docs: harden GLM alpha resource and protocol gates

.scratch/distributed-gguf-runtime/PRD.md

@@ -104,6 +104,8 @@ Before a story is marked complete, run the full deterministic `pytest -q` suite
 **Acceptance Criteria:**
 - [ ] Head accepts token IDs and owns token embedding.
 - [ ] Middle/tail bypass token embedding and accept the named boundary bundle.
+- [ ] Amend the decode fast path from one `NamedTensor` to a versioned `TensorBundle`, preserving compact one-tensor compatibility and regenerating Python/C++ protocol goldens.
+- [ ] Define a typed tail logits/token result with sampling and chat-template/reasoning identity.
 - [ ] Non-tail emits the unnormalized architecture-defined residual/boundary before final norm/head and before tail-only row pruning.
 - [ ] Tail emits logits or token output through an explicit sampling contract.
 - [ ] Dense-Llama whole-model versus two-range prefill and greedy-decode parity passes the documented tolerance.
@@ -221,10 +223,11 @@ Before a story is marked complete, run the full deterministic `pytest -q` suite
 
 **Acceptance Criteria:**
 - [ ] Produce machine-readable target, resource, upstream-status, and immutable acceptance contracts without downloading full weights.
+- [ ] Distinguish the 224-GiB hard-fit floor from the recommended 5×64 or 3×96/128 topology, using Q8 KV, 20%/8-GiB node reserves, and a wired 2.5-GbE minimum.
 - [ ] Count unified RAM/VRAM once and test revision/shard/byte/threshold mutation failures.
 
 ### DGR-018: Certify whole-model GLM-5.2 runtime semantics
-**Description:** Establish a 224+ GiB usable-memory oracle for the exact target artifact before distributed parity work.
+**Description:** Establish the exact IQ1_S oracle on a 256-GiB-class host with at least 224 GiB runtime-accessible memory; lock Q8_0 MLA/indexer KV and native target semantics before distributed parity work.
 
 **Acceptance Criteria:**
 - [ ] Verify the complete artifact and prove native MoE/shared expert, DSA, IndexShare, KV, NextN policy, and Max-template behavior.