post: model gateway OAuth boundary post-mortem (EN+ZH) + LinkedIn/dev.to copy

Argon reviewed twice: blog body, then the distribution copy. Adopted: no
absolute timestamps, seats framed as workflow isolation, 403->502 error
contract fix, two-tier cost math with output pricing, task-dispatch naming.

scripts/og-gen/art-meta.json

@@ -364,5 +364,10 @@
   "evidence": "SSIM >= 0.995 · 10,000+ assets · 0 corrupt stubs",
   "ogTitle_en": "5 Quality Gates for FFmpeg",
   "ogTitle_zh": "视频转码流水线五道质量门禁"
+ },
+ "when-a-self-hosted-model-router-tripped-trust-and-safety": {
+  "evidence": "6 seats - 9 s - 403 to 502 mapping",
+  "ogTitle_en": "The Gateway That Tripped Trust & Safety",
+  "ogTitle_zh": "网关撞上风控"
  }
 }