governance: bench is removed from the model-swap procedure

Model changes verify by driving the live service — boot ledger,
per-request timings, one real request per harness role. No bench window
is ever scheduled for a swap. The stop-and-mask policy stays for
deliberate standalone bench windows (it is host protection, not a swap
step). Codified in AGENTS.md (policy lead + summary row), Model Swap and
Rollback (No bench step law, §8 close-out source, Related rescope).

AGENTS.md

@@ -25,7 +25,7 @@ merge absorbed the former `vllmScripts` repo, history preserved).
 
 | Target | Service | Runtime | Model | Port |
 |--------|---------|---------|-------|------|
-| Dankserver | `frank-archon` | **radiance** (StillDeadcode, **pin 1.0.13** digest-pinned `stilldeadcode/radiance@sha256:4c3f484564…`, plain `podman run`, root systemd unit) | **Publisher payload** (swap 2026-10-15, MODEL_FILE-only): `StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe` → **`qwen3.8-next-flash-fp8-iq4r-moe.rad`** (121,969,901,568 B = **116,322 MiB**, Hub-LFS sha256 `0af5e962…` verified at fetch by `scripts/download-frank-archon-iq4r.sh`) — the OFFICIAL Qwen3.8-Flash-Next bf16 checkpoint rad-converted by the engine's author: routed experts as **4-bit codes into a 16-level non-uniform codebook** (128-pt Walsh–Hadamard rotation, GPTQ on a 10M-token calibration + 3 coordinate-descent sweeps, E4M3 scales per 64 weights), **10 whole bf16-protected experts/layer**, int8 W8A8 trunk/lm_head, fp8 HC mixtures, fp8 fixed-scale PLE n-gram (47.7 GiB), **MTP head + bf16 vision tower in the container**; card KL 0.0789 mean all-tokens / top-1 92.85 % vs BF16. **Base-alignment (censored) model** — the abliterated family lives on frank-dragoon. Shape carried VERBATIM from the 2026-10-13 record: **3 × 200,000 fp8-KV** (`--max-num-seqs 3`), **25,600 MiB slab + 5,120 MiB pool = 30,720 of the 30,969 MiB claimable**, 44 GiB/rank pinned host pool, PLE pinned to RAM, MTP depth 2, MNBT 2048, Froggeric v22.5 template. Decode/prefill ladders in the runbook are the **w4dn8 record** (the bar to beat; new-payload probes pending). Rollback: revert the swap commit (w4dn8 `.rad` on disk); the fp8-native `.rad` + the raw Swift1.5 BF16 source were DELETED from disk 2026-10-15 (Frank's one-time rm, volume for this payload; rebuildable via the fetch/build scripts). | 7770 |
+| Dankserver | `frank-archon` | **radiance** (StillDeadcode, **pin 1.0.13** digest-pinned `stilldeadcode/radiance@sha256:4c3f484564…`, plain `podman run`, root systemd unit) | ukisai/Swift1.5-Qwen3.8-Flash-Next BF16 (335.3 GiB, 397/397 sha256-verified) converted by `scripts/convert-swift15-w4dn8.sh` to `qwen4exp-swift15-w4dn8-i8-hc8m.rad` (**116,416 MiB**): **all 49,152 experts GPTQ w4** (10M-token calibration on engine 1.2.0) + **24 whole bf16-protected experts/layer** (energy-share law), int8 trunk/lm_head, fp8 HC, PLE n-gram fp8 fixed-scale, on **BOTH R9700s TP=2** (`--tp-wire wht6`), experts in a **44 GiB/rank pinned host pool** + VRAM cache (`--placement expert_tiered`, explicit `--vram-weights-mib 25600 --vram-kv-mib 5120` = 30,720 of the **30,969 MiB** the engine's own budget table makes claimable: card 32,624 MiB, settle floor 209 MiB), **47.7 GiB n-gram copy pinned to host RAM** (`--ngram-placement ram`; root unit + `LimitMEMLOCK=infinity`), **fp8 KV** (pool 5,120 MiB = the 3-slot contract + 1.3 % — the only dtype that funds 3 × 200,000 without gutting the slab, since bf16 bills 13.8 KiB/token), **MTP spec decode depth 2**, `--max-num-seqs 3` (the capacity contract is 3 × 200,000; 3 × (1+2) = 9 all-reduce rows, inside the 25-row wht6 exactness bound), `--max-model-len 200000`, MNBT 2048, Froggeric v22.5 template. KLD-gated (mean KL 0.0131, top-1 97.92 % vs BF16); decode ~190 t/s live (gate bar 30.8); prefill is **slab-limited and pays for it** — 22,208 → 3,397, 24,000 → 3,290, 25,600 → **3,584** t/s at 43.5k single-stream, 3-way 197k aggregate 3,051 → **3,589** t/s, with a cliff at ~26 GiB (26,071 → 4,379). Cutover 2026-10-08 from fp8-native (payload on disk = rollback); 3-slot fp8-KV shape 2026-10-13, re-cut twice in the slab's favour (22208/6912 at 4 slots → 24000/5120 → 25600/5120); the 4-slot shape (22208/6912, `--max-num-seqs 4`) is the documented rollback. | 7770 |
 | Dankclaw | `frank-dragoon` | **halogen-flash-server 0.16.2** (`ghcr.io/peonist-ai/halogen-flash-server@sha256:0c61bf84…`, digest-pinned, plain `podman run` via `scripts/serve-frank-dragoon.sh`, root systemd unit) | Quat3rnion/halogen-swift1.5-qwen3.8-flash-next-v2-abliterated **`qwen38-flash-next-v2-swift15-abliterated.hgn`** (66,687,678,464 B = compacted r2 of the card's 89,775,868,032 B original, ~62 GiB resident; the v2 `.hgn` format loads in NO other engine), **+ REQUIRED `qwen38-flash-next-ngram.hgn`** (51,200,246,144 B, peonist @5cc17cea — read beside the checkpoint) **+ vision tower** (897,916,416 B, @e053f488 — **vision ON**, `image_url` parts only, ≥256 px probes), **MTP spec decode ALWAYS-ON (`HALOGEN_SPEC_ADAPT=0` — the adaptive default disables the drafter per request and HALVES decode)**, MTP head INSIDE the checkpoint (`HALOGEN_MTP_HEAD` unset; no sidecar fetched), **2 slots × 262,144 ctx** (KV pool 524,288 positions ≈ 14.0 GiB at ~28 KiB/position; the 27B slots>1-disables-drafting law does NOT carry over — batching and speculation coexist, the card's quickstart ships 2 with the head), harness window 217,088 = ceiling − 45k estimate headroom, **server-side sampler 1.0/0.95/20** (card recipe; models.yml extraBody matches), coupled cap/timeout 65536/7200, prompt cache ON by default (warm 100k turn ≈ 2 s vs ≈ 88 s cold)|7770|
 | Dankclaw | `frank-zealot` | llama.cpp master (0.5.0-dev, commit `5fc4f3c`), CUDA sm_86 build (root systemd unit, relinked) | HauhauCS/Qwen3.5-9B-Uncensored-HauhauCS-Aggressive **Q6_K** (7,359,259,008 B; dense `qwen35` hybrid: 32 layers, 8 full-attention + 24 Gated DeltaNet, 4 KV heads × 256 dim, vocab 248,320, native 262,144, **no MTP tensors in the file**) + the publisher's own **BF16 mmproj** (921,704,448 B) for **vision**, on the RTX 3090, **TWO 200,704-token slots** (`--ctx-size 401408 --parallel 2`), **exact f16 K + f16 V** under flash attention (32 KiB/token over the 8 full layers = 12.25 GiB pool), batch 4096 / **ubatch 2048** (measured CUDA optimum), `--log-verbosity 4`, **MTP OFF** (forced: no `nextn` tensors exist). Priced from the MiMo Q6_K boots (same geometry, same card, same shape): 21,276/2,849 at ubatch 1024, 21,846/2,279 at 2048. Cutover 2026-10-07 (late) from Gemma4-26B-A4B Q4_K_M 1×200,704. All three endpoints route harness **compaction** here. | 7771 |
 
@@ -226,6 +226,13 @@ archive.
 
 ## Benchmarking Policy (MANDATORY)
 
+**Benchmarking is NOT part of the model-swap procedure** (2026-10-15). A
+model change is verified by driving the live service — boot ledger,
+per-request `timings`/`Server-Timing`, one real request per harness role
+(`serverAppConfigs-docs/LLM/Model Swap and Rollback.md` §6/§8). No bench
+window is scheduled for a swap, ever. The rest of this policy governs
+*deliberate* bench windows (flag A/Bs, shape sweeps), which are separate
+operations on a live host:
 **STOP the production service BEFORE benchmarking** — these servers serve
 real users, and a bench beside a live service starves the GPU and corrupts
 results. Use the runtime's own harness: `llama-bench` for the llama.cpp
@@ -498,33 +505,32 @@ Rollback: revert the swap commit — the Gemma4 payload
 (`/home/dank/models/Ornith-Q8/`) all remain on disk.
 
