post: model gateway OAuth boundary post-mortem (EN+ZH) + LinkedIn/dev.to copy

Argon reviewed twice: blog body, then the distribution copy. Adopted: no
absolute timestamps, seats framed as workflow isolation, 403->502 error
contract fix, two-tier cost math with output pricing, task-dispatch naming.

scripts/og-gen/banner-plan.json

@@ -2403,6 +2403,30 @@
     1360,
     768
    ]
+  },
+  "when-a-self-hosted-model-router-tripped-trust-and-safety": {
+   "sw": 1930,
+   "sh": 1090,
+   "left": 604,
+   "top": 102,
+   "fill": [
+    14,
+    18,
+    30
+   ],
+   "zoom": 1.419,
+   "silhouette": 0.47,
+   "cut": 0.0,
+   "band": [
+    764,
+    123,
+    1294,
+    655
+   ],
+   "source_size": [
+    1360,
+    768
+   ]
   }
  }
 }