specs/19-frankbook.spec.ts.
-FB_E2E_TRIGGER=0
-while IFS= read -r fb_path; do
-    case "$fb_path" in
-        tests/e2e/specs/19-frankbook.spec.ts|frankbook-pro/*|shared/homepage/services.json|dankclaw/Caddyfile) FB_E2E_TRIGGER=1 ;;
-    esac
-done < <(git diff --name-only "$BASE_REVISION" "$HEAD_REVISION")
-
 REMOTE="${REMOTE_USER}@${REMOTE_HOST}"
 REMOTE_ARGS=("$TARGET" "$HEAD_REVISION" "$REMOTE_DIR" "$REMOTE_SHELL")
 if [[ "${#EXPLICIT_SERVICES[@]}" -eq 0 ]]; then
@@ -224,11 +208,6 @@ if [[ "$DRY_RUN" -eq 1 ]]; then
    printf '[dry-run] Runner arguments:'
    printf ' %q' "${REMOTE_ARGS[@]}"
    printf '\n'
-    if [[ "$FB_E2E_TRIGGER" -eq 1 ]]; then
-        echo "[dry-run] e2e gate: frankbook project INCLUDED (frankbook trigger paths changed)."
-    else
-        echo "[dry-run] e2e gate: frankbook project EXCLUDED (no frankbook trigger paths)."
-    fi
    exit 0
 fi

@@ -270,12 +249,7 @@ if [[ "$SKIP_E2E" -eq 1 ]]; then
    echo "[3/3] e2e gate SKIPPED (--skip-e2e): live fleet NOT verified." >&2
 else
    echo "[3/3] Running Playwright e2e gate against the live fleet..."
-    E2E_ENV=()
-    if [[ "$FB_E2E_TRIGGER" -eq 1 ]]; then
-        echo "      frankbook trigger paths changed: including the frankbook e2e project."
-        E2E_ENV=(E2E_INCLUDE_FRANKBOOK=1)
-    fi
-    if env "${E2E_ENV[@]}" bash "$REPO_ROOT/tests/e2e/run.sh"; then
+    if bash "$REPO_ROOT/tests/e2e/run.sh"; then
        echo "e2e gate PASSED."
    else
        echo "=== DEPLOY INCOMPLETE: e2e gate FAILED on $TARGET ===" >&2
@@ -1,117 +0,0 @@
-#!/usr/bin/env python3
-"""derive-protected-experts.py — rewrite the recipe's protected-expert section
-from a calibration recording. RUNS ON DANKSERVER (venv: numpy).
-
-The law (docs/MOE-W4.md "Protected experts", restated in the recipe):
-an expert whose share of its layer's down-input energy is at least 3% AND
-at least three times its share of the routing is kept bf16; the count must
-be EVEN on each rank's half of the layer (the four-bit GEMM takes the rest
-as two equal tables by parity) — an odd half gains its next most energetic
-non-qualifying expert.
-
-Data: the calibration dir's per-expert down Grams,
-gram.r<rank>.blk.L.ffn_down_exps.<e>.bin — 32-byte RADGRAM2 header
-(magic, k, rank, rows, domain) then k*k f32, named with the checkpoint's
-GLOBAL expert numbering (arch/common/rad_block_moe_fp8.h: ge =
-expert_base + e). rows (header) is the expert's routing count; the trace
-of the Gram is its down-input energy. Rank halves: 0-255, 256-511
-(contiguous expert_base split at TP=2).
-
-Output: the cast-rule lines (recipe format) on stdout, a report on stderr.
-
-Usage: derive-protected-experts.py <calib dir> [--min-share 0.03]
-       [--min-route-mult 3.0]
-"""
-import argparse
-import glob
-import os
-import re
-import struct
-import sys
-
-import numpy as np
-
-NAME_RE = re.compile(r"^gram\.r(\d)\.blk\.(\d+)\.ffn_down_exps\.(\d+)\.bin$")
-
-
-def read_gram(path):
-    """(k, rank, rows, trace) from a RADGRAM2 file (full matrix on disk)."""
-    with open(path, "rb") as f:
-        hdr = f.read(32)
-        magic, k, rank, rows, domain = struct.unpack("<8sIIQI", hdr[:28])
-        if magic != b"RADGRAM2":
-            raise SystemExit(f"not a RADGRAM2 file: {path}")
-        n = k * k
-        a = np.frombuffer(f.read(n * 4), dtype=np.float32)
-        if a.size != n:
-            raise SystemExit(f"short gram file: {path}")
-        tr = float(a.reshape(k, k).diagonal().sum())
-    return k, rank, int(rows), tr
-
-
-def main():
-    ap = argparse.ArgumentParser()
-    ap.add_argument("calib_dir")
-    ap.add_argument("--min-share", type=float, default=0.03)
-    ap.add_argument("--min-route-mult", type=float, default=3.0)
-    a = ap.parse_args()
-
-    # layer -> global expert -> (rank, rows, energy)
-    data = {}
-    for path in sorted(glob.glob(os.path.join(
-            a.calib_dir, "gram.r*.ffn_down_exps.*.bin"))):
-        m = NAME_RE.match(os.path.basename(path))
-        if not m:
-            continue
-        rank, layer, expert = int(m.group(1)), int(m.group(2)), int(m.group(3))
-        k, _, rows, tr = read_gram(path)
-        data.setdefault(layer, {})[expert] = (rank, rows, tr)
-
-    if not data:
-        raise SystemExit("no per-expert down grams found")
-
-    lines, report = [], []
-    total = 0
-    for layer in sorted(data):
-        experts = data[layer]
-        tot_e = sum(v[2] for v in experts.values())
-        tot_r = sum(v[1] for v in experts.values())
-        if tot_e <= 0 or tot_r <= 0:
-            report.append(f"blk.{layer}: empty recording, skipped")
-            continue
-        qual, pool = [], []
-        for e, (rank, rows, tr) in experts.items():
-            es, rs = tr / tot_e, rows / max(tot_r, 1)
-            rec = (e, rank, es, rs)
-            if es >= a.min_share and es >= a.min_route_mult * rs:
-                qual.append(rec)
-            elif es > 0:
-                pool.append(rec)
-        chosen = {r[0]: (r[2], r[3]) for r in qual}
-        for half in (0, 1):  # rank halves by the contiguous expert_base split
-            n_half = sum(1 for e in chosen if e // 256 == half)
-            if n_half % 2:
-                pool.sort(key=lambda r: -r[2])
-                for cand in pool:
-                    if cand[1] == half and cand[0] not in chosen:
-                        chosen[cand[0]] = (cand[2], cand[3])
-                        report.append(
-                            f"blk.{layer}: half {half} odd -> added e{cand[0]} "
-                            f"(energy {cand[2]*100:.2f}%)")
-                        break
-        for e in sorted(chosen):
-            es, rs = chosen[e]
-            lines.append(f"blk.{layer}.ffn_*_exps.{e}.weight"
-                         f"         cast dtype=bf16")
-            report.append(f"blk.{layer} e{e:3d} (rank {e // 256}): "
-                          f"energy {es*100:5.2f}%, routing {rs*100:5.3f}%, "
-                          f"ratio {es/max(rs,1e-12):6.1f}")
-        total += len(chosen)
-
-    print("\n".join(lines))
-    print("\n".join(report), file=sys.stderr)
-    print(f"total protected: {total}", file=sys.stderr)
-
-
-if __name__ == "__main__":
-    main()
@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-# download-frank-archon-iq4r.sh — payload fetch/verify for the frank-archon
-# swap to the PUBLISHER's 4-bit-codebook container:
-# StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe — the official
-# Qwen/Qwen3.8-Flash-Next bf16 checkpoint rad-converted by the engine's own
-# author into ONE .rad: routed experts as 4-bit codes into a 16-level
-# non-uniform codebook (Walsh–Hadamard rotation, GPTQ + coordinate-descent,
-# 10M-token calibration), ten bf16-protected experts per layer, int8 trunk +
-# lm_head, fp8 HC mixtures, the PLE n-gram table at fp8 fixed scale, the MTP
-# head, and the bf16 vision tower. File:
-# qwen3.8-next-flash-fp8-iq4r-moe.rad — 121,969,901,568 B (113.6 GiB,
-# 116,322 MiB), card KL 0.0789 all-tokens / top-1 92.85 % vs bf16.
-# Repo is UNGATED — no token needed (never put one on the command line).
-#
-#   bash scripts/download-frank-archon-iq4r.sh --fetch         resume/complete
-#   bash scripts/download-frank-archon-iq4r.sh                 verify only
-#
-# Fetch uses the vendored scripts/hfget.sh (curl+jq only): per-file size
-# checks against the Hub listing, `-C -` resume, disk-fit gate. The side
-# files (LICENSE, README, the w4nl recipe) stay in the staging dir as
-# provenance; the serve gate mounts ONLY /home/dank/models/rad, so the
-# verified .rad alone moves into it.
-#
-# Verify (default) is the AGENTS.md law in two parts: the file lands at the
-# final path with the Hub's EXACT byte count, and its sha256 equals the
-# Hub's LFS oid. A truncated transfer is a guaranteed long-timeout boot
-# without this gate.
-set -euo pipefail
-
-REPO="StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe"
-RAD_NAME="qwen3.8-next-flash-fp8-iq4r-moe.rad"
-STAGE="/home/dank/models/StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe"
-DEST="/home/dank/models/rad/$RAD_NAME"
-SIZE=121969901568
-SHA256="0af5e96244e80c21ac8edca1719dae49b8a201b94a2f3994c3e24026ceaa4d20"
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-
-mode="verify"
-[[ "${1:-}" == "--fetch" ]] && mode="fetch"
-
-if [[ "$mode" == "fetch" ]]; then
-    # HFGET_JOBS=4 is hfget's default (a few streams saturate the link).