 
-### frank-archon — Radiance (StillDeadcode), publisher Qwen3.8-Flash-Next iq4r, TP=2 (Dankserver, ACTIVE)
+### frank-archon — Radiance (StillDeadcode), Swift1.5-Qwen3.8-Flash-Next GPTQ w4, TP=2 (Dankserver, ACTIVE)
 
 The **radiance engine** (StillDeadcode, Apache-2.0; image
 `stilldeadcode/radiance@sha256:4c3f484564…` digest-pinned, **pin 1.0.13**
-for serve; `libr4d` gfx1201 kernels, plain `podman run`, root
-systemd unit, container name = unit name) serving the
-**publisher's container of the official Qwen/Qwen3.8-Flash-Next**:
-`StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe` →
-`qwen3.8-next-flash-fp8-iq4r-moe.rad` (116,322 MiB, Hub-LFS sha256
-verified at fetch by `scripts/download-frank-archon-iq4r.sh`; recipe
-`qwen4exp-w4nl64-i8-hc8m`): **routed experts as 4-bit codes into a
-16-level non-uniform codebook** after a 128-point Walsh–Hadamard rotation
-(E4M3 scale per 64 weights; codes by GPTQ on a 10M-token calibration with
-per-expert down-proj Hessians, refined by 3 coordinate-descent sweeps),
-**10 whole bf16-protected experts/layer**, **int8 W8A8 trunk/lm_head**
-(scale per 128 columns searched), **fp8 HC mixtures**, PLE n-gram table at
-fp8 fixed scale (47.7 GiB), **MTP head and bf16 vision tower in the
-container**. Card quality (full-vocab teacher-forced KL vs bf16, ~75K
-positions): mean 0.0789 all-tokens / 0.0239 assistant turns, top-1 92.85 %.
-**MODEL_FILE is the only serving argument that moved** (2026-10-15); every
-number of the 2026-10-13 shape below carries verbatim. The plugin's
-**one-table-one-encoding law** (fleet-measured at rad-convert declare):
-one expert table takes ONE encoding; only whole bf16 experts are legal
-beside it. Rollback: revert the swap commit — the in-house w4dn8 `.rad`
-(KLD-gated Swift1.5 conversion) stays on disk; the fp8-native `.rad` was
-deleted 2026-10-15 (rebuild: `scripts/download-frank-archon.sh` +
-`scripts/build-frank-archon-rad.sh`).
+for serve/convert/KLD; `libr4d` gfx1201 kernels, plain `podman run`, root
+systemd unit, container name = unit name) serving
+**ukisai/Swift1.5-Qwen3.8-Flash-Next (BF16, 335.3 GiB, 131 shards,
+397/397 sha256-verified)** converted by `scripts/convert-swift15-w4dn8.sh`
+with recipe `scripts/recipes/qwen4exp-swift15-w4dn8-i8-hc8m.recipe` to
+`qwen4exp-swift15-w4dn8-i8-hc8m.rad` (~114 GiB): **all 49,152 experts GPTQ
+w4** (act-order, damp 0.05, 10,000,000-token calibration captured on engine
+**1.2.0** via `RADIANCE_CALIB_DIR`/`RADIANCE_CALIB_TOKENS` — the only pin
+with the token knob; the RADGRAM2 grams are format-identical across pins and
+cross the boundary by design), **24 whole experts per layer cast bf16** (the
+PROTECTED set, derived from the calibration grams' energy share),
+**int8 trunk/lm_head**, **fp8 HC mixtures** (`--hc-mix-dtype`), PLE n-gram
+table at fp8 fixed scale (47.7 GiB in the container, from 95.4 GiB bf16).
+The plugin's **one-table-one-encoding law** (measured at rad-convert
+declare): one expert table takes ONE encoding; only whole bf16 experts are
+legal beside it — no w4/fp8 split of the down/gate_up pair (24-value
+`rad_arch_quant_desc` array, one per layer). KLD gate vs the BF16
+reference (recorded on the same 1.0.13 pin) is the precision referee;
+the throughput gate (decode ≥ 30.8 t/s) was passed at 4.5× the bar
+(122–173 t/s at 44.5k depth). Measured decode/prefill in the runbook.
+Rollback: revert the swap commit — the fp8-native `.rad`
+(`qwen4exp-fp8-native.rad`) and every prior payload remain on disk.
 
 **Shape (both R9700s, TP=2)**: `--tp-wire wht6`, `--max-num-seqs 3`,
 `--max-model-len 200000` (the harness contextWindow must quote this),
@@ -631,9 +637,8 @@ chat format — no parser flags; vision native (the 27-layer Qwen-VL tower,
 `--mm-max-patches`); `/metrics` carries vLLM-compatible names +
 `radiance:*` families — the Dankclaw Prometheus scrape is re-added.
 
-Runbook: `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-iq4r.md`.
-Retired Swift1.5 w4dn8 era (payload on disk = rollback): `serverAppConfigs-docs/LLM/frank-archon-radiance-swift15-w4dn8.md`.
-Retired fp8-native era (payload deleted 2026-10-15, rebuildable): `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-native-fp8.md`.
+Runbook: `serverAppConfigs-docs/LLM/frank-archon-radiance-swift15-w4dn8.md`.
+Retired fp8-native era: `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-native-fp8.md`.
 Retired FreeToken era: `serverAppConfigs-docs/LLM/frank-archon-freetoken-pr587.md`.
 Retired vLLM era: `serverAppConfigs-docs/LLM/dankserver-qwen38-fp8-expert-offload-tuning.md`.
 Retired GLM experiment: `serverAppConfigs-docs/LLM/frank-archon-glm53-flash-w4a16.md`.
@@ -1093,7 +1098,7 @@ Active:
 |---------|---------|
 | frank-dragoon (flash-server 0.16.2, abliterated Swift1.5 v2 .hgn + MTP always-on, 2×262,144, vision ON, Dankclaw) | `serverAppConfigs-docs/LLM/frank-dragoon-flash-server-v2-swift15.md` |
 | frank-zealot (llama.cpp CUDA, Qwen3.5-9B-Uncensored Q6_K, 2×200,704 exact f16 KV MTP-off, vision ON, Dankclaw) | `serverAppConfigs-docs/LLM/frank-zealot-llama-qwen35-9b-q6k-2x200704.md` |
-| frank-archon (radiance StillDeadcode, publisher Qwen3.8-Flash-Next iq4r .rad, 2×R9700 TP=2, Dankserver) | `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-iq4r.md` |
+| frank-archon (radiance StillDeadcode, Qwen3.8-Flash-Next-FP8 native, 2×R9700 TP=2, Dankserver) | `serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-native-fp8.md` |
 | Dankclaw kernel posture (`amd_iommu=off`) | `serverAppConfigs-docs/LLM/dankclaw-iommu-translation-off.md` |
 | Deployment flow + incidents | `serverAppConfigs-docs/LLM/deployment.md` |
 
@@ -1101,7 +1106,6 @@ Retired (rollback targets and history):
 
 | Runtime | Host | Window | Runbook |
 |---------|------|--------|---------|
-| radiance Swift1.5-Qwen3.8-Flash-Next GPTQ w4dn8, 3×200,000 fp8-KV slab 25600 (`frank-archon`) | Dankserver | 2026-10-08 → 10-15 (rollback target — `.rad` on disk; owns the slab-slope ladder, KV dtype law, KLD campaign, and every shape law the iq4r swap carried verbatim) | `frank-archon-radiance-swift15-w4dn8.md` |
 | llama.cpp CUDA Gemma4-26B-A4B QAT Q4_K_M, 1×200,704 f16-K/q8_0-V MTP-off (`frank-zealot`) | Dankclaw | 2026-10-07 → 10-07 (same-day swap; rollback target — payload on disk; owns the `attention_k_eq_v` pair-billing KV law and the gemma4-assistant drafter-cost boots) | `frank-zealot-llama-gemma4-q4km-200704.md` |
 | ROCmFPX llama.cpp fork Qwen3.8-27B Uncensored Q6_0_ROCMFPX_AGENT + MTP (`frank-dragoon`) | Dankclaw | 2026-10-03 → 10-05 (rollback target, payload + fork build on disk) | `frank-dragoon-rocmfpx-q6agent-uncensored-mtp.md` |
 | tcclaviger vLLM fork Qwen3.8-Flash-Next-Uncensored FP8, TP=2, shape G (`frank-archon`) | Dankserver | 2026-09-29 → 10-05 (rollback target — tag `frank-archon-vllm-shapeG-20261003`; trio + env lore in the tag, image in rootless storage) | `dankserver-qwen38-fp8-expert-offload-tuning.md` |
@@ -1160,7 +1164,7 @@ history.
 | Unstaged local changes | **Commit or discard** — check `git status` before starting work; ask if unsure. |
 | Deploying a committed change | **`scripts/deploy.sh <target>`** — pushes, pulls ff-only, plans, dispatches, health-checks. |
 | Container without a Quadlet unit | **Give it one** — boot-persistent, self-healing `.container` via git. |
-| Benchmarking | **Stop and mask the service first**, bench, unmask, restart, verify health. |
+| Benchmarking | **Not part of a model swap** — swaps verify on the live service. A deliberate bench window: **stop and mask the service first**, bench, unmask, restart, verify health. |
 | Deleting a file | **Move it to trash** — `.AGENTTRASH/` (in-repo) or `~/.AGENTTRASH/YYYYMMDD-topic`. Never `rm`. |
 | Tests exist | **Run them** — verify tests pass after every change. Do not commit failing tests. |
 | Real secrets | **Never commit** — host `.env` files; `.env.example` holds placeholders only. |

