neuron-tai/packages/node/native/llama/PATCH-STACK.md

Meshnet llama.cpp patch stack

This directory is the only project-owned fork boundary for llama.cpp. It is locked to e920c523e3b8a0163fe498af5bf90df35ff51d25; changing the pin requires updating the recorded tree/blob assumptions and reviewing every patch anew.

Ordered series

1. 0001-cmake-reserve-meshnet-patch-stack-abi-marker.patch adds only an interface-library marker used to prove the patched source was configured. It has no execution, transport, model-loading, or semantic effect.

Future patches may implement only the ADR-0020 local seams: range-aware tensor loading, endpoint ownership, architecture-defined intermediate boundaries, and layer-filtered KV/session mapping. Meshnet routing, Tracker, gRPC, relay, billing, authentication, and telemetry must remain outside this directory.

scripts/llama_cpp_dependency.py fetch reads the in-repo manifest and checks out only its exact commit as detached HEAD in build/llama.cpp/source, an ignored build workspace. It verifies the exact commit/tree and baseline blobs before use. A later offline fetch may reuse that cache only after the same clean identity verification; an attached branch, tag/repository override, arbitrary destination, symlinked workspace, dirty checkout, ignored injected file, or tracked-file modification hidden by Git index flags is refused. The tool validates every patch digest and context with git apply --check, then applies the series in patches/series order. Tracked executable modes are checked physically when Git reports core.filemode=true; on mounted filesystems without POSIX mode fidelity, the locked index tree remains the canonical mode record while every working-file blob is independently re-hashed.

Current semantic boundary

The stock pinned build is infrastructure evidence only. Per DGR-017, GLM-5.2 can use a dense-MLA compatibility fallback at this point; a successful build or llama-cli --version does not show native DSA/IndexShare, GLM semantic acceptance, numerical parity, performance, or route certification. DGR-018 and DGR-019 own those checks. Dense Llama remains only a later structural fixture.