-    bash "$SCRIPT_DIR/hfget.sh" "$REPO" "$STAGE" main
-
-    staged="$STAGE/$RAD_NAME"
-    if [[ ! -f "$staged" ]]; then
-        echo "FETCH FAILED: $staged absent after hfget" >&2
-        exit 1
-    fi
-    got=$(stat -c %s "$staged")
-    if [[ "$got" != "$SIZE" ]]; then
-        echo "FETCH FAILED: staged .rad is $got B, want $SIZE B" >&2
-        exit 1
-    fi
-    echo "staged .rad byte-exact ($SIZE B); hashing (one full read, minutes)"
-    got_sha=$(sha256sum "$staged" | cut -d' ' -f1)
-    if [[ "$got_sha" != "$SHA256" ]]; then
-        echo "FETCH FAILED: sha256 $got_sha, want $SHA256 — DELETE the staged" \
-             "file before re-fetching (curl -C - cannot repair a corrupt body)" >&2
-        exit 1
-    fi
-    mkdir -p "$(dirname "$DEST")"
-    mv "$staged" "$DEST"
-    echo "payload placed: $DEST"
-fi
-
-echo "verifying deployed payload: $DEST"
-if [[ ! -f "$DEST" ]]; then
-    echo "  BAD  payload absent: $DEST" >&2
-    exit 1
-fi
-got=$(stat -c %s "$DEST")
-if [[ "$got" != "$SIZE" ]]; then
-    echo "  BAD  payload is $got B, want $SIZE B" >&2
-    exit 1
-fi
-echo "byte-exact ($SIZE B); hashing (one full read, minutes)"
-got_sha=$(sha256sum "$DEST" | cut -d' ' -f1)
-if [[ "$got_sha" != "$SHA256" ]]; then
-    echo "  BAD  sha256 $got_sha, want $SHA256" >&2
-    exit 1
-fi
-echo "payload verified: $RAD_NAME, size and sha256 match the Hub LFS oid"
@@ -1,113 +0,0 @@
-#!/usr/bin/env bash
-# download-frank-archon-swift15.sh — payload fetch/verify for the planned
-# frank-archon swap to the Swift 1.5 finetune: ukisai/Swift1.5-Qwen3.8-Flash-Next
-# (BF16 source, 149 files, 360,037,355,038 bytes = 335.3 GiB: 131 safetensors
-# shards + weight-map index + tokenizer + vision preprocessing configs + chat
-# template + licenses). Key set verified identical to the official
-# Qwen/Qwen3.8-Flash-Next base (0 added / 0 missing), so the qwen4exp recipes
-# apply verbatim; the checkpoint ships BF16 with NO quantization_config.
-# Repo is UNGATED — no token needed (never put one on the command line).
-#
-#   bash scripts/download-frank-archon-swift15.sh --fetch         resume/complete
-#   bash scripts/download-frank-archon-swift15.sh                 verify only
-#
-# Fetch uses the vendored scripts/hfget.sh (StillDeadcode's Apache-2.0
-# listing/resume downloader, curl+jq only): per-file size checks against
-# the Hub listing, `-C -` resume, pickle-format duplicates skipped.
-# Verify (default) is the AGENTS.md law in three parts: every listed file
-# present with the listed size, the shard count matches the weight-map
-# index, and every shard's sha256 equals the Hub's LFS oid. Verify needs
-# only the public API.
-set -euo pipefail
-
-REPO="ukisai/Swift1.5-Qwen3.8-Flash-Next"
-DEST="/home/dank/models/ukisai/Swift1.5-Qwen3.8-Flash-Next"
-EXPECTED_SHARDS=131
-
-mode="verify"
-[[ "${1:-}" == "--fetch" ]] && mode="fetch"
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-
-if [[ "$mode" == "fetch" ]]; then
-    # HFGET_JOBS=4 is hfget's default (a few streams saturate the link).
-    bash "$SCRIPT_DIR/hfget.sh" "$REPO" "$DEST" main
-fi
-
-echo "verifying local payload: $DEST"
-fail=0
-
-INDEX="$DEST/model.safetensors.index.json"
-if [[ ! -f "$INDEX" ]]; then
-    echo "  BAD  weight-map index missing: $INDEX" >&2
-    exit 1
-fi
-
-python3 - "$REPO" "$DEST" <<'PY' || fail=1
-import hashlib, json, os, sys, urllib.request
-
-repo, dest = sys.argv[1], sys.argv[2]
-
-def listing():
-    """The tree API, following the Link cursor exactly like hfget.sh."""
-    out, api, pages = [], (
-        f"https://huggingface.co/api/models/{repo}/tree/main"
-        "?recursive=true&expand=true"), 0
-    while api:
-        with urllib.request.urlopen(api) as r:
-            out += json.load(r)
-            api = None
-            link = r.headers.get("Link", "")
-            for part in link.split(","):
-                if 'rel="next"' in part:
-                    api = part[part.find("<") + 1:part.find(">")]
-        pages += 1
-        if pages > 200:
-            raise SystemExit("listing did not terminate")
-    return out
-
-files = [e for e in listing() if e.get("type") == "file"]
-sizes = {e["path"]: e.get("size", 0) for e in files}
-lfs = {e["path"]: e["lfs"]["oid"] for e in files if e.get("lfs")}
-
-bad = 0
-for path, want in sorted(sizes.items()):
-    p = os.path.join(dest, path)
-    if not os.path.isfile(p):
-        print(f"  BAD  {path}: missing")
-        bad += 1
-    elif os.path.getsize(p) != want:
-        print(f"  BAD  {path}: {os.path.getsize(p)} bytes, listing says {want}")
-        bad += 1
-print(f"  {'OK' if bad == 0 else 'FAIL'}: {len(sizes) - bad}/{len(sizes)} files present at listed size")
-if bad:
-    raise SystemExit(1)
-
-# Shard set against the weight-map index.
-wm = json.load(open(os.path.join(dest, "model.safetensors.index.json")))["weight_map"]
-shards = sorted(set(wm.values()))
-print(f"  index maps {len(wm)} tensors across {len(shards)} shards")
-if len(shards) != 131:
-    print(f"  BAD  shard count {len(shards)}, want 131")
-    raise SystemExit(1)
-
-# Content: every LFS-tracked file hashed against the Hub oid. The safetensors
-# shards dominate the bytes; tokenizer/config files ride the same check when
-# the Hub tracks them in LFS (they are plain blobs here, already size-checked).
-todo = [p for p in shards if p in lfs]
-for i, path in enumerate(todo):
-    h = hashlib.sha256()
-    with open(os.path.join(dest, path), "rb") as f:
-        for chunk in iter(lambda: f.read(1 << 24), b""):
-            h.update(chunk)
-    if h.hexdigest() != lfs[path]:
-        print(f"  BAD  {path}: sha256 mismatch (want {lfs[path]})")
-        bad += 1
-    if (i + 1) % 16 == 0:
-        print(f"  ...hashed {i + 1}/{len(todo)}")
-print(f"  {'OK' if bad == 0 else 'FAIL'}: {len(todo) - bad}/{len(todo)} shards sha256-match the Hub")
-if bad:
-    raise SystemExit(1)
-PY
-
-[[ "$fail" -eq 0 ]] || exit 1
-echo "payload verified: 131 shards + index + tokenizer + configs, sizes and sha256 checked"
@@ -1,111 +0,0 @@
-#!/usr/bin/env bash
-# download-frank-archon.sh — payload fetch/verify for frank-archon:
-# the OFFICIAL Qwen/Qwen3.8-Flash-Next-FP8 checkpoint (131 safetensors
-# shards + weight-map index + tokenizer + vision preprocessing configs,
-# ~172.8 GB). 2026-10-05: replaces the orcarouter uncensored payload of the
-# FreeToken era (that script lived here; its repo was gated and needed
-# HF_TOKEN — this one is UNGATED and needs no token at all).
-#
-#   bash scripts/download-frank-archon.sh --fetch         resume/complete
-#   bash scripts/download-frank-archon.sh                 verify only
-#
-# Fetch uses the vendored scripts/hfget.sh (StillDeadcode's Apache-2.0
-# listing/resume downloader, curl+jq only): per-file size checks against
-# the Hub listing, `-C -` resume, pickle-format duplicates skipped.
-# Verify (default) is the AGENTS.md law in three parts: every listed file
-# present with the listed size, the shard count matches the weight-map
-# index, and every shard's sha256 equals the Hub's LFS oid. Verify needs
-# only the public API.
-set -euo pipefail
-
-REPO="Qwen/Qwen3.8-Flash-Next-FP8"
-DEST="/home/dank/models/Qwen/Qwen3.8-Flash-Next-FP8"
-EXPECTED_SHARDS=131
-
-mode="verify"
-[[ "${1:-}" == "--fetch" ]] && mode="fetch"
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-
-if [[ "$mode" == "fetch" ]]; then
-    # HFGET_JOBS=4 is hfget's default (a few streams saturate the link).
-    bash "$SCRIPT_DIR/hfget.sh" "$REPO" "$DEST" main
-fi
-
-echo "verifying local payload: $DEST"
-fail=0
-
-INDEX="$DEST/model.safetensors.index.json"
-if [[ ! -f "$INDEX" ]]; then
-    echo "  BAD  weight-map index missing: $INDEX" >&2
-    exit 1
-fi
-
-python3 - "$REPO" "$DEST" <<'PY' || fail=1
-import hashlib, json, os, sys, urllib.request
-
-repo, dest = sys.argv[1], sys.argv[2]
-
-def listing():
-    """The tree API, following the Link cursor exactly like hfget.sh."""
-    out, api, pages = [], (
-        f"https://huggingface.co/api/models/{repo}/tree/main"
-        "?recursive=true&expand=true"), 0
-    while api:
-        with urllib.request.urlopen(api) as r:
-            out += json.load(r)
-            api = None
-            link = r.headers.get("Link", "")
-            for part in link.split(","):
-                if 'rel="next"' in part:
-                    api = part[part.find("<") + 1:part.find(">")]
-        pages += 1
-        if pages > 200:
-            raise SystemExit("listing did not terminate")
-    return out
-
-files = [e for e in listing() if e.get("type") == "file"]
-sizes = {e["path"]: e.get("size", 0) for e in files}
-lfs = {e["path"]: e["lfs"]["oid"] for e in files if e.get("lfs")}
-
-bad = 0
-for path, want in sorted(sizes.items()):
-    p = os.path.join(dest, path)
-    if not os.path.isfile(p):
-        print(f"  BAD  {path}: missing")
-        bad += 1
-    elif os.path.getsize(p) != want:
-        print(f"  BAD  {path}: {os.path.getsize(p)} bytes, listing says {want}")
-        bad += 1
-print(f"  {'OK' if bad == 0 else 'FAIL'}: {len(sizes) - bad}/{len(sizes)} files present at listed size")
-if bad:
-    raise SystemExit(1)
-
-# Shard set against the weight-map index.