scripts/deploy-remote.sh

@@ -1277,14 +1277,11 @@ deploy_llm_zealot() {
 }
 
 # deploy_llm_archon — frank-archon is the radiance engine (StillDeadcode,
-# digest-pinned stilldeadcode/radiance image) serving the PUBLISHER's
-# 4-bit-codebook container of the official Qwen/Qwen3.8-Flash-Next
-# (qwen3.8-next-flash-fp8-iq4r-moe.rad, fetched by
-# scripts/download-frank-archon-iq4r.sh) on BOTH R9700s (TP=2) as a
+# digest-pinned stilldeadcode/radiance image) serving the OFFICIAL
+# Qwen/Qwen3.8-Flash-Next-FP8 at native block-FP8 precision from the
+# rad-convert container qwen4exp-fp8-native.rad, on BOTH R9700s (TP=2) as a
 # ROOT unit whose serve script drives `podman run` directly (the engine is
 # the image entrypoint; the image lives in dank's rootless podman storage).
-# 2026-10-15 payload swap from the in-house w4dn8 (payload on disk =
-# rollback).
 # 2026-10-05 cutover from FreeToken (pre-cutover tag
 # frank-archon-freetoken-pr587-20261005); before that, the tcclaviger vLLM
 # fork (tag frank-archon-vllm-shapeG-20261003). Same port and alias; the
@@ -1293,7 +1290,7 @@ deploy_llm_zealot() {
 # Gates: the image must exist under its digest ref in dank's rootless
 # storage (FRANK_ARCHON_IMAGE), the .rad container file must exist at the
 # env's size floor (FRANK_ARCHON_MODEL_FILE >= FRANK_ARCHON_RAD_MIN_MIB —
-# a truncated fetch is a guaranteed long-timeout boot), and the unit env
+# a truncated convert is a guaranteed long-timeout boot), and the unit env
 # must be complete. Per-file sha256 verification is the fetch script's job
 # at download time and rad-convert/rad-info's job at build time, never
 # re-hashed here.
@@ -1328,13 +1325,13 @@ deploy_llm_archon() {
     fi
     if [[ ! -f "$model_dir/$model_file" ]]; then
         echo "ERROR: .rad container missing: $model_dir/$model_file" >&2
-        echo "frank-archon: run scripts/download-frank-archon-iq4r.sh --fetch" >&2
+        echo "frank-archon: run scripts/build-frank-archon-rad.sh" >&2
         return 1
     fi
     mib=$(( $(stat -c %s "$model_dir/$model_file") / 1048576 ))
     if [[ "$mib" -lt "$rad_min" ]]; then
         echo "ERROR: .rad container too small: $model_dir/$model_file is ${mib} MiB, want >= $rad_min" >&2
-        echo "frank-archon: re-fetch it (scripts/download-frank-archon-iq4r.sh --fetch; delete the staged file first if its sha256 failed)" >&2
+        echo "frank-archon: rebuild it (scripts/build-frank-archon-rad.sh --force)" >&2
         return 1
     fi
 

scripts/download-frank-archon-iq4r.sh

@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-# download-frank-archon-iq4r.sh — payload fetch/verify for the frank-archon
-# swap to the PUBLISHER's 4-bit-codebook container:
-# StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe — the official
-# Qwen/Qwen3.8-Flash-Next bf16 checkpoint rad-converted by the engine's own
-# author into ONE .rad: routed experts as 4-bit codes into a 16-level
-# non-uniform codebook (Walsh–Hadamard rotation, GPTQ + coordinate-descent,
-# 10M-token calibration), ten bf16-protected experts per layer, int8 trunk +
-# lm_head, fp8 HC mixtures, the PLE n-gram table at fp8 fixed scale, the MTP
-# head, and the bf16 vision tower. File:
-# qwen3.8-next-flash-fp8-iq4r-moe.rad — 121,969,901,568 B (113.6 GiB,
-# 116,322 MiB), card KL 0.0789 all-tokens / top-1 92.85 % vs bf16.
-# Repo is UNGATED — no token needed (never put one on the command line).
-#
-#   bash scripts/download-frank-archon-iq4r.sh --fetch         resume/complete
-#   bash scripts/download-frank-archon-iq4r.sh                 verify only
-#
-# Fetch uses the vendored scripts/hfget.sh (curl+jq only): per-file size
-# checks against the Hub listing, `-C -` resume, disk-fit gate. The side
-# files (LICENSE, README, the w4nl recipe) stay in the staging dir as
-# provenance; the serve gate mounts ONLY /home/dank/models/rad, so the
-# verified .rad alone moves into it.
-#
-# Verify (default) is the AGENTS.md law in two parts: the file lands at the
-# final path with the Hub's EXACT byte count, and its sha256 equals the
-# Hub's LFS oid. A truncated transfer is a guaranteed long-timeout boot
-# without this gate.
-set -euo pipefail
-
-REPO="StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe"
-RAD_NAME="qwen3.8-next-flash-fp8-iq4r-moe.rad"
-STAGE="/home/dank/models/StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe"
-DEST="/home/dank/models/rad/$RAD_NAME"
-SIZE=121969901568
-SHA256="0af5e96244e80c21ac8edca1719dae49b8a201b94a2f3994c3e24026ceaa4d20"
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-
-mode="verify"
-[[ "${1:-}" == "--fetch" ]] && mode="fetch"
-
-if [[ "$mode" == "fetch" ]]; then
-    # HFGET_JOBS=4 is hfget's default (a few streams saturate the link).
-    bash "$SCRIPT_DIR/hfget.sh" "$REPO" "$STAGE" main
-
-    staged="$STAGE/$RAD_NAME"
-    if [[ ! -f "$staged" ]]; then
-        echo "FETCH FAILED: $staged absent after hfget" >&2
-        exit 1
-    fi
-    got=$(stat -c %s "$staged")
-    if [[ "$got" != "$SIZE" ]]; then
-        echo "FETCH FAILED: staged .rad is $got B, want $SIZE B" >&2
-        exit 1
-    fi
-    echo "staged .rad byte-exact ($SIZE B); hashing (one full read, minutes)"
-    got_sha=$(sha256sum "$staged" | cut -d' ' -f1)
-    if [[ "$got_sha" != "$SHA256" ]]; then
-        echo "FETCH FAILED: sha256 $got_sha, want $SHA256 — DELETE the staged" \
-             "file before re-fetching (curl -C - cannot repair a corrupt body)" >&2
-        exit 1
-    fi
-    mkdir -p "$(dirname "$DEST")"
-    mv "$staged" "$DEST"
-    echo "payload placed: $DEST"
-fi
-
-echo "verifying deployed payload: $DEST"
-if [[ ! -f "$DEST" ]]; then
-    echo "  BAD  payload absent: $DEST" >&2
-    exit 1
-fi
-got=$(stat -c %s "$DEST")
-if [[ "$got" != "$SIZE" ]]; then
-    echo "  BAD  payload is $got B, want $SIZE B" >&2
-    exit 1
-fi
-echo "byte-exact ($SIZE B); hashing (one full read, minutes)"
-got_sha=$(sha256sum "$DEST" | cut -d' ' -f1)
-if [[ "$got_sha" != "$SHA256" ]]; then
-    echo "  BAD  sha256 $got_sha, want $SHA256" >&2
-    exit 1
-fi
-echo "payload verified: $RAD_NAME, size and sha256 match the Hub LFS oid"

