Qwen3.6-27B B70 MTP2 v0.1.3 — audited release

Audited release of the bounded-MTP2 Qwen3.6-27B FP8 runtime for 2x Intel Arc Pro B70.

Images (identical digest):

• ghcr.io/rmacy/qwen36-b70-mtp2:0.1.3
• us-central1-docker.pkg.dev/home-504803/open-models/qwen36-b70-mtp2:0.1.3
• sha256:a77db6582579e417f07e3944ab5092f8989bc42eb7d40fb72d4b828d7e0bd3f0

Validated profile:

• 52.94 tok/s C1 median versus 31.90 tok/s without MTP
• 169.48–175.94 tok/s cold aggregate at C4
• 267.37–282.57 tok/s cold aggregate at C8
• quality tied the separately hosted copy on the frozen score and all 82 blinded comparisons
• 6,981/6,981 correct requests in a 3,604-second mixed soak

Release hardening:

• final-filesystem MTP, launcher, API-key, and CVE-2026-48746 exploit regression tests
• cache-resistant benchmark smoke test with the nonce in the first prompt block
• optional API_KEY support through both launcher paths
• commit-pinned GitHub Actions and OCI-aware anonymous-pull validation
• Ubuntu linux-libc-dev pinned to the fixed 6.8.0-137.137 package

The exact published image was pulled anonymously and passed every embedded runtime test. Its five performance-critical vLLM files are byte-identical to the validated production runtime. Trivy 0.73.0 found zero secrets. Its two critical records are duplicate version-based matches for CVE-2026-48746; the affected path is backported and regression-tested. The image contains no model weights or private deployment data.