-wm = json.load(open(os.path.join(dest, "model.safetensors.index.json")))["weight_map"]
-shards = sorted(set(wm.values()))
-print(f"  index maps {len(wm)} tensors across {len(shards)} shards")
-if len(shards) != 131:
-    print(f"  BAD  shard count {len(shards)}, want 131")
-    raise SystemExit(1)
-
-# Content: every LFS-tracked file hashed against the Hub oid. The safetensors
-# shards dominate the bytes; tokenizer/config files ride the same check when
-# the Hub tracks them in LFS (they are plain blobs here, already size-checked).
-todo = [p for p in shards if p in lfs]
-for i, path in enumerate(todo):
-    h = hashlib.sha256()
-    with open(os.path.join(dest, path), "rb") as f:
-        for chunk in iter(lambda: f.read(1 << 24), b""):
-            h.update(chunk)
-    if h.hexdigest() != lfs[path]:
-        print(f"  BAD  {path}: sha256 mismatch (want {lfs[path]})")
-        bad += 1
-    if (i + 1) % 16 == 0:
-        print(f"  ...hashed {i + 1}/{len(todo)}")
-print(f"  {'OK' if bad == 0 else 'FAIL'}: {len(todo) - bad}/{len(todo)} shards sha256-match the Hub")
-if bad:
-    raise SystemExit(1)
-PY
-
-[[ "$fail" -eq 0 ]] || exit 1
-echo "payload verified: 131 shards + index + tokenizer + configs, sizes and sha256 checked"
@@ -1,119 +0,0 @@
-#!/usr/bin/env bash
-# download-frank-dragoon-flashnext.sh — fetch frank-dragoon's flash-server v2
-# payload: the Quat3rnion abliterated Swift1.5 checkpoint of peonist's v2
-# .hgn, the REQUIRED lookup table and the optional vision tower from
-# peonist-ai/halogen-qwen3.8-flash-next (both at the revisions the model
-# card pins), and the flat tokenizer the two repos share. All public, no
-# token — and per the fleet secret law, none would ever touch argv.
-#
-# The fetch law, same as every sibling script: curl -f (an access error
-# must not become a "successful" 153-byte artifact), exact byte count from
-# the Hub tree API, LFS sha256 verification, --verify-only to re-check an
-# existing payload without downloading.
-#
-# File manifest (verified against the Hub tree API on 2026-10-06):
-#   qwen38-flash-next-v2-swift15-abliterated.hgn  66,687,678,464 B  sha256
-#     9c880b8ba48deabfa06172eff1e7572e4fe465e09e97faec6e50c3f6fdcac037
-#     (Quat3rnion main; compacted r2 of the card's 89,775,868,032 B
-#     append-only original — byte-identical live tensors, dropped padding)
-#   qwen38-flash-next-ngram.hgn  51,200,246,144 B  sha256
-#     3450acada94e19aabad88bd49b45eb70304820949c2240fc178067b20ae5dffe
-#     (peonist @5cc17cea; REQUIRED — the engine reads it beside the
-#     checkpoint)
-#   qwen38-flash-next-vision.hgn  897,916,416 B  sha256
-#     d62e0ae553fe88afd3833733d4a4c669f34d20fd8dfce4b9610525bed2134b10
-#     (peonist @e053f488; optional, enables image input)
-#   tokenizer/* @e053f488 — byte-identical to the 27B-era tokenizer
-#     already on disk (tokenizer.json LFS
-#     0997f410c57a1f4e53b09e4be8f4a172d90edd9564368fb0847030937229b9f3);
-#     fetched fresh rather than symlinked, per the no-symlink law.
-set -euo pipefail
-
-DEST="${FRANK_DRAGOON_MODEL_DIR:-$HOME/models/halogen-flashnext-v2}"
-ABLIT="https://huggingface.co/Quat3rnion/halogen-swift1.5-qwen3.8-flash-next-v2-abliterated/resolve/main"
-PEONIST="https://huggingface.co/peonist-ai/halogen-qwen3.8-flash-next/resolve"
-NGRAM_REV="5cc17cea1a10b502b4a5db41d8d2b1a0f22dba26"
-TOK_REV="e053f488b120b99ed2525e6ac99f68c51b3b6179"
-
-FILES=(qwen38-flash-next-v2-swift15-abliterated.hgn
-       qwen38-flash-next-ngram.hgn
-       qwen38-flash-next-vision.hgn
-       tokenizer/tokenizer.json
-       tokenizer/chat_template.jinja
-       tokenizer/generation_config.json
-       tokenizer/merges.txt
-       tokenizer/vocab.json
-       tokenizer/tokenizer_config.json)
-SIZES=(66687678464
-       51200246144
-       897916416
-       12809320
-       8952
-       202
-       3353259
-       6722759
-       17928)
-SHAS=(9c880b8ba48deabfa06172eff1e7572e4fe465e09e97faec6e50c3f6fdcac037
-      3450acada94e19aabad88bd49b45eb70304820949c2240fc178067b20ae5dffe
-      d62e0ae553fe88afd3833733d4a4c669f34d20fd8dfce4b9610525bed2134b10
-      0997f410c57a1f4e53b09e4be8f4a172d90edd9564368fb0847030937229b9f3
-      - - - - - -)
-
-# Fetch source per file: repo base + revision (empty = ABLIT @main).
-SRCS=("$ABLIT"
-      "$PEONIST/$NGRAM_REV"
-      "$PEONIST/$TOK_REV"
-      "$PEONIST/$TOK_REV"
-      "$PEONIST/$TOK_REV"
-      "$PEONIST/$TOK_REV"
-      "$PEONIST/$TOK_REV"
-      "$PEONIST/$TOK_REV"
-      "$PEONIST/$TOK_REV")
-
-VERIFY_ONLY=0
-[ "${1:-}" = "--verify-only" ] && VERIFY_ONLY=1
-
-mkdir -p "$DEST"
-
-for i in "${!FILES[@]}"; do
-    f="${FILES[$i]}"; want="${SIZES[$i]}"; sha="${SHAS[$i]}"; base="${SRCS[$i]}"
-    path="$DEST/$f"
-    mkdir -p "$(dirname "$path")"
-    if [ "$VERIFY_ONLY" -eq 0 ]; then
-        # A file already at the published size skips the fetch entirely:
-        # resuming it would ask the CDN for a range past EOF (416 -> curl
-        # error under set -e), and re-pulling 62 GiB to prove a point is
-        # not what --verify-only is for. sha256 below still decides.
-        if [ -f "$path" ] && [ "$(stat -c %s "$path")" = "$want" ]; then
-            echo "HAVE  $f ($want bytes) — skipping fetch"
-        else
-            echo "FETCH $f -> $path"
-            # HF answers /resolve/ with a 302 to the Xet CDN and curl DROPS
-            # the Range header across redirects — a naive -C - then
-            # "resumes" by pulling the ~1 KB redirect body (measured
-            # 2026-10-05 on the 27B fetch: file frozen 14 MiB short, curl
-            # exit 0). Resolve the effective URL first, then resume
-            # against the CDN, which honors Range.
-            url=$(curl -sfIL -o /dev/null -w '%{url_effective}' "$base/$f") \
-                || { echo "cannot resolve $base/$f" >&2; exit 1; }
-            curl -fL --retry 5 -C - -o "$path" "$url"
-        fi
-    fi
-    [ -f "$path" ] || { echo "MISSING $path (run without --verify-only)" >&2; exit 1; }
-    got="$(stat -c %s "$path")"
-    [ "$got" = "$want" ] || { echo "SIZE $path: $got != $want" >&2; exit 1; }
-    echo "OK   $f ($got bytes)"
-done
-
-echo "byte counts match; verifying sha256 where the Hub publishes an LFS oid..."
-for i in "${!FILES[@]}"; do
-    f="${FILES[$i]}"; sha="${SHAS[$i]}"
-    if [ "$sha" = "-" ]; then
-        echo "OK   $f (plain git blob, size-checked)"
-        continue
-    fi
-    got="$(sha256sum "$DEST/$f" | cut -d' ' -f1)"
-    [ "$got" = "$sha" ] || { echo "SHA256 $f: $got != $sha" >&2; exit 1; }
-    echo "OK   $f sha256"
-done
-echo "DOWNLOAD_DONE $DEST"
@@ -1,76 +0,0 @@
-#!/usr/bin/env bash
-# download-frank-dragoon-halogen.sh — fetch frank-dragoon's halogen payload:
-# the qwen3.8-27b .hgn checkpoint and the export tokenizer, from the
-# PUBLIC peonist-ai/halogen-qwen3.8-27b repo (no token — and per the fleet
-# secret law, none would ever touch argv).
-#
-# The fetch law, same as every sibling script: curl -f (an access error
-# must not become a "successful" 153-byte artifact), exact byte count from
-# the model card, LFS sha256 verification, --verify-only to re-check an
-# existing payload without downloading.
-set -euo pipefail
-
-DEST="${FRANK_DRAGOON_MODEL_DIR:-$HOME/models/halogen-qwen3.8-27b}"
-BASE="https://huggingface.co/peonist-ai/halogen-qwen3.8-27b/resolve/main"
-
-FILES=(qwen3.8-27b-p1w4d-d2.hgn
-       tokenizer/tokenizer.json
-       tokenizer/vocab.json
-       tokenizer/merges.txt
-       tokenizer/chat_template.jinja
-       tokenizer/tokenizer_config.json)
-# Byte sizes as published by the Hub on 2026-10-05, plus sha256 (the LFS
-# oid) where the Hub stores an LFS object — plain git blobs carry no oid
-# and are size-checked only. Re-check with:
-# curl -s "https://huggingface.co/api/models/peonist-ai/halogen-qwen3.8-27b/tree/main?recursive=true"
-SIZES=(35865565184 12809320 6722759 3353259 8952 17928)
-SHAS=(274c3fc767fb57faf025dd03c76376b1fc1b32448aef45aaf02d1898fa962089
-      0997f410c57a1f4e53b09e4be8f4a172d90edd9564368fb0847030937229b9f3 - - - -)
-
-VERIFY_ONLY=0
-[ "${1:-}" = "--verify-only" ] && VERIFY_ONLY=1
-
-mkdir -p "$DEST"
-
-for i in "${!FILES[@]}"; do
-    f="${FILES[$i]}"; want="${SIZES[$i]}"; sha="${SHAS[$i]}"
-    path="$DEST/$f"
-    mkdir -p "$(dirname "$path")"
-    if [ "$VERIFY_ONLY" -eq 0 ]; then
-        # A file already at the published size skips the fetch entirely:
-        # resuming it would ask the CDN for a range past EOF (416 -> curl
-        # error under set -e), and re-pulling 33.4 GiB to prove a point is
-        # not what --verify-only is for. sha256 below still decides.