scripts/frank-archon.env

@@ -1,15 +1,7 @@
-# frank-archon.env — radiance (StillDeadcode, Apache-2.0) serving the
-# PUBLISHER's 4-bit-codebook container of the official Qwen/Qwen3.8-Flash-Next
-# (MODEL_FILE below, fetched by scripts/download-frank-archon-iq4r.sh) on
-# BOTH R9700s (TP=2), dankserver :7770.
-# 2026-10-15 PAYLOAD SWAP: the model moved from the in-house w4dn8 conversion
-# of the Swift1.5 finetune to the engine author's published container
-# qwen3.8-next-flash-fp8-iq4r-moe.rad (116,322 MiB, sha256-verified at fetch —
-# the w4dn8 measured 116,416 MiB, so this shape carries over with 94 MiB to
-# spare). NO argument changed: every number below is the 2026-10-13 shape,
-# kept verbatim. The swap commit is the rollback (the w4dn8 payload stays on
-# disk).
-
+# frank-archon.env — radiance (StillDeadcode, Apache-2.0) serving
+# ukisai/Swift1.5-Qwen3.8-Flash-Next converted to GPTQ w4 (MODEL_FILE below,
+# built by scripts/convert-swift15-w4dn8.sh) on BOTH R9700s (TP=2),
+# dankserver :7770.
 #
 # SHAPE (2026-10-13): THREE decode slots x 200,000 tokens, fp8 (quantized) KV,
 # with the per-card budget spent on resident experts: 25,600 MiB of slab +
@@ -21,11 +13,9 @@
 # +25 % at the full window) while KV beyond the contract buys nothing.
 # Consequence, deliberate: a FOURTH full-height conversation does not fit this
 # pair, and the engine refuses it — it never truncates. See the KV block for the
-# arithmetic and the measured dtype law. The w4dn8 payload is the swap
-# rollback and keeps its trio under the w4dn8 runbook; the fp8-native payload
-# that came before it was DELETED from disk 2026-10-15 (Frank's call, to free
-# the volume for this download — rebuildable via the fetch + build scripts
-# named in the fp8-native runbook).
+# arithmetic and the measured dtype law. The fp8-native payload this file was
+# written for is the rollback target and keeps its own trio under the
+# fp8-native runbook.
 #
 # 2026-10-05 cutover from FreeToken (PR #587 ROCm, one card, experts in
 # pinned host RAM; git tag frank-archon-freetoken-pr587-20261005 is the
@@ -40,30 +30,20 @@
 # (`X.weight_scale_inv` is the scale plane — checkpoint.h). The PLE n-gram
 # table (51B params, 47.7 GiB) is served from pinned host RAM via io_uring
 # reads — Frank's call: "Native FP8. Experts from ram. Pin the PLE to ram."
-# THE 4-bit-codebook publisher shape is the DEPLOYED payload since
-# 2026-10-15. The card's own run line (--host-pool-mib 12288,
-# --expert-vs-cache-ratio 0.82, seqs 8, spec 3) is the publisher's
-# suggestion on 32 GB cards; this file's shape is the fleet's measured one.
+# The 4-bit-codebook publisher shape (qwen3.8-next-flash-fp8-iq4r-moe.rad,
+# --host-pool-mib 12288) remains the documented fallback if the native
+# container proves unbootable.
 #
-# PAYLOAD: /home/dank/models/rad/qwen3.8-next-flash-fp8-iq4r-moe.rad — the
-# official Qwen3.8-Flash-Next bf16 checkpoint rad-converted by the engine's
-# own author (recipe qwen4exp-w4nl64-i8-hc8m: experts as 4-bit codes into a
-# 16-level non-uniform codebook after a 128-point Walsh–Hadamard rotation,
-# GPTQ + 3 coordinate-descent sweeps on a 10M-token calibration, ten
-# bf16-protected experts per layer, int8 W8A8 trunk + lm_head, fp8 HC
-# mixtures, PLE n-gram fp8 fixed-scale, MTP head, bf16 vision tower; card KL
-# 0.0789 all-tokens / top-1 92.85 % vs bf16). Fetched byte-exact + sha256 by
-# scripts/download-frank-archon-iq4r.sh; the recipe/LICENSE stay in the
-# staging dir beside it as provenance. ROLLBACK: revert the swap commit — the
-# in-house qwen4exp-swift15-w4dn8-i8-hc8m.rad (scripts/convert-swift15-w4dn8.sh,
-# KLD-gated) stays on disk. Behind it, the fp8-native
-# qwen4exp-fp8-native.rad was DELETED from disk 2026-10-15 (Frank's call,
-# one-time rm, to free the volume for this payload); rebuild =
-# scripts/download-frank-archon.sh + scripts/build-frank-archon-rad.sh — a
-# NO-RECIPE rad-convert copy of the official 131-shard checkpoint under the
-# descriptor law (no shipped plugin claims (qwen4exp, "fp8"), so the staging
-# config.json drops quantization_config; per-weight encodings are data, not
-# the descriptor).
+# PAYLOAD: /home/dank/models/rad/qwen4exp-fp8-native.rad — a rad-convert
+# NO-RECIPE pure copy of the official 131-shard checkpoint (every weight
+# keeps its block-FP8 encoding; ~161 GiB). The convert runs against a
+# staging dir whose config.json drops `quantization_config`: the descriptor
+# string is only the plugin SELECTION key (spec §2.4 — exact match, no
+# fallback), and no shipped plugin claims (qwen4exp, "fp8"); the shipped
+# qwen4exp plugin claims (qwen4exp, "") which is what recipe-built
+# containers carry. Per-weight encodings are data, not the descriptor —
+# removing the key changes nothing about what the weights hold. Built by
+# scripts/build-frank-archon-rad.sh (staging + convert + rad-info).
 #
 # SERVING FACTS (docs/GUIDE.md, docs/DOCKER.md, compose/flashnext.yaml):
 # - The HTTP listener binds AFTER the full load (main.cpp: engine.start()
@@ -79,12 +59,12 @@
 #   enable_thinking, preserve_thinking (core/server/oai.cpp:194-205) —
 #   models.yml's extraBody set is fully inside it. Unknown params are
 #   refused (400), which is why nothing unverified rides the wire.
-# - MTP: the .rad carries the model's mtp.* head (the publisher's recipe
-#   names the mtp.fc_hidden/fc_embedding/draft_head rules; card default
-#   depth 3). Served at the depth named by FRANK_ARCHON_SPEC_TOKENS below —
-#   the depth this shape's decode ladder was measured at.
+# - MTP: the official checkpoint carries the mtp.* head (3,101 tensors,
+#   mtp_num_hidden_layers=1) and the plugin probes draft depth 3 — the
+#   publisher's throughput peak for this model. Stated explicitly with
+#   --num-speculative-tokens 3.
 # - The fused TP all-reduce is declared over max-num-seqs x
-#   (1 + --num-speculative-tokens) rows; 3 x (1+2) = 9 rows, under the 25-row
+#   (1 + --num-speculative-tokens) rows; 2 x 3 = 6 rows, under the 25-row
 #   exactness bound of the wht6 wire.
 # Engine pin: Codeberg tag v1.0.13 (commit 53282fa), Docker Hub tag 1.0.13,
 # index digest below. REJECTED UPGRADE: 1.2.0 (sha256:665775ed1d90de6dbb
@@ -108,7 +88,7 @@ FRANK_ARCHON_IMAGE=stilldeadcode/radiance@sha256:4c3f484564bb2872784e46b0a59cbd7
 # .rad files; the raw HF download and its staging dir live beside it and
 # are never mounted.
 FRANK_ARCHON_MODEL_DIR=/home/dank/models/rad
-FRANK_ARCHON_MODEL_FILE=qwen3.8-next-flash-fp8-iq4r-moe.rad
+FRANK_ARCHON_MODEL_FILE=qwen4exp-swift15-w4dn8-i8-hc8m.rad
 FRANK_ARCHON_STATE_DIR=/home/dank/radiance-state
 # The state dir's tune/ subdirectory holds rad-tune's kernel-selection
 # cache (the engine's selector reads $RADIANCE_HOME/tune/<machine>.tune
@@ -262,10 +242,9 @@ FRANK_ARCHON_VRAM_KV_MIB=5120
 # ledgers' `kv tier transfer` lines), so the host tier below parks twice as
 # many conversations as it did at bf16 — no re-size needed to park three slots.
 FRANK_ARCHON_KV_DTYPE=fp8
-# Spec decode: the checkpoint's own MTP head, served at depth 2 — the
-# publisher's card ships depth 3 as its peak; this fleet's ladder was
-# measured at 2 and the swap keeps every argument, so 2 stays (rows
-# 3 x (1+2) = 9, inside the wht6 25-row exactness bound).
+# Spec decode: the checkpoint's own MTP head at the publisher's depth-3
+# operating point (probe() returns 3 when mtp_num_hidden_layers > 0; the
+# flag states it so the ledger records the intent).
 FRANK_ARCHON_SPEC_TOKENS=2
 FRANK_ARCHON_MAX_BATCHED_TOKENS=2048
 # Prefix cache tiers (publisher pattern). The host tier is sized in ENTRIES,
@@ -299,8 +278,9 @@ FRANK_ARCHON_TTM_TARGET_MIB=204800
 # multi-flag values as one string; the serve script expands it unquoted on
 # purpose.
 FRANK_ARCHON_EXTRA_ARGS=
-# The .rad's minimum size in MiB (deployer gate; a truncated fetch is a
-# guaranteed long-timeout boot instead of a fast failure). The deployed
-# publisher container measures 116,322 MiB (121,969,901,568 B); the
-# in-house w4dn8 rollback measured 116,416 MiB. Floor sits just under both.
+# The .rad's minimum size in MiB (deployer gate; a truncated convert is a
+# guaranteed long-timeout boot instead of a fast failure). The converted
+# container measured 177,109 MiB (1,857,127,997,440 B = 173.0 GiB; the
+# plan-only estimate 172.76 GiB covers the data planes but not the metadata
+# tail) - floor sits just under the payload.
 FRANK_ARCHON_RAD_MIN_MIB=110000

