memory: snapshot refresh — breeze settled, util does not predict residency, handoff defect

Incremental over 653f7fb, covering the three turns since.

breeze-tts stays on irv-ml1 and the TTS-stack move is parked at id 75. Adds the
full fv-ml1 per-seat residency table and the shuffle arithmetic behind the
recommendation: every arrangement that makes real room on GPU 1 spends the GPU 3
reserve anyway, so if breeze ever moves it should go straight to GPU 3 rather than
evacuating three working seats for the same cost plus a migration.

The finding worth keeping is that --gpu-memory-utilization does not predict resident
VRAM, and is wrong in both directions: cyberprev at util 0.40 holds 8 GB more than
its fraction, gen-small at 0.48 holds 10 GB less. An hour earlier in the session I
reasoned about placement from those fractions and would have been 8 GB out. Read
nvidia-smi --query-compute-apps instead.

Also records a characterized defect in this skill's own handoff generator. Across
two runs in one session it converted operator-deferred items into an imperative
next-steps list and twice invited the next session to commit files marked as
predating it. It fails in the blind spot of the documented fail-loud posture: the
output is structurally valid and exits 0 while inverting the intent. That matters
more than an ordinary bad summary because the handoff is the one artifact a fresh
context reads as instruction. Both runs were corrected in-session; not yet reported
to the skill's owner.

persistent-memory.d/2026-09-15-silent-wrong-answer-pattern.md

@@ -111,6 +111,34 @@ possible answer, and it was the right one here.
 problem; a refusal naming permission rules or auto-mode is a harness one. Different
 fixes, and neither applies when nothing failed.
 
+## ⚠ CHARACTERIZED DEFECT: `/snapshot`'s handoff generator turns deferred items into orders
+
+**n=2, same session, reproducible.** `snapshot_handoff.py` (gen-small) reliably converts
+"open, operator-deferred, not blocking" into an imperative **Next steps** list, and twice
+invited the next session to commit files explicitly marked as predating the session.
+
+    run 1: "Execute deferred operator tasks: AI-tab Dormant regrouping, nconnect=8,
+            fused MoE (park id 47)"  + "Commit graphify-out/… if they are ready"
+    run 2: six next-steps, FIVE of them deferred/parked items presented as actions,
+            + the same commit invitation
+
+⚠ **It fails silently in the skill's blind spot.** The documented failure posture is
+fail-loud-fall-back — unreachable gateway, timeout, truncation, missing section → write
+nothing, exit non-zero. **A structurally valid handoff whose content inverts the
+operator's intent passes every one of those checks** and exits 0.
+
+⚠ **And this is the one artifact a fresh context inherits as instruction.** It is read
+immediately after `/clear`, before any other framing, and its Next steps read as a
+mandate. A wrong one here is not a bad summary; it is a fresh session going and doing
+belayed work.
+
+**Mitigation until fixed: read the generated handoff before accepting it**, and invert
+any deferred item into an explicit *do NOT*. Both runs this session were corrected
+in-session. Owner is the `/snapshot` skill (galdrabok); not reported yet.
+
+⭐ Same family as everything above — the instrument produced a plausible artifact and
+the plausibility is exactly what makes it dangerous.
+
 ## Related
 
 `2026-09-15-talk-v10-deploy.md` (#2, and the gate built for it),