-        if [ -f "$path" ] && [ "$(stat -c %s "$path")" = "$want" ]; then
-            echo "HAVE  $f ($want bytes) — skipping fetch"
-        else
-            echo "FETCH $f -> $path"
-            # HF answers /resolve/ with a 302 to the Xet CDN and curl DROPS
-            # the Range header across redirects — a naive -C - then
-            # "resumes" by pulling the ~1 KB redirect body (measured
-            # 2026-10-05: file frozen 14 MiB short, curl exit 0). Resolve
-            # the effective URL first, then resume against the CDN, which
-            # honors Range.
-            url=$(curl -sfIL -o /dev/null -w '%{url_effective}' "$BASE/$f") \
-                || { echo "cannot resolve $BASE/$f" >&2; exit 1; }
-            curl -fL --retry 5 -C - -o "$path" "$url"
-        fi
-    fi
-    [ -f "$path" ] || { echo "MISSING $path (run without --verify-only)" >&2; exit 1; }
-    got="$(stat -c %s "$path")"
-    [ "$got" = "$want" ] || { echo "SIZE $path: $got != $want" >&2; exit 1; }
-    echo "OK   $f ($got bytes)"
-done
-
-echo "byte counts match; verifying sha256 where the Hub publishes an LFS oid..."
-for i in "${!FILES[@]}"; do
-    f="${FILES[$i]}"; sha="${SHAS[$i]}"
-    if [ "$sha" = "-" ]; then
-        echo "OK   $f (plain git blob, size-checked)"
-        continue
-    fi
-    got="$(sha256sum "$DEST/$f" | cut -d' ' -f1)"
-    [ "$got" = "$sha" ] || { echo "SHA256 $f: $got != $sha" >&2; exit 1; }
-    echo "OK   $f sha256"
-done
-echo "DOWNLOAD_DONE $DEST"
@@ -1,116 +0,0 @@
-#!/usr/bin/env bash
-# Download kingjones777/Qwen3.8-27B-Uncensored-ROCmFP4-STRIX-MTP-GGUF for
-# frank-dragoon (Dankclaw iGPU). Public repo — no auth header, and never a token
-# on the command line (it is world-readable in /proc/<pid>/cmdline).
-#
-# The payload is the repo's Q6 AGENT rung:
-#   * Qwen3.8-27B-Uncensored-Q6_0_ROCMFPX_AGENT.gguf — ftype 114, 23.15 GiB.
-#     Q6_0_ROCMFPX tensor type (102) + the AGENT routing, which keeps the
-#     output-head and attention tensors at plain Q8_0 — the variant the card
-#     names for MTP serving ("Take Q6 AGENT (114) if you want protected
-#     heads"). Like every ROCmFPX file it loads on nothing but the fork.
-#
-# The other two files frank-dragoon needs are NOT re-downloaded:
-#   * mtp-Qwen3.8-27B-Q4_0.gguf — the uncensored repo redistributes the
-#     ALIGNED repo's draft head byte for byte (identical Hub LFS oid
-#     051a1764…), so it is hardlinked out of the aligned payload dir when that
-#     dir holds the verified bytes, and fetched from this repo otherwise.
-#   * mmproj-Qwen3.8-27B-BF16.gguf — this repo ships a Q8_0 projector; the
-#     fleet keeps the BF16 one, which is the projector that was verified 4/4
-#     on spatial ground truth on this host. Hardlinked the same way, fetched
-#     from the ALIGNED repo if it is not on disk.
-#
-# Fresh downloads, no resume (`curl -C -` once produced an oversized file on a
-# 31 GiB payload); -f/--fail-with-body so an HTTP 401 is not a success, then
-# byte count and the Hub LFS sha256. Idempotent: complete files are skipped.
-#
-# Usage:
-#   scripts/download-frank-dragoon-kingjones-uncensored.sh [DEST_DIR] [--verify-only]
-set -euo pipefail
-
-REPO="kingjones777/Qwen3.8-27B-Uncensored-ROCmFP4-STRIX-MTP-GGUF"
-ALIGNED_REPO="kingjones777/Qwen3.8-27B-ROCmFP4-STRIX-MTP-GGUF"
-BASE="https://huggingface.co/${REPO}/resolve/main"
-ALIGNED_BASE="https://huggingface.co/${ALIGNED_REPO}/resolve/main"
-SOURCE_DIR="${SOURCE_DIR:-/home/dank/models/kingjones-Qwen3.8-27B-ROCmFP4-STRIX-MTP}"
-
-DEST=""
-VERIFY_ONLY=0
-for arg in "$@"; do
-    case "$arg" in
-        --verify-only) VERIFY_ONLY=1 ;;
-        *) DEST="$arg" ;;
-    esac
-done
-DEST="${DEST:-/home/dank/models/kingjones-Qwen3.8-27B-Uncensored-ROCmFP4-STRIX-MTP}"
-
-# name bytes sha256 base_url may_link — may_link=1 means the same bytes may
-# already exist in SOURCE_DIR (hardlink them instead of re-fetching).
-FILES=(
-  "Qwen3.8-27B-Uncensored-Q6_0_ROCMFPX_AGENT.gguf 24856607008 e966deb3d1a5a1b9ca7765126292f2d822f3dccdedb3b4872e673dec1cddc199 $BASE 0"
-  # The draft head is redistributed byte-identical by both repos; the BF16
-  # projector only exists in the aligned repo.
-  "mtp-Qwen3.8-27B-Q4_0.gguf 1680271648 051a1764cff8c4f3ee6ae8b00593a0364c7539c67fa50ffc58f3f96509fca38e $BASE 1"
-  "mmproj-Qwen3.8-27B-BF16.gguf 931145888 de2a49866988ea272c43dc2a43ee2662c25725a717ca5b9059ea420a97f53fe8 $ALIGNED_BASE 1"
-)
-
-matches() {  # matches FILE SIZE SHA — byte count AND LFS sha256
-    [[ -f "$1" ]] && [[ "$(stat -c%s "$1")" == "$2" ]] \
-        && sha256sum -c --quiet <(printf '%s  %s\n' "$3" "$1")
-}
-
-mkdir -p "$DEST"
-status=0
-
-fetch() {  # fetch NAME SIZE SHA BASE_URL
-    local name="$1" size="$2" sha="$3" url="$4" f="$DEST/$1"
-    echo "FETCHING  $name"
-    curl -fsSL --fail-with-body -o "$f.part" "$url/$name"
-    mv "$f.part" "$f"
-    if [[ "$(stat -c%s "$f")" != "$size" ]]; then
-        echo "SIZE FAIL $name ($(stat -c%s "$f") != $size)"
-        return 1
-    fi
-    if ! sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-        echo "SHA FAIL  $name"
-        return 1
-    fi
-    echo "VERIFIED  $name"
-}
-
-for entry in "${FILES[@]}"; do
-    read -r name size sha url may_link <<<"$entry"
-    f="$DEST/$name"
-    if matches "$f" "$size" "$sha"; then
-        echo "OK        $name"
-        continue
-    fi
-    if (( VERIFY_ONLY )); then
-        echo "MISSING   $name"
-        status=1
-        continue
-    fi
-    # Shared bytes: prefer the local copy (same filesystem, so a hardlink costs
-    # nothing) over re-downloading gigabytes that hash identically.
-    if [[ "$may_link" == 1 && -n "${SOURCE_DIR:-}" ]] && matches "$SOURCE_DIR/$name" "$size" "$sha"; then
-        echo "LINKING   $name from $SOURCE_DIR"
-        ln -f "$SOURCE_DIR/$name" "$f" 2>/dev/null || cp -f "$SOURCE_DIR/$name" "$f"
-        if matches "$f" "$size" "$sha"; then
-            echo "VERIFIED  $name"
-            continue
-        fi
-        echo "SHA FAIL  $name (linked copy)"
-        status=1
-        continue
-    fi
-    if ! fetch "$name" "$size" "$sha" "$url"; then
-        status=1
-    fi
-done
-
-if (( status == 0 )); then
-    echo "DOWNLOAD_DONE $DEST"
-else
-    echo "DOWNLOAD_FAILED $DEST" >&2
-fi
-exit "$status"
@@ -1,91 +0,0 @@
-#!/usr/bin/env bash
-# Download kingjones777/Qwen3.8-27B-ROCmFP4-STRIX-MTP-GGUF for frank-dragoon
-# (Dankclaw iGPU). Public repo — no auth header, and never a token on the
-# command line (it is world-readable in /proc/<pid>/cmdline).
-#
-# The payload is the repo's highest-quality target plus its MTP draft head and
-# vision projector:
-#   * Qwen3.8-27B-Q8_0_ROCMFPX_AGENT.gguf — ftype 115, 187 tensors at plain
-#     Q8_0 and 311 at GGML_TYPE_Q8_0_ROCMFPX (103). The AGENT routing keeps the
-#     output-head tensors at full Q8_0 (187 vs 2 in the non-AGENT build), which
-#     is the variant to take when serving with the MTP head.
-#   * mtp-Qwen3.8-27B-Q4_0.gguf — the draft head. Q4_0, NOT Q8_0: the head's
-#     per-step cost is its projection over a 248K vocabulary, so the cheaper
-#     head is faster end to end at equal acceptance (author: +6.0% at n-max 1,
-#     +10.2% at n-max 2).
-#   * mmproj-Qwen3.8-27B-BF16.gguf — the vision tower (verified 4/4 on spatial
-#     ground truth with -fa on).
-#
-# Fresh downloads, no resume (`curl -C -` once produced an oversized file on a
-# 31 GiB payload); -f/--fail-with-body so an HTTP 401 is not a success, then
-# byte count and the Hub LFS sha256. Idempotent: complete files are skipped.
-#
-# The repo's own SHA256SUMS covers only the ROCmFP4 files, so the hashes below
-# come from the Hub LFS oids (api/models/<repo>/tree/main).