scripts/frank-archon.service

@@ -1,9 +1,9 @@
 # frank-archon.service — radiance (StillDeadcode, Apache-2.0) endpoint
-# (the publisher's 4-bit-codebook container of the official
-# Qwen/Qwen3.8-Flash-Next, qwen3.8-next-flash-fp8-iq4r-moe.rad, fetched by
-# scripts/download-frank-archon-iq4r.sh) on BOTH R9700s (TP=2, wht6 wire),
-# dankserver :7770. 2026-10-15 payload swap from the in-house w4dn8 (the
-# swap commit is the revert; its .rad stays on disk).
+# (OFFICIAL Qwen/Qwen3.8-Flash-Next-FP8 at NATIVE block-FP8 precision, the
+# rad-convert container qwen4exp-fp8-native.rad) on BOTH R9700s (TP=2,
+# wht6 wire), dankserver :7770. 2026-10-05 cutover from FreeToken (git tag
+# frank-archon-freetoken-pr587-20261005 is the pre-cutover state; the
+# retired unit/env/serve trio and Dockerfile are in that tag).
 #
 # Same port, same served alias, same container identity as the unit name;
 # the harness models.yml id is unchanged. The serve script drives
@@ -19,7 +19,7 @@
 # unit grants LimitMEMLOCK=infinity to the dank process via PID1; the
 # engine still runs out of dank's rootless podman storage.
 [Unit]
-Description=frank-archon — radiance Qwen3.8-Flash-Next (publisher iq4r) on 2x R9700 TP=2
+Description=frank-archon — radiance Qwen3.8-Flash-Next-FP8 (native) on 2x R9700 TP=2
 After=network-online.target
 Wants=network-online.target
 # Never let the start-rate limiter give up after a crash loop (a failed LLM

scripts/serve-frank-archon.sh

@@ -1,13 +1,11 @@
 #!/usr/bin/env bash
 # serve-frank-archon.sh — frank-archon endpoint: radiance (StillDeadcode,
-# Apache-2.0) serving the PUBLISHER's 4-bit-codebook container of the
-# official Qwen/Qwen3.8-Flash-Next (the engine author's own rad-convert of
-# the bf16 checkpoint: qwen3.8-next-flash-fp8-iq4r-moe.rad, fetched by
-# scripts/download-frank-archon-iq4r.sh) on BOTH R9700s (TP=2, wht6 wire),
-# dankserver :7770. 2026-10-15 payload swap from the in-house w4dn8 of the
-# Swift1.5 finetune (payload on disk = rollback; the swap commit is the
-# revert); 2026-10-05 radiance cutover from FreeToken (git tag
-# frank-archon-freetoken-pr587-20261005 is the pre-radiance state).
+# Apache-2.0) serving the OFFICIAL Qwen/Qwen3.8-Flash-Next-FP8 checkpoint at
+# NATIVE block-FP8 precision from a rad-convert container
+# (/home/dank/models/rad/qwen4exp-fp8-native.rad), on BOTH R9700s (TP=2,
+# wht6 wire), dankserver :7770. 2026-10-05 cutover from FreeToken (PR #587,
+# one card; git tag frank-archon-freetoken-pr587-20261005 is the
+# pre-cutover state).
 #
 # The run line below IS the engine argv: the image's entrypoint is the
 # engine and its tools sit beside it on PATH. Unlike every predecessor

serverAppConfigs-docs/Infrastructure/Authentik.md

@@ -452,8 +452,7 @@ access is decided entirely by GROUP MEMBERSHIP consumed downstream —
 - `Non-Admin Users` = the plain-user marker group (precedents: qa-e2e, and
   every human account).
 - **The human-user template** (ridley, kassie, alex, artem, kirby, ry, nic,
-  debo, freya, mitch, eric — mitch (pk 22) and eric (pk 23) created
-  2026-10-15, kirby/ry/nic/debo/freya (pk 17–21) created 2026-10-09, kassie
+  debo, freya — kirby/ry/nic/debo/freya (pk 17–21) created 2026-10-09, kassie
   and alex created 2026-10-08, artem (pk 16) created 2026-10-07): `username` +
   `<user>@franksdank.cloud` + display name +
   `is_active=True` + the password set via `set_password`, membership in

serverAppConfigs-docs/LLM/Model Swap and Rollback.md

@@ -3,7 +3,7 @@ type: reference
 title: Model Swap and Rollback
 description: The full model-swap discipline for the LLM fleet — fit preflight, fetch and payload verification, runtime build/flag checks, git-only config, live validation, systemd handoff, close-out, the three-pin revert law, and research-verification discipline.
 tags: [models, swap, gguf, huggingface, rollback, deployment, verification]
-timestamp: 2026-10-05T00:00:00-07:00
+timestamp: 2026-10-15T00:00:00-07:00
 ---
 
 # Model Swap and Rollback
@@ -12,6 +12,15 @@ Applies to every endpoint swap on the fleet (frank-zealot / frank-dragoon /
 frank-archon). Repo law: all config flows through git; the live models are
 host state under `/home/dank/models/<name>/`.
 
+**No bench step (law, 2026-10-15).** A model swap NEVER schedules a bench
+window. Performance evidence comes from the deployed service itself: the
+engine's boot ledger, per-request timings (`/completion` `timings`,
+`Server-Timing`), and one real request per harness role (§6, §8). A
+deliberate standalone bench (flag A/B, shape sweep) is OUT OF PROCEDURE —
+a separate operation that follows the AGENTS.md Benchmarking Policy
+(stop & mask). The env-file hook (§5) stays so those out-of-procedure
+arms remain possible.
+
 ## 1. Fit preflight — never deploy a swap without confirming it FITS
 
 1. Get the checkpoint's on-disk/weight size AND precision from the HF card
@@ -144,7 +153,8 @@ recoverable, drift is not.
 ## 8. Close-out (mandatory)
 
 1. Docs: active runbook updated (build recipe, profile, validation numbers
-   incl. real-workload prefill/decode); superseded runbook gets a RETIRED
+   incl. real-workload prefill/decode measured on the LIVE service — no
+   bench window); superseded runbook gets a RETIRED
    banner and stays as the rollback record; `LLM/index.md` mermaid + active
    list; AGENTS.md fleet table + runtime section + history chain; work-log
    entry in `serverAppConfigs-docs/log.md`.
@@ -277,5 +287,6 @@ predecessor "stopped" (the port race above).
 - [[GGUF Compatibility]] — which runtime can load a payload at all
 - [[Llama Cpp Serving Sizing]] — pricing the shape once it loads
 - [[RDNA4 MoE Expert Offload VRAM Budget]] — vLLM-side fit arithmetic
-- [[LLM Bench Windows and Measurement]] — measuring the new deployment
+- [[LLM Bench Windows and Measurement]] — out-of-procedure bench windows
+  only; a new deployment is measured by §6 live validation, not by a bench
 - [[dankserver-qwen38-fp8-expert-offload-tuning]] — the current endpoint

