feat(mog-sec): quant + serve M.O.G.-SEC pen-test seat; PPL on gen; retire fable

Autonomous overnight run under the operator's full-autonomy grant. End state:
fleet up, gen seat untouched, a new verified pen-test seat serving where fable was.

PPL on the orcarouter gen seat (fable downed to free GPU1 for a nospec probe,
probe torn down after): mean 7.07 / median 5.76, within noise of heresy 6.910 /
5.625 and identical to our recipe's usual 7.059. The gen-seat search is settled.

M.O.G.-SEC: chose Blackfrost-Research/M.O.G.-SEC-27B-1M-CTX-BF16 (rev deede677)
over the pre-made ModelOpt NVFP4, which was disqualified on W4A4 4-bit activations
(the AEON degradation mode, catastrophic on a 1M-context model), zero MTP tensors,
and ModelOpt format. Pulled, format-screened (P(<think>) 1.11e-05, clean), quanted
in-house to mixed NVFP4+FP8 (23.4 GB, MTP + vision preserved), and served in the
retired fable slot.

  stacks/mog-sec        ana-ml2 GPU1 :8019, KV 418,218 tok / 1.60x @ 262K
  aliases               mog-sec (non-thinking), mog-sec-reasoning (thinking)
  gates                 surface 6/6, MTP 55.3%, format 0/15 leak, vision 7/3/1,
                        capability 4/4 (delivers offensive-security content)

Served at native 262K, NOT the card's 1M -- the 1M needs YaRN (absent from the
weights' config) plus the SGLang/DFlash2 path the repo ships a deployment kit for,
neither of which is our vLLM surface. A real 1M seat is a separate SGLang project.

Retired char-rp-reasoning + char-rp-fable (zero traffic, pointed at the downed
fable :8019; now 404 cleanly, not repointed -- a security model is not an RP model).
char-rp (meromero) untouched. Vision preprocessor built from the model's own
image_processor block, same trick as the MeroMero seat.

GPU0 seats (gen, meromero) were untouched and healthy throughout. The quant ran in
GPU1 free space with no production seat stopped except fable, which was replaced.

docs/pfi/gen-seat-candidate-eval-2026-08-21.md

@@ -87,3 +87,33 @@ Run `services/gen-seat-mixed-quant/bench/think-leak/think_prior.py` on the bf16
 have disqualified Cold-Fusion before its 300-trial study ever ran. Prior is
 favourable — stock-Qwen base, template identical to heresy, which measures <0.002
 against Cold-Fusion's 0.185 — but measure, don't assume.
+
+---
+
+# Addendum — M.O.G.-SEC pen-test model (same night)
+
+Two `Blackfrost-Research/M.O.G.-SEC-27B-1M-CTX` candidates for the pen-test
+project: a BF16 and a pre-made NVFP4. **Same verdict as gen-seat: pull the BF16,
+quant ourselves.** Read directly off the artifacts via HTTP Range.
+
+| | BF16 | pre-made NVFP4 |
+|---|---|---|
+| MTP tensors | 15 ✓ | **0 ✗** |
+| scheme | n/a | **ModelOpt W4A4** ✗ |
+| context | native 262K (config), 1M claimed | same |
+
+The pre-made NVFP4 is disqualified on **three** grounds, one unique to this model:
+ModelOpt **W4A4** (4-bit activations — the AEON degradation mode), **zero MTP**,
+and — the sharp one — **W4A4 on a 1M-context model is self-defeating**, since
+W4A4 fidelity collapses past ~30k. A long-context model quanted on the activation
+scheme that fails hardest at long context works against itself.
+
+The BF16 quanted cleanly (`mog-sec-27b-nvfp4-mixed`, 23.4 GB) and is **served** in
+the retired fable slot (ana-ml2 GPU1 :8019, aliases `mog-sec` / `mog-sec-reasoning`).
+Gates: format screen 1.11e-05, surface 6/6, MTP 55.3%, vision 7/3/1, and a
+capability smoke 4/4 (it delivers offensive-security content, does not refuse).
+
+**The 1M is not real on our path.** `rope_scaling: None` in the weights' config
+(native Qwen3.8 is 262K), and the repo's 1M is an SGLang/DFlash2 deployment kit.
+We serve native 262K. A true 1M seat would be a separate SGLang project — flagged,
+not attempted.