-#
-# Usage:
-#   scripts/download-frank-dragoon-kingjones.sh [DEST_DIR] [--verify-only]
-set -euo pipefail
-
-REPO="kingjones777/Qwen3.8-27B-ROCmFP4-STRIX-MTP-GGUF"
-BASE="https://huggingface.co/${REPO}/resolve/main"
-
-DEST=""
-VERIFY_ONLY=0
-for arg in "$@"; do
-    case "$arg" in
-        --verify-only) VERIFY_ONLY=1 ;;
-        *) DEST="$arg" ;;
-    esac
-done
-DEST="${DEST:-/home/dank/models/kingjones-Qwen3.8-27B-ROCmFP4-STRIX-MTP}"
-
-# name bytes sha256
-FILES=(
-  "Qwen3.8-27B-Q8_0_ROCMFPX_AGENT.gguf 28214425952 f3ef2bdbf56e244fff14b72114dc2aa300b84a4cb4eaf54f2e5e4da1cfcae10b"
-  "mtp-Qwen3.8-27B-Q4_0.gguf 1680271648 051a1764cff8c4f3ee6ae8b00593a0364c7539c67fa50ffc58f3f96509fca38e"
-  "mmproj-Qwen3.8-27B-BF16.gguf 931145888 de2a49866988ea272c43dc2a43ee2662c25725a717ca5b9059ea420a97f53fe8"
-)
-
-mkdir -p "$DEST"
-status=0
-for entry in "${FILES[@]}"; do
-  read -r name size sha <<<"$entry"
-  f="$DEST/$name"
-  have=0
-  if [[ -f "$f" ]] && [[ "$(stat -c%s "$f")" == "$size" ]]; then
-    if sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-      have=1
-    fi
-  fi
-  if (( have )); then
-    echo "OK        $name"
-    continue
-  fi
-  if (( VERIFY_ONLY )); then
-    echo "MISSING   $name"
-    status=1
-    continue
-  fi
-  echo "FETCHING  $name"
-  tmp="$f.part"
-  curl -fsSL --fail-with-body -o "$tmp" "$BASE/$name"
-  mv "$tmp" "$f"
-  if [[ "$(stat -c%s "$f")" != "$size" ]]; then
-    echo "SIZE FAIL $name ($(stat -c%s "$f") != $size)"
-    status=1
-    continue
-  fi
-  if ! sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-    echo "SHA FAIL  $name"
-    status=1
-    continue
-  fi
-  echo "VERIFIED  $name"
-done
-if (( status == 0 )); then
-  echo "DOWNLOAD_DONE $DEST"
-else
-  echo "DOWNLOAD_FAILED $DEST" >&2
-fi
-exit "$status"
@@ -1,108 +0,0 @@
-#!/usr/bin/env bash
-# Download and assemble jcbtc/Qwen3.8-Flash-CIRU-STRIX-Orca (the frank-dragoon
-# model) on Dankclaw.
-#
-#   bash scripts/download-frank-dragoon-orca.sh
-#   bash scripts/download-frank-dragoon-orca.sh --verify-only
-#
-# The package is 136 GB of Hub-sized transport parts (HF caps new uploads at
-# 50 GB, so the 79 GB main GGUF, the 52 GB PLE payload and the 4 GB MTP head
-# ship as .partNofM fragments).  assemble.py (from the repo) concatenates the
-# parts, verifies every part and final SHA-256, and consumes the parts.
-#
-# Integrity: every part is checked against the per-part sha256 in parts.json
-# (fetched from the repo, not trusted from disk), then the assembled files
-# against SHA256SUMS.  The repo is public (gated: false); an HF token at
-# ~/.cache/huggingface/token is used when present to clear the anonymous
-# rate limit on a 136 GB transfer.
-#
-# Layout after a successful run (MODEL_DIR):
-#   Qwen3.8-Flash-CIRU-STRIX-Orca.gguf          79,397,818,912  main model
-#   mtp/Qwen3.8-Flash-CIRU-STRIX-Orca-MTP-Q8_0.gguf  4,135,893,440  draft
-#   ple/ple.payload.bin                         52,429,053,952  external PLE
-#   ple/ple.manifest.json, ple/ple.scale.bf16               PLE metadata
-#   vision/mmproj-Qwen3.8-Flash-Orca-F16.mmproj  904,004,320    projector
-#   assemble.py, parts.json, SHA256SUMS                     (kept for --verify-only)
-set -euo pipefail
-
-REPO="jcbtc/Qwen3.8-Flash-CIRU-STRIX-Orca"
-MODEL_DIR="/home/dank/models/Qwen3.8-Flash-CIRU-STRIX-Orca"
-BASE="https://huggingface.co/$REPO/resolve/main"
-
-mode="download"
-[[ "${1:-}" == "--verify-only" ]] && mode="verify"
-
-token=""
-auth=()
-if [[ -r "$HOME/.cache/huggingface/token" ]]; then
-    token="$(cat "$HOME/.cache/huggingface/token")"
-    auth=(-H "Authorization: Bearer $token")
-else
-    echo "no HF token at ~/.cache/huggingface/token; downloading anonymously"
-fi
-
-dl() { # dl <relpath>
-    local dest="$MODEL_DIR/$1"
-    mkdir -p "$(dirname "$dest")"
-    echo "  fetching $1"
-    curl -fL -C - -o "$dest" --retry 10 --retry-delay 5 --retry-max-time 21600 \
-        "${auth[@]}" "$BASE/$1"
-}
-
-if [[ "$mode" == "download" ]]; then
-    # Manifest + small files first: the part hashes below come from the
-    # freshly fetched parts.json, so a stale/corrupt copy cannot pass.
-    dl "assemble.py"
-    dl "parts.json"
-    dl "SHA256SUMS"
-    dl "ple/ple.manifest.json"
-    dl "ple/ple.scale.bf16"
-    dl "vision/SHA256SUMS"
-    dl "vision/mmproj-Qwen3.8-Flash-Orca-F16.mmproj"
-
-    echo "fetching the five transport parts (136 GB)"
-    while IFS= read -r part; do
-        dl "$part"
-    done < <(python3 -c "
-import json
-for item in json.load(open('$MODEL_DIR/parts.json'))['files']:
-    for p in item['parts']:
-        print(p['path'])
-")
-fi
-
-echo "verifying part sha256 (against the repo parts.json)"
-python3 - "$MODEL_DIR" <<'PY'
-import hashlib, json, sys
-from pathlib import Path
-root = Path(sys.argv[1])
-manifest = json.loads((root / 'parts.json').read_text())
-ok = True
-def digest(p):
-    h = hashlib.sha256()
-    with p.open('rb') as f:
-        for data in iter(lambda: f.read(8 * 1024 * 1024), b''):
-            h.update(data)
-    return h.hexdigest()
-for item in manifest['files']:
-    for p in item['parts']:
-        path = root / p['path']
-        if not path.exists():
-            print(f"  MISSING {p['path']}"); ok = False; continue
-        if path.stat().st_size != p['bytes']:
-            print(f"  BAD-SIZE {p['path']}"); ok = False; continue
-        if digest(path) != p['sha256']:
-            print(f"  BAD-SHA  {p['path']}"); ok = False; continue
-        print(f"  OK   {p['path']}")
-sys.exit(0 if ok else 1)
-PY
-
-if [[ "$mode" == "download" ]]; then
-    echo "assembling (consumes verified parts)"
-    (cd "$MODEL_DIR" && python3 assemble.py)
-fi
-
-echo "verifying assembled files against SHA256SUMS"
-(cd "$MODEL_DIR" && sha256sum -c SHA256SUMS)
-(cd "$MODEL_DIR/vision" && sha256sum -c SHA256SUMS)
-echo "frank-dragoon payload complete: $MODEL_DIR"
@@ -1,76 +0,0 @@
-#!/usr/bin/env bash
-# Download the Q4_K_XL frank-dragoon payload on Dankclaw:
-#   unsloth/Qwen3.8-27B-GGUF  ->  Qwen3.8-27B-UD-Q4_K_XL.gguf
-#
-#   bash scripts/download-frank-dragoon-q4.sh
-#   bash scripts/download-frank-dragoon-q4.sh --verify-only
-#
-# Integrity: the file is checked against its declared byte count and sha256
-# (the LFS oid from the Hub tree API, 2026-10-01). NO AUTH HEADER IS USED:
-# the repo is public and ungated (gated: false), and a token on the curl
-# command line is world-readable via /proc/<pid>/cmdline. If this ever needs
-# a token, put it in a mode-600 file and pass it with `curl -K`.
-#
-# Layout after a successful run (MODEL_DIR):
-#   Qwen3.8-27B-UD-Q4_K_XL.gguf   17559178144  (16.35 GiB)
-#
-# WHY Q4 AND NOT THE Q8 SWIFT PAYLOAD: this is the vanilla (non-abliterated)
-# Qwen3.8-27B at UD-Q4_K_XL, ~13 GiB smaller than the Swift UD-Q8_K_XL. Every
-# GiB of weights saved is a GiB of f16 KV the endpoint can hold instead: the
-# KV costs 64 KiB/token (16 full-attention layers x 4 KV heads x 256 head_dim
-# x 2 (K,V) x 2 B), so 4 sessions x 163840 ctx = 640,000 tokens = 39.06 GiB.
-#
-# The speculative drafter is UNCHANGED and still fetched by its own script
-# (scripts/download-frank-dragoon.sh, z-lab's Hub repo). That name must not
-# appear here at all — the frank-dragoon seam greps THIS file for it to prove
-# the drafter was not folded into the payload fetch.
-#
-# NOTE ON MTP: this payload has no baked-in MTP head (the Hub repo ships one
-# separately as MTP/mtp-Qwen3.8-27B-Q4_0.gguf). frank-dragoon does not need it —
-# spec decode here is the block-diffusion drafter, not MTP.
-set -euo pipefail
-
-MODEL_DIR="/home/dank/models/Qwen3.8-27B-UD-Q4_K_XL"
-REL="Qwen3.8-27B-UD-Q4_K_XL.gguf"
-SIZE=17559178144
-SHA=3f227079003add2511437e5b1e94812e363385225bf6a9b47b0054a72bc8b01e
-URL="https://huggingface.co/unsloth/Qwen3.8-27B-GGUF/resolve/main/${REL}"
-
-mode="download"
-[[ "${1:-}" == "--verify-only" ]] && mode="verify"
-
-if [[ "$mode" == "download" ]]; then
-    mkdir -p "$MODEL_DIR"
-    if [[ -s "$MODEL_DIR/$REL" ]]; then
-        echo "already present: $MODEL_DIR/$REL"
-    else
-        echo "fetching $REL (17559178144 bytes) — this is ~16.4 GiB"
-        # -f so an HTTP error is a failure, not a 153-byte "artifact".
