Same weights, two engines: eight percentage points of guardrail drift
The same model, the same 220 probes, the same judge, temperature zero: on llama.cpp it answered 108 of 110 adversarial probes, on the new engine only 100. Over-refusal in both runs: not one of the 110 neutral control questions denied. What changed was the engine — and the draft layer thinking along. The protocol and the scorecard are attached as files.