serverAppConfigs-docs/LLM/frank-archon-radiance-qwen38-iq4r.md

@@ -1,144 +0,0 @@
-# frank-archon — Radiance (StillDeadcode), publisher Qwen3.8-Flash-Next iq4r, 2× R9700 TP=2
-
-**Status: LIVE — deployed 2026-10-15.** · **Host:** Dankserver (192.168.0.235) · **Port:** 7770 · **GPU:** 2× Radeon AI PRO R9700 (gfx1201), TP=2
-
-The in-house w4dn8 conversion of the Swift1.5 finetune
-([[frank-archon-radiance-swift15-w4dn8]]) is replaced by the **engine
-author's published container**:
-[`StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe`](https://huggingface.co/StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe)
-— the official `Qwen/Qwen3.8-Flash-Next` bf16 checkpoint rad-converted by
-StillDeadcode. Same port, alias, container name, systemd unit, digest-pinned
-engine pin **1.0.13** (`stilldeadcode/radiance@sha256:4c3f484564…`), and
-**every serving argument carried verbatim** from the 2026-10-13 shape.
-Rollback: revert the swap commit — the w4dn8 `.rad` stays on disk.
-
-## The payload
-
-`qwen3.8-next-flash-fp8-iq4r-moe.rad` — **121,969,901,568 B = 116,322 MiB**,
-sha256 `0af5e96244e80c21ac8edca1719dae49b8a201b94a2f3994c3e24026ceaa4d20`
-(Hub LFS oid), fetched byte-exact by `scripts/download-frank-archon-iq4r.sh`
-(hfget resume + size + sha256; staging dir
-`/home/dank/models/StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe/` keeps the
-card, LICENSE, and recipe `qwen4exp-w4nl64-i8-hc8m` as provenance).
-
-| Plane | Encoding (publisher recipe `qwen4exp-w4nl64-i8-hc8m`) |
-| --- | --- |
-| Routed experts | 4-bit codes into a 16-level **non-uniform** codebook after a 128-point Walsh–Hadamard rotation, one E4M3 scale per 64 weights; codes by GPTQ (10M-token calibration, per-expert down-proj Hessians) + 3 coordinate-descent sweeps |
-| Protected experts | **ten** per layer, whole-expert bf16 (down-projection energy) |
-| Trunk + lm_head | int8 W8A8, scale per 128 columns searched; HC mixtures E4M3 |
-| PLE n-gram | fp8 fixed-scale, in-container (served `--ngram-placement ram`, same 47.7 GiB pin law) |
-| Speculator | the model's own MTP head (card default depth 3; served at 2) |
-| Vision | bf16 vision tower, in-container |
-
-**Base model: the OFFICIAL (censored) Qwen3.8-Flash-Next** — the fleet's
-only frontier model at base alignment; the abliterated family lives on
-frank-dragoon. Card quality: full-vocab teacher-forced KL vs bf16 over
-~75K positions — mean 0.0789 all-tokens / 0.0239 assistant turns, top-1
-agreement 92.85 %.
-
-## Why this swap
-
-- **Publisher-graded precision**: the w4nl codebook + coordinate-descent
-  refinement is the engine author's own quality ceiling for this
-  checkpoint; the card's KL ladder (p99 1.65, p99.9 5.33) is published and
-  reproducible, where our w4dn8 gate measured against our own reference.
-- **Formal parity**: the served file is the one the engine author supports
-  — decode/prefill behavior on 1.0.13 is their tested path (the card's run
-  line speaks the 1.0.13-era flags; the `--vram-weights-mib`/`--vram-kv-mib`
-  pair we ship is accepted by pin 1.0.13 per the 2026-10-06 A/B, so the
-  shape needed no translation).
-- **Cost**: the Swift1.5 finetune's refusal-bending behavior leaves this
-  endpoint (it returns to the official base alignment); the 4-slot/200k
-  economics and all shape laws carry over unchanged.
-
-## Shape (unchanged from 2026-10-13)
-
-All of it, verbatim — the payload moved 116,416 → 116,322 MiB, inside the
-same budget:
-
-- `--tp 2 --tp-wire wht6`, `--max-num-seqs 3`, `--max-model-len 200000`
-  (capacity contract 3 × 200,000), `--kv-cache-dtype fp8`
-- `--placement expert_tiered --host-pool-mib 44928` + explicit
-  `--vram-weights-mib 25600 --vram-kv-mib 5120` (30,720 of the engine's
-  30,969 MiB ceiling; pool = contract + 1.3 %)
-- `--num-speculative-tokens 2`, `--max-num-batched-tokens 2048`
-  (MNBT 2048 law), prefix cache 8 GiB host + 64 GiB disk,
-  `--ngram-placement ram`, froggeric v22.5 `--override-chat-template`
-- TTM preflight floor 150,000 / target 204,800 MiB; pinned ledger
-  2 × 44 GiB pool + 47.7 GiB PLE + 8 GiB prefix ≈ 147 GiB (see
-  [[frank-archon-radiance-swift15-w4dn8]] for the ledger arithmetic and
-  the KV dtype law — both are engine properties, payload-independent)
-
-The publisher's card run line (`--host-pool-mib 12288`,
-`--expert-vs-cache-ratio 0.82`, seqs 8, spec 3, ~32 GB host RAM) is their
-shape on stock 32 GB cards; the fleet ships its own measured shape against
-the same file.
-
-## Cutover record — 2026-10-15
-
-1. `rm` (Frank's one-time authorization): the raw
-   `ukisai/Swift1.5-Qwen3.8-Flash-Next` BF16 checkpoint (336 GiB, spent
-   conversion source) and `qwen4exp-fp8-native.rad` (173 GiB, two eras
-   back) left `/home/dank/models` — 150 GB free → 658 GB free. The fp8-native
-   payload is **no longer on disk**: rebuild =
-   `scripts/download-frank-archon.sh` + `scripts/build-frank-archon-rad.sh`.
-2. Fetch: `scripts/download-frank-archon-iq4r.sh --fetch` as transient unit
-   `iq4r-fetch` (detached-job protocol; log
-   `/home/dank/logs/iq4r-fetch.log`, rc sentinel `…rc`).
-3. Deploy: `scripts/deploy.sh dankserver --service frank-archon` — launched
-   detached (the swap restarts the very endpoint the operator session runs
-   on; the harness timeout catches the session on return).
-4. **Boot ledger (2026-10-15, first boot, pin 1.0.13 — the w4nl codebook
-   loaded, no pin bump)**: `kv_attn` fp8 page **26.00 KiB** at **607,740
-   tokens** (151,935 blocks = 3.77 GiB) — byte-identical to the w4dn8 boot,
-   the sizing law carries; `kv_qsa_bkey` 3.25 KiB at the same token count;
-   `kv_gdn_state` 54 MiB × 6 slots, `kv_gdn_conv` 1.76 MiB × 3,
-   `kv_qsa_tail` 19.5 KiB × 6; pool **5.00 GiB**, prefix checkpoints 8 ×
-   56 MiB; the sizing line reads `kv cache 5.00 GiB … backs 3 sequences all
-   at 200000 tokens at once, which is the worst case`; samplers print **9
-   rows** per rank (3 × (1+2), inside the wht6 25-row bound);
-   `speculation: 'mtp' drafts 2 token(s) a step in 2 serial pass(es)` +
-   prompt-lookup fallback; slab **17,610 (rank0) / 17,658 (rank1) slots**
-   (64 shadow) — above the w4dn8 record of 17,548 (ten bf16-protected
-   experts per layer replace twenty-four, so more of the 4-bit table
-   resides), pinned pool 7,532/7,484 slots; KV lending **4.22 GiB**
-   (3,571/3,568 mover slots); arenas 896.02/988.17 MiB charged before the
-   pair split; prefix cache RECOVERED 900,176 blocks + 126 checkpoint slots
-   from the 64 GiB disk tier (same arch + tokenizer as w4dn8 — the tier
-   survived the payload swap); froggeric template 28,234 B; vision encoder
-   live (≤ 4,194,304 px, 16,384 patches/pass). Health gate passed in ~100 s
-   (radiance binds the port after the full load).
-5. **Vision probe (2026-10-15)**: 300 px solid-red PNG via `image_url` —
-   reasoning stream: "a solid fill of a deep, saturated red hue". Content
-   came back EMPTY at `max_tokens 64`: the thinking budget consumed all 64
-   (`reasoning_tokens: 64`, finish `length`) — fleet law, probe thinking
-   models with ≥ a few hundred tokens.
-6. **e2e gate**: deploy exited DEPLOY INCOMPLETE — 30/33 Playwright green,
-   3 red (`12-crawl`, `13-sso` search SSO, `16-marreta`) on DANKCLAW
-   surfaces (vhosts intermittently returned `ERR_CONNECTION_RESET` from the
-   workstation); frank-archon's own health gate passed. The swap touched no
-   dankclaw runtime file (only homepage services.json text). Census of the
-   Caddy/auth stack pending; see `log.md`.
-7. **Post-boot measurements (pending)**: decode ladder (99.0 t/s single
-   @ 43.5k, 93.3 @ 197k, 3-way 113.9/43.3/10.9 = 18.4 t/s aggregate —
-   these are the **w4dn8** numbers, the record to beat, not this file's),
-   slab-limited prefill (22208/3,397 → 25600/3,584 t/s A-cold 43.5k), draft
-   acceptance, and `scripts/probe-frank-archon-kv.py` leg D.
-
-## Rollback
-
-Revert the swap commit (`scripts/frank-archon.env` MODEL_FILE line) +
-redeploy: `/home/dank/models/rad/qwen4exp-swift15-w4dn8-i8-hc8m.rad`
-(116,416 MiB) stays on disk, KLD-gated, same shape. The fp8-native era is
-rebuild-only (see the cutover record). The w4dn8 runbook keeps every shape
-law, the KV dtype table, the slab ladder, and the tuning levers:
-[[frank-archon-radiance-swift15-w4dn8]].
-
-## Related
-
-- [[frank-archon-radiance-swift15-w4dn8]] — the replaced payload and the
-  full shape-law library (slab slope, KV dtype arithmetic, TTM law)
-- [[frank-archon-radiance-qwen38-native-fp8]] — the fp8-native era
-  (rebuild-only now; owns the descriptor-selection law)
-- [[Dual-R9700-Cooperation]] — the board swap that made TP=2 legal here
-- [[deployment]] — the service-scoped deploy this cutover rides