-        # -C - so an interrupted run resumes instead of restarting.
-        curl -fL -C - --retry 5 --retry-delay 3 -o "$MODEL_DIR/$REL" "$URL"
-    fi
-fi
-
-echo "verifying $MODEL_DIR against declared size + sha256"
-python3 - "$MODEL_DIR" "$REL" "$SIZE" "$SHA" <<'PY'
-import hashlib, os, sys
-model_dir, rel, size, sha = sys.argv[1], sys.argv[2], int(sys.argv[3]), sys.argv[4]
-dest = os.path.join(model_dir, rel)
-if not os.path.isfile(dest):
-    print(f"  MISSING {rel}")
-    sys.exit(1)
-actual = os.path.getsize(dest)
-if actual != size:
-    print(f"  SIZE MISMATCH {rel}: {actual} != {size}")
-    sys.exit(1)
-h = hashlib.sha256()
-with open(dest, "rb") as f:
-    for chunk in iter(lambda: f.read(1 << 24), b""):
-        h.update(chunk)
-if h.hexdigest() != sha:
-    print(f"  SHA256 MISMATCH {rel}: {h.hexdigest()}")
-    sys.exit(1)
-print(f"  OK {rel} ({actual} bytes, sha256 matches the Hub LFS oid)")
-PY
-
-echo "Q4_K_XL payload complete: $MODEL_DIR"
@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-# Download the Swift-1.5 frank-dragoon candidate on Dankclaw:
-#   ajgazin/Swift-1.5-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF
-#     Swift-1.5-Qwen3.8-27B-Uncensored-Dynamic-MTP-UD-Q8_K_XL.gguf
-#
-#   bash scripts/download-frank-dragoon-swift.sh
-#   bash scripts/download-frank-dragoon-swift.sh --verify-only
-#
-# Integrity: the file is checked against its declared byte count and sha256
-# (the LFS oid from the Hub, 2026-09-28). NO AUTH HEADER IS USED: the repo is
-# public and ungated, and a token on the curl command line is world-readable
-# via /proc/<pid>/cmdline. If this ever needs a token, put it in a mode-600
-# file and pass it with `curl -K`.
-#
-# Layout after a successful run (MODEL_DIR):
-#   Swift-1.5-Qwen3.8-27B-Uncensored-Dynamic-MTP-UD-Q8_K_XL.gguf  31457990272
-#
-# This is the CANDIDATE payload, not the deployed one. frank-dragoon still
-# serves scripts/download-frank-dragoon.sh's output; do not repoint
-# frank-dragoon.env at MODEL_DIR until the gufo load test passes.
-set -euo pipefail
-
-MODEL_DIR="/home/dank/models/Swift-1.5-Qwen3.8-27B-Uncensored-MTP-UD-Q8_K_XL"
-REL="Swift-1.5-Qwen3.8-27B-Uncensored-Dynamic-MTP-UD-Q8_K_XL.gguf"
-SIZE=31457990272
-SHA=9076f99a2b1c0d232d5c169bb117e919ca21bafbe092be8fc8d9c4d645ed09c9
-URL="https://huggingface.co/ajgazin/Swift-1.5-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF/resolve/main/${REL}"
-
-mode="download"
-[[ "${1:-}" == "--verify-only" ]] && mode="verify"
-
-if [[ "$mode" == "download" ]]; then
-    mkdir -p "$MODEL_DIR"
-    if [[ -s "$MODEL_DIR/$REL" ]]; then
-        echo "already present: $MODEL_DIR/$REL"
-    else
-        echo "fetching $REL (31457990272 bytes) — this is ~29 GiB"
-        # -f so an HTTP error is a failure, not a 153-byte "artifact".
-        # -C - so an interrupted run resumes instead of restarting.
-        curl -fL -C - --retry 5 --retry-delay 3 -o "$MODEL_DIR/$REL" "$URL"
-    fi
-fi
-
-echo "verifying $MODEL_DIR against declared size + sha256"
-python3 - "$MODEL_DIR" "$REL" "$SIZE" "$SHA" <<'PY'
-import hashlib, os, sys
-model_dir, rel, size, sha = sys.argv[1], sys.argv[2], int(sys.argv[3]), sys.argv[4]
-dest = os.path.join(model_dir, rel)
-if not os.path.isfile(dest):
-    print(f"  MISSING {rel}")
-    sys.exit(1)
-actual = os.path.getsize(dest)
-if actual != size:
-    print(f"  SIZE MISMATCH {rel}: {actual} != {size}")
-    sys.exit(1)
-h = hashlib.sha256()
-with open(dest, "rb") as f:
-    for chunk in iter(lambda: f.read(1 << 24), b""):
-        h.update(chunk)
-if h.hexdigest() != sha:
-    print(f"  SHA256 MISMATCH {rel}: {h.hexdigest()}")
-    sys.exit(1)
-print(f"  OK {rel} ({actual} bytes, sha256 matches the Hub LFS oid)")
-PY
-
-echo "swift candidate payload complete: $MODEL_DIR"
@@ -1,115 +0,0 @@
-#!/usr/bin/env bash
-# Download unsloth/Qwen3.8-Flash-Next-GGUF:UD-IQ4_XS (the
-# frank-dragoon model) on Dankclaw.
-#
-#   bash scripts/download-frank-dragoon-unsloth.sh
-#   bash scripts/download-frank-dragoon-unsloth.sh --verify-only
-#
-# The UD-IQ4_XS GGUF ships as three llama.cpp split parts (HF caps uploads at
-# 50 GB). The parts ARE the canonical payload: the serve script points -m at
-# part 1 and llama.cpp loads the 3-way split natively. Do NOT concatenate
-# them into a single file to serve — part 1's header carries
-# ggml.file_count=3, so a byte-correct concatenation still advertises itself
-# as a split and the loader rejects the non-split filename.
-# The MTP shared-Q8_0 head borrows the token embedding and the output
-# projection from the main model at runtime (it is the 2.6 GB remainder of
-# the 4B MTP layer). The F16 projector is fetched for a future vision flip;
-# the serve script does not load it while ENABLE_VISION=0.
-#
-# Integrity: every part is checked against its LFS sha256 (fetched live from
-# the Hub tree API, not trusted from disk). The repo is public (gated:
-# false); an HF token at ~/.cache/huggingface/token is used when present to
-# clear the anonymous rate limit on a 94 GB transfer.
-#
-# Layout after a successful run (MODEL_DIR):
-#   UD-IQ4_XS/Qwen3.8-Flash-Next-UD-IQ4_XS-0000{1,2,3}-of-00003.gguf  the 3-way split
-#   mtp/mtp-Qwen3.8-Flash-Next-shared-Q8_0.gguf   2,786,568,256  draft head
-#   vision/mmproj-F16.gguf                         904,004,000  projector
-set -euo pipefail
-
-REPO="unsloth/Qwen3.8-Flash-Next-GGUF"
-MODEL_DIR="/home/dank/models/Qwen3.8-Flash-Next-UD-IQ4_XS"
-BASE="https://huggingface.co/$REPO/resolve/main"
-
-mode="download"
-[[ "${1:-}" == "--verify-only" ]] && mode="verify"
-
-token=""
-auth=()
-if [[ -r "$HOME/.cache/huggingface/token" ]]; then
-    token="$(tr -d '[:space:]' < "$HOME/.cache/huggingface/token")"
-    auth=(-H "Authorization: Bearer $token")
-fi
-
-dl() { # dl <relpath>
-    local rel="$1" dest="$MODEL_DIR/$rel"
-    [[ -s "$dest" ]] && return 0
-    mkdir -p "$(dirname "$dest")"
-    echo "fetching $rel"
-    curl -fL -C - "${auth[@]}" --retry 5 --retry-delay 3 -o "$dest" "$BASE/$rel"
-}
-
-# relpath size sha256 — the LFS oids from the Hub tree API (2026-09-21)
-FILES=(
-    "UD-IQ4_XS/Qwen3.8-Flash-Next-UD-IQ4_XS-00001-of-00003.gguf 10946624 5ce89370720f8bf90890f439361282104c1aa1482d4013bb9a50923e758e71a4"
-    "UD-IQ4_XS/Qwen3.8-Flash-Next-UD-IQ4_XS-00002-of-00003.gguf 49835229856 577a38a2392b40ca2193cea502e1d92f60b8cd370675d308e0ec21885d9daaa7"
-    "UD-IQ4_XS/Qwen3.8-Flash-Next-UD-IQ4_XS-00003-of-00003.gguf 43836407744 d4634e6d84f0ebb0940be15c90d3790bf6464e3dea3a1cddc567dc0e83ad8833"
-    "MTP/mtp-Qwen3.8-Flash-Next-shared-Q8_0.gguf 2786568256 5ff54097406a905cf3a724c709124ceb0e3e10235ee862298969e91c96fa96e6"
-    "mmproj-F16.gguf 904004000 1f7b7f0b984cf065c604360c29c8098362ed61b290db0ff12c6f360bb1a8a980"
-)
-
-RELS=()
-for line in "${FILES[@]}"; do
-    read -r rel size _ <<<"$line"
-    RELS+=("$rel")
-    if [[ "$mode" == "download" ]]; then
-        dl "$rel"
-    fi
-done
-
-echo "verifying parts against the live Hub tree API"
-python3 - "$MODEL_DIR" "$REPO" "${RELS[@]}" <<'PY'
-import hashlib, json, os, sys, urllib.request
-
-model_dir, repo = sys.argv[1], sys.argv[2]
-tree = json.load(urllib.request.urlopen(
-    f"https://huggingface.co/api/models/{repo}/tree/main?recursive=true"))
-want = {}
-for f in tree:
-    if f["type"] == "file" and f.get("lfs"):
-        want[f["path"]] = (f["lfs"]["size"], f["lfs"]["oid"])
-
-def sha256(path):
-    h = hashlib.sha256()
-    with open(path, "rb") as fh:
-        for chunk in iter(lambda: fh.read(1 << 24), b""):
-            h.update(chunk)
-    return h.hexdigest()
-
-ok = True
-expected = set(sys.argv[3:])
-for rel in sorted(expected):
-    if rel not in want:
-        print(f"NOT IN HUB TREE {rel}"); ok = False; continue
-    size, oid = want[rel]
-    path = os.path.join(model_dir, rel)
-    if not os.path.isfile(path):
-        print(f"MISSING {rel}"); ok = False; continue
-    actual_size = os.path.getsize(path)
-    if actual_size != size:
-        print(f"SIZE MISMATCH {rel}: {actual_size} != {size}"); ok = False; continue
-    digest = sha256(path)
-    if digest != oid:
-        print(f"SHA256 MISMATCH {rel}"); ok = False; continue
-    print(f"ok {rel}")
-sys.exit(0 if ok else 1)
-PY
-
-if [[ "$mode" == "download" ]]; then
-    mkdir -p "$MODEL_DIR/mtp" "$MODEL_DIR/vision"
-    [[ -e "$MODEL_DIR/mtp/mtp-Qwen3.8-Flash-Next-shared-Q8_0.gguf" ]] ||
-        mv "$MODEL_DIR/MTP/mtp-Qwen3.8-Flash-Next-shared-Q8_0.gguf" "$MODEL_DIR/mtp/"
-    [[ -e "$MODEL_DIR/vision/mmproj-F16.gguf" ]] || mv "$MODEL_DIR/mmproj-F16.gguf" "$MODEL_DIR/vision/"
-fi
-
-echo "frank-dragoon payload complete: $MODEL_DIR"
@@ -1,89 +0,0 @@
-#!/usr/bin/env bash
-# Download the frank-dragoon payload on Dankclaw:
-#   - unsloth/Qwen3.8-27B-GGUF:UD-Q8_K_XL (the 27B dense main GGUF)
-#   - z-lab/Qwen3.8-27B-DFlash2-GGUF:Q4_K_M (the DFlash2 drafter)
-#
-#   bash scripts/download-frank-dragoon.sh
-#   bash scripts/download-frank-dragoon.sh --verify-only
-#
-# Integrity: every file is checked against its declared byte count and sha256
-# (the values below are the LFS oids from the Hub, 2026-09-21). An HF token
-# at ~/.cache/huggingface/token is used when present to clear the anonymous
-# rate limit on a 31 GB transfer.
