Add the exact GLM-5.2 training contract

[kiddyboots216]

Summary

• add native GLM-5.2 FP8 checkpoint loading and the exact trainer forward path
• make bit-relevant GLM-5.2 numerical choices structural, with fail-closed explicit overrides
• add canonical logical-contributor MoE reduction and topology-aware transport
• reject the unsupported distributed folded-LoRA path until gradient ownership is explicit

This PR is intentionally stacked on #23.

Validation

• 138 passed, 31 skipped, 20 deselected in the broad GLM CPU matrix
• 17 passed, 2 skipped in the unmarked FP8/FSDP supplement
• Ruff, compileall, diff check, and provenance checks pass
• cross-repository selector import resolves the public GLM-5.2 contract

Qualification

The final source pins have not yet completed a fresh full-model trainer/sampler replay. Existing exact-replay evidence predates the final structural-default commit, so this remains a draft until that replay is attached.

[broly-code-security-scanner]

Broly Security Scan

Note

✅ Clean scan
No vulnerabilities detected in this PR.

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (zai-org/GLM-5.2) · Secrets · SCA · IaC · GH Actions · Base Images · Supply Chain Threats · Exploit Chains · Adversarial Verification

We're continuously improving Broly's accuracy and finding quality — your feedback is valuable. False positives, missed findings, bugs, and feature requests all welcome.