serverAppConfigs-docs/LLM/index.md

@@ -3,17 +3,14 @@
 **Dankserver runs the radiance engine (StillDeadcode) on frank-archon**
 (digest-pinned `stilldeadcode/radiance` image, engine as entrypoint,
 driving `podman run` directly, root systemd unit, :7770):
-the **publisher's** 4-bit-codebook container of the official
-`Qwen/Qwen3.8-Flash-Next` (`qwen3.8-next-flash-fp8-iq4r-moe.rad`, 116,322 MiB,
-sha256-verified at fetch — w4nl codebook experts + int8 trunk, PLE n-gram,
-MTP head and vision tower in-container), on BOTH R9700s
+`ukisai/Swift1.5-Qwen3.8-Flash-Next` converted to **GPTQ w4**
+(`qwen4exp-swift15-w4dn8-i8-hc8m.rad`, 116,416 MiB, KLD-gated), on BOTH R9700s
 TP=2 (`--tp-wire wht6`), experts in a 44 GiB/rank pinned host pool + VRAM cache
 (explicit `--vram-weights-mib 25600 --vram-kv-mib 5120` = 30,720 of the
 30,969 MiB the engine's own budget table makes claimable), the 47.7 GiB PLE
 table pinned to host RAM, **fp8 KV at 3 × 200,000**, MTP spec decode depth 2,
-froggeric v22.5 template. Rollback: the in-house Swift1.5 w4dn8 `.rad` (on
-disk); tags frank-archon-freetoken-pr587-20261005 and
-frank-archon-vllm-shapeG-20261003),
+froggeric v22.5 template. Rollback tags frank-archon-freetoken-pr587-20261005
+and frank-archon-vllm-shapeG-20261003),
 and Dankclaw runs two endpoints — **halogen-flash-server 0.16.2
 (frank-dragoon, port 7770: ghcr.io/peonist-ai/halogen-flash-server @ pinned
 digest serving the Quat3rnion ABLITERATED Swift1.5 finetune of
@@ -40,10 +37,10 @@ graph LR
 gfx1201, 32 GiB each]
         B2[radiance StillDeadcode, digest-pinned image
 podman run, frank-archon, port 7770]
-        C[Publisher qwen3.8-next-flash-fp8-iq4r-moe .rad
+        C[Swift1.5-Qwen3.8-Flash-Next GPTQ w4 .rad
 2x R9700 TP=2 wht6, experts 44 GiB/rank pinned pool + VRAM,
 PLE 47.7 GiB pinned RAM, fp8 KV 7.32 KiB/tok, MTP depth 2,
-3 x 200000, froggeric v22.5]
+4 x 200000, froggeric v22.5]
     end
 
     subgraph Dankclaw[AMD Strix Halo - Ubuntu 26.04]
@@ -156,22 +153,7 @@ frank-zealot, port 7771]
   target; payload on disk; owns the measured boot-pair table)**: the same
   runtime and the same 2 x 200,704 + f16 KV shape one quant rung lower —
   104.8 tok/s, 3,571 MiB true free
-- [[frank-archon-radiance-qwen38-iq4r]] — **ACTIVE since 2026-10-15**:
-  the engine author's published container of the OFFICIAL (base-alignment)
-  Qwen3.8-Flash-Next — `qwen3.8-next-flash-fp8-iq4r-moe.rad`, 116,322 MiB,
-  Hub-sha256-verified at fetch: 4-bit codes into a 16-level non-uniform
-  codebook after a Walsh–Hadamard rotation (GPTQ + 3 coordinate-descent
-  sweeps, 10M-token calibration), ten bf16-protected experts per layer,
-  int8 trunk/lm_head, fp8 HC + PLE, MTP head, bf16 vision tower; card KL
-  0.0789 all-tokens / top-1 92.85 % vs bf16. **MODEL_FILE is the only line
-  that moved** — the 2026-10-13 shape (25600/5120 pair, 44928 pool, fp8 KV
-  3 × 200,000, MTP 2, wht6, MNBT 2048, froggeric v22.5) carries verbatim.
-  Rollback: revert the swap commit (w4dn8 `.rad` stays on disk). The
-  fp8-native `.rad` and the raw Swift1.5 BF16 source were DELETED from
-  dankserver 2026-10-15 (Frank's one-time rm, volume for this payload;
-  rebuild via the fetch + build scripts named in the fp8-native runbook)
-- [[frank-archon-radiance-swift15-w4dn8]] — **RETIRED 2026-10-08 → 10-15
-  (superseded by the publisher iq4r swap; payload on disk as the rollback)**:
+- [[frank-archon-radiance-swift15-w4dn8]] — **ACTIVE since 2026-10-08**:
   Swift1.5 Qwen3.8-Flash-Next BF16 → GPTQ-calibrated W4Dn8 `.rad` on radiance
   1.0.13 (recipe + 10M-token calibration + KLD gate vs the BF16 container);
   the FP8-native payload remains the rollback. **2026-10-13: fp8 KV, and the

serverAppConfigs-docs/index.md

@@ -182,20 +182,12 @@ The LLM inference fleet on the two hosts. Full index:
 ### Deployment and Topology
 
 - [[deployment]] — unified deploy and update process for both servers
-- [[frank-archon-radiance-qwen38-iq4r]] — **ACTIVE frank-archon runbook
-  (2026-10-15)**: the PUBLISHER's container of the official
-  Qwen3.8-Flash-Next (`qwen3.8-next-flash-fp8-iq4r-moe.rad`, 116,322 MiB,
-  w4nl 4-bit-codebook experts + int8 trunk, Hub-sha256-verified at fetch)
-  swapped in as a MODEL_FILE-only change — the 2026-10-13 shape (slab
-  25600 / fp8-KV 5120, 3 × 200,000, host pool 44,928, MTP depth 2) carries
-  verbatim; rollback = revert the swap commit (the w4dn8 `.rad` stays on
-  disk; the fp8-native `.rad` was deleted 2026-10-15, rebuildable)
-- [[frank-archon-radiance-swift15-w4dn8]] — RETIRED 2026-10-08 → 10-15 frank-archon runbook:
+- [[frank-archon-radiance-swift15-w4dn8]] — STAGED frank-archon runbook:
   Swift1.5 Qwen3.8-Flash-Next BF16 → GPTQ-calibrated W4Dn8 `.rad` (radiance
   1.0.13), gated on KLD ≤ 0.03 vs the BF16 container and decode ≥ 30.8 t/s;
   activates by flipping `MODEL_FILE` in `scripts/frank-archon.env`, rollback
   = revert that line (the FP8-native `.rad` stays on disk)
-- [[frank-archon-radiance-qwen38-native-fp8]] — the RETIRED 2026-10-05 → 10-08 frank-archon
+- [[frank-archon-radiance-qwen38-native-fp8]] — the ACTIVE frank-archon
   runbook (2026-10-05): the StillDeadcode radiance engine (digest-pinned
   287 MiB image, libr4d gfx1201 kernels) serving the OFFICIAL
   `Qwen/Qwen3.8-Flash-Next-FP8` at native block-FP8 (no-recipe convert

serverAppConfigs-docs/log.md

@@ -1745,57 +1745,22 @@ every restart since the cutover.
   [[frank-archon-radiance-swift15-w4dn8]], and the LLM index entry corrected
   (the w4dn8 entry said STAGED, the fp8-native one said ACTIVE).
 
-## 2026-10-15 — frank-archon: publisher iq4r payload swap (MODEL_FILE-only)
 
-- Ask: replace the served model with
-  `StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe` — the engine author's
-  published rad-convert of the OFFICIAL Qwen3.8-Flash-Next (w4nl codebook
-  experts, ten bf16-protected/layer, int8 trunk, PLE/MTP/vision in-container,
-  card KL 0.0789 / top-1 92.85 %) — **no other argument changes**, mindful
-  the operator session runs on the endpoint being swapped.
-- Disk: Frank authorized one `rm` — the spent Swift1.5 BF16 source (336 GiB)
-  and the two-era-old `qwen4exp-fp8-native.rad` (173 GiB) left
-  `/home/dank/models`; 150 GB → 658 GB free. fp8-native is now rebuild-only
-  (fetch + build scripts); rollback for THIS swap is the w4dn8 `.rad`
-  (on disk) by reverting the commit.
-- Fetch: new `scripts/download-frank-archon-iq4r.sh` (hfget, exact bytes
-  121,969,901,568 + Hub LFS sha256, `--verify-only` default) as transient
-  unit `iq4r-fetch`; verified, staged sidecar files kept as provenance.
-- Shape carried VERBATIM (25600/5120 pair, 44928 pool, fp8 KV 3 × 200,000,
-  MTP 2, wht6, MNBT 2048, froggeric v22.5). Tests re-keyed
-  (`frank_archon_unit.bats` pins the new payload id + sha256, keeps the
-  w4dn8 rollback provenance), homepage card + trio lore + both indexes
-  updated; new runbook [[frank-archon-radiance-qwen38-iq4r]]. Commits
-  `6dcf4a5` (swap) + `f44c398` + `c5ac072` (docs), full bats green.
-- Cutover self-severed by design (detached `deploy.sh` survived the session
-  death when frank-archon restarted); engine healthy in ~100 s. First-boot
-  ledger: w4nl loads on pin 1.0.13 (no pin bump); kv_attn 26.00 KiB fp8 @
-  607,740 tokens (identical geometry); slab 17,610/17,658 slots per rank
-  (> w4dn8's 17,548 — fewer bf16-protected experts pack more 4-bit table);
-  sampler 9 rows; MTP 2/step; prefix tier RECOVERED 900,176 blocks across
-  the swap (arch+tokenizer unchanged). Vision probe green (reasoning read
-  the solid-red PNG; the 64-token budget went all to thinking — fleet law).
-- e2e gate went red on three dankclaw specs — NOT the swap: dankclaw rebooted
-  01:41 and the gluetun boot-race dependency-failed `searxng`, `marreta`,
-  and `marreta-browser` (jobs consumed while gluetun's start job retried;
-  `Restart=always` never armed because the services never ran). Cascade
-  restarted; skill codified (`gluetun-dependent-boot-race-recovery`).
-  Gate rerunning against the repaired fleet; frank-archon's own health gate
-  passed every deploy. Open: decode/prefill ladders vs the w4dn8 record,
-  probe leg D — scheduled probe window.
+## 2026-10-15 — governance: bench removed from the model-change procedure
 