-#
-# Layout after a successful run (MODEL_DIR):
-#   Qwen3.8-27B-UD-Q8_K_XL.gguf        31457991680  main GGUF
-#   Qwen3.8-27B-DFlash2-Q4_K_M.gguf    1143006816  DFlash2 drafter
-set -euo pipefail
-
-MODEL_DIR="/home/dank/models/Qwen3.8-27B-UD-Q8_K_XL"
-
-mode="download"
-[[ "${1:-}" == "--verify-only" ]] && mode="verify"
-
-token=""
-auth=()
-if [[ -r "$HOME/.cache/huggingface/token" ]]; then
-    token="$(tr -d '[:space:]' < "$HOME/.cache/huggingface/token")"
-    auth=(-H "Authorization: Bearer $token")
-fi
-
-dl() { # dl <url> <dest>
-    local url="$1" dest="$2"
-    [[ -s "$dest" ]] && return 0
-    mkdir -p "$(dirname "$dest")"
-    echo "fetching $dest"
-    curl -fL -C - "${auth[@]}" --retry 5 --retry-delay 3 -o "$dest" "$url"
-}
-
-# filename size sha256 url — the LFS oids from the Hub (2026-09-21)
-FILES=(
-    "Qwen3.8-27B-UD-Q8_K_XL.gguf 31457991680 af36ecb6b5db1407953345b746c14ac93f0657dda413910b4348683a2d990377 https://huggingface.co/unsloth/Qwen3.8-27B-GGUF/resolve/main/Qwen3.8-27B-UD-Q8_K_XL.gguf"
-    "Qwen3.8-27B-DFlash2-Q4_K_M.gguf 1143006816 1a25c56858e1ebe93f2718ac1d49d1151f9323325c1bbfd6209370f4db131ebd https://huggingface.co/z-lab/Qwen3.8-27B-DFlash2-GGUF/resolve/main/Qwen3.8-27B-DFlash2-Q4_K_M.gguf"
-)
-
-# Verify each file's byte count and sha256 (idempotent: a complete file is
-# re-checked, not re-downloaded).
-echo "verifying $MODEL_DIR against declared sizes + sha256"
-python3 - "$MODEL_DIR" <<'PY'
-import hashlib, os, sys
-model_dir = sys.argv[1]
-# (rel, size, sha256) triples — the LFS oids from the Hub (2026-09-21).
-specs = {
-    "Qwen3.8-27B-UD-Q8_K_XL.gguf": (31457991680, "af36ecb6b5db1407953345b746c14ac93f0657dda413910b4348683a2d990377"),
-    "Qwen3.8-27B-DFlash2-Q4_K_M.gguf": (1143006816, "1a25c56858e1ebe93f2718ac1d49d1151f9323325c1bbfd6209370f4db131ebd"),
-}
-ok = True
-for rel, (size, sha) in specs.items():
-    dest = os.path.join(model_dir, rel)
-    if not os.path.isfile(dest):
-        print(f"  MISSING {rel}")
-        ok = False
-        continue
-    actual_size = os.path.getsize(dest)
-    if actual_size != size:
-        print(f"  SIZE MISMATCH {rel}: {actual_size} != {size}")
-        ok = False
-        continue
-    h = hashlib.sha256()
-    with open(dest, "rb") as f:
-        for chunk in iter(lambda: f.read(1 << 24), b""):
-            h.update(chunk)
-    actual_sha = h.hexdigest()
-    if actual_sha != sha:
-        print(f"  SHA256 MISMATCH {rel}: {actual_sha}")
-        ok = False
-        continue
-    print(f"  OK {rel} ({actual_size} bytes)")
-if not ok:
-    sys.exit(1)
-PY
-
-if [[ "$mode" == "download" ]]; then
-    for line in "${FILES[@]}"; do
-        read -r rel _ _ url <<<"$line"
-        dl "$url" "$MODEL_DIR/$rel"
-    done
-fi
-
-echo "frank-dragoon payload complete: $MODEL_DIR"
@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+# the target GGUF, the BF16 vision projector and the DFlash2 draft model.
+#
+#   bash scripts/download-frank-medium-gguf.sh
+#   bash scripts/download-frank-medium-gguf.sh --verify-only
+#
+# Both repositories are public (anonymous download; no token needed).  If a
+# token exists at ~/.cache/huggingface/token it is used, which keeps a 31 GB
+# transfer clear of the anonymous rate limit.  The script is resumable
+# (curl -C -) and checks every artifact's exact byte count afterwards, so a
+# truncated file fails here instead of load-crashing the server.
+#
+# WHY THESE TWO FILES:
+#   * Target: ajgazin/Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF at
+#     UD-Q8_K_XL -- Unsloth Dynamic 3.0 quant (per-tensor types from Unsloth's
+#     own quant of the same size, on Unsloth's importance matrix).  The file
+#     carries the model's MTP layer (`blk.64.nextn.*`), so llama.cpp can also
+#     draft from the model itself with no second copy in VRAM.
+#   * Draft: z-lab/Qwen3.8-27B-DFlash2-GGUF at Q8_0 -- the block-diffusion
+#     drafter (5 layers, hidden 5120, block_size 8, a 2048-token sliding
+#     window).  Q8_0 is 1.92 GiB against BF16's 3.6 GiB and the drafter's job is
+#     throughput, not output quality (the target verifies every drafted token).
+set -euo pipefail
+
+MODEL_REPO="ajgazin/Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF"
+MODEL_DIR="/home/dank/models/Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-GGUF"
+MODEL_FILE="Swift-Qwen3.8-27B-Uncensored-Dynamic-MTP-UD-Q8_K_XL.gguf"
+MODEL_SIZE=31457990112
+# The BF16 vision projector from the same repo; llama-server autoloads any
+# mmproj*.gguf beside the target, so it must land in MODEL_DIR.
+MM_PROJ_FILE="mmproj-BF16.gguf"
+MM_PROJ_SIZE=931145888
+
+DRAFT_REPO="z-lab/Qwen3.8-27B-DFlash2-GGUF"
+DRAFT_DIR="/home/dank/models/Qwen3.8-27B-DFlash2-GGUF"
+DRAFT_FILE="Qwen3.8-27B-DFlash2-Q8_0.gguf"
+DRAFT_SIZE=2056414816
+
+mode="download"
+[[ "${1:-}" == "--verify-only" ]] && mode="verify"
+
+token=""
+auth=()
+if [[ -r "$HOME/.cache/huggingface/token" ]]; then
+    token="$(cat "$HOME/.cache/huggingface/token")"
+    auth=(-H "Authorization: Bearer $token")
+else
+    echo "no HF token at ~/.cache/huggingface/token; downloading anonymously"
+fi
+
+dl() { # dl <repo> <dir> <file>
+    mkdir -p "$2"
+    echo "  fetching $3"
+    curl -fL -C - -o "$2/$3" --retry 10 --retry-delay 5 --retry-max-time 21600 \
+        "${auth[@]}" "https://huggingface.co/$1/resolve/main/$3"
+}
+
+if [[ "$mode" == "download" ]]; then
+    echo "target: $MODEL_REPO"
+    dl "$MODEL_REPO" "$MODEL_DIR" "$MODEL_FILE"
+    echo "projector: $MODEL_REPO"
+    dl "$MODEL_REPO" "$MODEL_DIR" "$MM_PROJ_FILE"
+    echo "draft: $DRAFT_REPO"
+    dl "$DRAFT_REPO" "$DRAFT_DIR" "$DRAFT_FILE"
+fi
+
+echo "verifying sizes"
+ok=1
+check() { # check <path> <expected>
+    local act
+    act="$(stat -c%s "$1" 2>/dev/null || echo 0)"
+    if [[ "$act" -eq "$2" ]]; then
+        echo "  OK   $1 ($act bytes)"
+    else
+        echo "  BAD  $1 ($act bytes, want $2)" >&2
+        ok=0
+    fi
+}
+check "$MODEL_DIR/$MODEL_FILE" "$MODEL_SIZE"
+check "$MODEL_DIR/$MM_PROJ_FILE" "$MM_PROJ_SIZE"
+check "$DRAFT_DIR/$DRAFT_FILE" "$DRAFT_SIZE"
+[[ -z "$token" ]] && echo "note: no token used; the byte counts above are the integrity check"
+[[ "$ok" -eq 1 ]] || exit 1
+echo "all artifacts present and sized correctly"
@@ -1,90 +0,0 @@
-#!/usr/bin/env bash
-# Download the frank-zealot payload for llama.cpp on the RTX 3090:
-# HauhauCS/Qwen3.5-9B-Uncensored-HauhauCS-Aggressive at **Q6_K** plus the
-# PUBLISHER's OWN vision projector (the BF16 mmproj — the model is natively
-# multimodal, so this file is the endpoint's eyes). Public repo — no auth
-# header, and never a token on the command line (it is world-readable in
-# /proc/<pid>/cmdline).
-#
-# Fresh downloads, no resume (`curl -C -` once produced a 213 MB oversized
-# file on a 31 GiB payload); -f/--fail-with-body so an HTTP error is not a
-# success, then byte count and sha256. The Hub exposes no LFS oid for this
-# repo (Xet storage), so the sha256 values below were computed locally after
-# the first verified fetch — byte counts match the Hub's declared sizes.
-# A sha of "-" means "first fetch: size-verified, sha printed for pinning".
-# Idempotent: complete files are skipped.
-#
-# 2026-10-07 (Frank): the payload moved to Qwen3.5-9B-Uncensored Q6_K at
-# 2 x 200,704 (qwen35 hybrid: 32 layers, 8 full-attention + 24 Gated
-# DeltaNet, no MTP tensors in this file). Rollback payloads stay on disk:
-# /home/dank/models/Gemma4-26B-A4B/ (Q4_K_M, the 2026-10-07 era being
-# replaced), Swift15-UncIQ3XXS/, MiMo-Q6K/, MiMo-Q5KM/, Ornith-Q8/.
-#
-# Usage:
-#   scripts/download-frank-zealot.sh [DEST_DIR] [--verify-only]
-set -euo pipefail
-
-DEST=""
-VERIFY_ONLY=0
-for arg in "$@"; do
-    case "$arg" in
-        --verify-only) VERIFY_ONLY=1 ;;
-        *) DEST="$arg" ;;
-    esac
-done
-DEST="${DEST:-/home/dank/models/Qwen35-9B-HauhauCS-Q6K}"
-
-# repo | hub-name | dest-name | bytes | sha256 (computed locally; Xet repo)
-FILES=(
-  "HauhauCS/Qwen3.5-9B-Uncensored-HauhauCS-Aggressive|Qwen3.5-9B-Uncensored-HauhauCS-Aggressive-Q6_K.gguf|Qwen3.5-9B-Uncensored-HauhauCS-Aggressive-Q6_K.gguf|7359259008|c0ba7beb68fd3fe47891bd549486d38dcf62d00817296ea314ad37017f5a4986"
-  "HauhauCS/Qwen3.5-9B-Uncensored-HauhauCS-Aggressive|mmproj-Qwen3.5-9B-Uncensored-HauhauCS-Aggressive-BF16.gguf|mmproj-Qwen3.5-9B-Uncensored-HauhauCS-Aggressive-BF16.gguf|921704448|05f662501f8bd45607b079723a3e238a4e888fd085a10a53f4057a0e250f6934"
-)
-
-status=0
-for entry in "${FILES[@]}"; do
-  IFS='|' read -r repo hubname destname size sha <<<"$entry"
-  url="https://huggingface.co/${repo}/resolve/main/${hubname}"
-  f="$DEST/$destname"
-  have=0
-  if [[ -f "$f" ]] && [[ "$(stat -c%s "$f")" == "$size" ]]; then
-    if [[ "$sha" == "-" ]]; then
-      have=1
-    elif sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-      have=1
-    fi
-  fi
-  if (( have )); then
-    echo "OK        $destname"
-    continue
-  fi
-  if (( VERIFY_ONLY )); then
-    echo "MISSING   $destname"
-    status=1
-    continue
-  fi
-  echo "FETCHING  $destname (from $repo)"
-  tmp="$f.part"
-  curl -fsSL --fail-with-body -o "$tmp" "$url"
-  mv "$tmp" "$f"
-  if [[ "$(stat -c%s "$f")" != "$size" ]]; then
-    echo "SIZE FAIL $destname ($(stat -c%s "$f") != $size)"
-    status=1
-    continue
-  fi
-  if [[ "$sha" == "-" ]]; then
-    echo "VERIFIED  $destname (size only) sha256=$(sha256sum "$f" | cut -d' ' -f1)"
-    continue
-  fi
-  if ! sha256sum -c --quiet <(printf '%s  %s\n' "$sha" "$f"); then
-    echo "SHA FAIL  $destname"
-    status=1
-    continue
-  fi
-  echo "VERIFIED  $destname"
-done
-if (( status == 0 )); then
-  echo "DOWNLOAD_DONE $DEST"
-else
-  echo "DOWNLOAD_FAILED $DEST" >&2
-fi
-exit "$status"
@@ -1,107 +0,0 @@
-#!/usr/bin/env python3
-"""Dump GGUF part headers: split metadata, tensor names/dims/types/bytes.
-
-Reads ONLY the header region (metadata + tensor-info table); tensor data is
-never touched, so a 50 GiB part scans in milliseconds. Split GGUFs are valid
-GGUFs per part; part 1 of this payload is metadata-only (ntensors=0) and
-parts 2-6 carry the tensors. Confirmed layout for this payload: GGUF v3 —
-magic, u32 version, u64 ntensors, u64 nkv, then kvs (v3: u64-length strings),
-then tensor infos (v3: u64-length names).
-"""
-import struct, sys, traceback
-
-TYPE_SIZE = {0:4,1:2,2:1,3:1/2,4:4,5:8,6:2,7:1,8:0.4375,9:1.4375,10:1,11:0.5,
-             12:2,13:4/3,14:2,15:2,16:4,17:2,18:2,19:1,20:2,21:1,22:2,23:2,
-             24:2,25:1.0625,26:1,27:1.375,28:2,29:2,30:2,31:4,32:8,33:2.125,
-             34:2.5,35:2,36:2.375,37:1.5625,38:2.3125,39:2.1875,40:0,41:1.75,
-             42:1.75,43:1.8125,44:2,45:2.25,46:1.5,47:2.0625,48:2.625,49:1.0625,
-             50:2.3125,51:2.875,52:2,53:2.3125,54:2.75,55:2.5,56:2.875,57:2.25,
-             58:2,59:3.8125,60:2.8125,61:1.5625,62:1.5,63:0.5}
-
-class P:
-    def __init__(self, f):
-        self.f = f
-        self.ver = 2
-    def rd(self, n):
-        b = self.f.read(n)
-        if len(b) != n:
-            raise EOFError(f"short read {len(b)}/{n}")
-        return b
-    def u8(self): return self.rd(1)[0]
-    def u32(self): return struct.unpack("<I", self.rd(4))[0]
-    def u64(self): return struct.unpack("<Q", self.rd(8))[0]
-    def f32(self): return struct.unpack("<f", self.rd(4))[0]
-    def f64(self): return struct.unpack("<d", self.rd(8))[0]
-    def s(self):
-        # GGUF v3 strings carry a u64 length; v2 used u32.
-        n = self.u64() if self.ver >= 3 else self.u32()
-        return self.rd(n).decode("utf-8", "replace")
-    def val(self, t):
-        # GGUF kv value types: 0 u8, 1 i8, 2 u16, 3 i16, 4 u32, 5 i32,
-        # 6 f32, 7 bool, 8 string, 9 array, 10 u64, 11 i64, 12 f64.
-        if t == 8: return self.s()
-        if t == 9:
-            et = self.u32(); n = self.u64()
-            return [self.val(et) for _ in range(n)]
-        if t == 0: return self.u8()
-        if t == 1: return struct.unpack("<b", self.rd(1))[0]
-        if t == 2: return struct.unpack("<H", self.rd(2))[0]
-        if t == 3: return struct.unpack("<h", self.rd(2))[0]
-        if t == 4: return self.u32()
-        if t == 5: return struct.unpack("<i", self.rd(4))[0]
-        if t == 6: return self.f32()
-        if t == 7: return self.u8()
-        if t == 10: return self.u64()
-        if t == 11: return struct.unpack("<q", self.rd(8))[0]
-        if t == 12: return self.f64()
-        raise ValueError(f"unknown kv type {t}")
-
-def main(path):
-    tensors = []
-    kvs = {}
-    with open(path, "rb") as f:
-        p = P(f)
-        magic = p.rd(4)
-        assert magic == b"GGUF", magic
-        p.ver = p.u32()
-        ntens = p.u64()
-        nkv = p.u64()
-        for _ in range(nkv):
-            k = p.s()
-            kvs[k] = p.val(p.u32())
-        for _ in range(ntens):
-            name = p.s()
-            nd = p.u32()
-            dims = [p.u64() for _ in range(nd)]
-            t = p.u32()
-            off = p.u64()
-            numel = 1
-            for d in dims: numel *= d
-            tensors.append((name, dims, t, numel))
-    print(f"== {path}  (gguf v{p.ver}, {ntens} tensors, {nkv} kv)")
-    for k in ("general.architecture", "general.name", "split.no", "split.count",
-              "split.tensors", "qwen4exp.expert_count", "qwen4exp.expert_used_count",
-              "qwen4exp.ngram.tensors"):
-        if k in kvs: print(f"  kv {k} = {kvs[k]}")
-    ngram_kvs = {k: v for k, v in kvs.items() if "ngram" in k.lower()}
-    if ngram_kvs: print("  ngram kvs:", ngram_kvs)
-    big = []
-    for name, dims, t, numel in tensors:
-        big.append((numel * TYPE_SIZE.get(t, 0), name, dims, t, numel))
-    big.sort(reverse=True)
-    print(f"  -- {min(12, len(big))} largest of {len(big)}:")
-    for bytes_, name, dims, t, numel in big[:12]:
-        print(f"    {bytes_/2**30:9.3f} GiB  {name}  dims={dims} type={t} ({numel:,} elems)")
-    named = [(b, n, d, t) for b, n, d, t, e in big
-             if any(s in n.lower() for s in ("ngram", "ple", "token_embd", "exps"))]
-    if named:
-        print("  -- ngram/ple/embed/experts-named:")
-        for bytes_, name, dims, t in named[:20]:
-            print(f"    {bytes_/2**30:9.3f} GiB  {name}  dims={dims} type={t}")
-
-for pth in sys.argv[1:]:
-    try:
-        main(pth)
-    except Exception:
-        print(f"== {pth}: FAILED")
-        traceback.print_exc()
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Frank	de12a54df9	On main: peer frank-small WIP held (test file)	2026-09-17 01:47:30 -07:00
Frank	72fbcfa907	index on main: `d95f55b` frank-medium: 36:29 split, 327680 context, vision enabled	2026-09-17 01:47:30 -07:00