-## 2026-10-15 — authentik: two more human accounts (Dankclaw)
-- **Live — mitch (pk 22) and eric (pk 23) provisioned via `ak shell` ORM, no
-  repo objects.** Each `<user>@franksdank.cloud` in the human-user template
-  shape (`is_active=True`, display name, password via `set_password` on stdin
-  only — never argv, so nothing lands in `ps`), groups `Non-Admin Users` +
-  `jellyfin_users` + `openwebui_users`; no admin group granted. Verified
-  through the exact PasswordStage code path (`authenticate()` accepted each
-  password and rejected a wrong one), `app_entitlements(open-webui)` →
-  `Open WebUI Users` for both (identical to the ridley precedent), and
-  `is_superuser=False` / `path=users`. Zero `proxysession` rows for either —
-  groups were set before any login, so no claim purge was due. Downstream:
-  Jellyfin visibility rides the LDAP outpost cache (expect lag); OpenWebUI
-  mints their accounts as role `pending` on first login.
-- `/serverAppConfigs-docs/Infrastructure/Authentik.md` — human-user template
-  census extended with pk 22–23.
+- Frank's call: a model swap never carries a bench window. Codified as law:
+  - `AGENTS.md` Benchmarking Policy opens with "Benchmarking is NOT part of
+    the model-swap procedure"; swap verification is the live service (boot
+    ledger, `timings`/`Server-Timing`, one real request per harness role).
+    The stop-and-mask rule stays for DELIBERATE bench windows (flag A/Bs,
+    shape sweeps) — it is host protection (2026-09-16 hard-down precedent),
+    not a swap step. Summary-table row updated to match.
+  - [[Model Swap and Rollback]]: "No bench step (law, 2026-10-15)" up top;
+    §8 close-out numbers must be measured on the live service; the Related
+    link to [[LLM Bench Windows and Measurement]] rescoped to
+    out-of-procedure windows only.
+- Untouched on purpose: the `FRANK_*_ENV_FILE` hook (staged/out-of-procedure
+  arms), the Fleet Ops Playbook bench-window mechanics (deliberate windows
+  still need the procedure), `deployment.md` (already says bench work is a
+  SEPARATE procedure). Managed skill `llamacpp-endpoint-model-swap` verifies
+  on the live engine — it never had a bench step.

shared/homepage/services.json

@@ -366,13 +366,13 @@
     "model": {
       "unit": "archon",
       "role": "Frank's strongest and fastest model runtime",
-      "hf": "https://huggingface.co/StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe",
+      "hf": "https://huggingface.co/frank8465/Swift-1.5-Qwen3.8-Flash-Next-GPTQ-W4A8-Radiance-AMD-R9700",
       "tagline": "...Power Overwhelming...",
       "sfx": [
         "archon-power.ogg"
       ],
       "equiv": "Equivalent to Claude Opus 4.8 / OpenAI-Terra (Summer 2026 frontier intelligence).",
-      "spec": "The engine author's published quant: 4-bit codebook experts + int8 trunk of Qwen3.8-Flash-Next (radiance, ~114 GiB) on twin AMD R9700s with more than 200 GB of system RAM — 200k-token context, three submissions at a time; sees images.",
+      "spec": "Our own build: a GPTQ-w4 quant of Swift1.5-Qwen3.8-Flash-Next, quantized and tuned in-house (radiance, ~114 GiB) on twin AMD R9700s with more than 200 GB of system RAM — 200k-token context, three submissions at a time; sees images.",
       "inputs": [
         "text",
         "image"

tests/frank_archon_unit.bats

@@ -3,10 +3,8 @@
 #
 # This file asserts the RADIANCE shape (StillDeadcode engine, digest-pinned
 # stilldeadcode/radiance image, BOTH R9700s TP=2 on the wht6 wire, serving
-# the publisher's 4-bit-codebook .rad of the official Qwen3.8-Flash-Next
-# (fetched by scripts/download-frank-archon-iq4r.sh; the in-house
-# Swift1.5 w4dn8 .rad of scripts/convert-swift15-w4dn8.sh is the on-disk
-# rollback). It replaces the FreeToken seam of
+# the Swift1.5 Qwen3.8-Flash-Next GPTQ-w4 .rad built by
+# scripts/convert-swift15-w4dn8.sh). It replaces the FreeToken seam of
 # 2026-10-05 (git tag frank-archon-freetoken-pr587-20261005) and pins what
 # flags alone do not say: the served window clears the harness worst case,
 # the KV pool backs seqs x max-model-len at the declared cache dtype (an
@@ -30,7 +28,7 @@ SERVE="$REPO_ROOT/scripts/serve-frank-archon.sh"
 TTM_LIB="$REPO_ROOT/scripts/ttm-preflight.sh"
 ENV_FILE="$REPO_ROOT/scripts/frank-archon.env"
 REMOTE_DEPLOY="$REPO_ROOT/scripts/deploy-remote.sh"
-DOWNLOAD="$REPO_ROOT/scripts/download-frank-archon-iq4r.sh"
+DOWNLOAD="$REPO_ROOT/scripts/download-frank-archon-swift15.sh"
 BUILD="$REPO_ROOT/scripts/convert-swift15-w4dn8.sh"
 HFGET="$REPO_ROOT/scripts/hfget.sh"
 TEMPLATE="$REPO_ROOT/scripts/qwen38-froggeric-v22.5.jinja"
@@ -383,23 +381,18 @@ nosudo_bin() {
     grep -q 'exec podman wait "$FRANK_ARCHON_CONTAINER"' "$SERVE"
 }
 
-@test "the model id matches the payload's fetch script (and the rollback's build script)" {
-    # The deployed payload is the PUBLISHER's .rad: the fetch script names
-    # the repo, the file, and the Hub's LFS sha256; nothing is converted on
-    # the host for it. The in-house w4dn8 rollback keeps its own trio
-    # (convert-swift15-w4dn8.sh + download-frank-archon-swift15.sh, and the
-    # fp8-native era keeps build-frank-archon-rad.sh +
-    # download-frank-archon.sh).
+@test "the model id matches the payload's build and fetch scripts" {
+    # The payload dir/file are the convert script's output layout; the fetch
+    # script must name the repo the convert stages from. (FP8-native era,
+    # the rollback payload, keeps its own trio: build-frank-archon-rad.sh +
+    # download-frank-archon.sh.)
     grep -q '^FRANK_ARCHON_MODEL_DIR=/home/dank/models/rad$' "$ENV_FILE"
-    grep -q '^FRANK_ARCHON_MODEL_FILE=qwen3.8-next-flash-fp8-iq4r-moe.rad$' "$ENV_FILE"
-    grep -q 'StillDeadcode/qwen3.8-next-flash-fp8-iq4r-moe' "$DOWNLOAD"
-    grep -q 'qwen3.8-next-flash-fp8-iq4r-moe.rad' "$DOWNLOAD"
-    grep -q '0af5e96244e80c21ac8edca1719dae49b8a201b94a2f3994c3e24026ceaa4d20' "$DOWNLOAD"
+    grep -q '^FRANK_ARCHON_MODEL_FILE=qwen4exp-swift15-w4dn8-i8-hc8m.rad$' "$ENV_FILE"
+    grep -q 'qwen4exp-swift15-w4dn8-i8-hc8m.rad' "$BUILD"
+    grep -q 'ukisai/Swift1.5-Qwen3.8-Flash-Next' "$DOWNLOAD"
     grep -q 'hfget.sh' "$DOWNLOAD"
     # The repo is UNGATED — no token may be required on the fetch path.
     ! grep -q 'HF_TOKEN' "$DOWNLOAD"
-    # Rollback provenance: the w4dn8 build script names its payload.
-    grep -q 'qwen4exp-swift15-w4dn8-i8-hc8m.rad' "$BUILD"
 }
 
 @test "no bare HIP-reserved env var is defined" {