Model distillation defences

Fable 5.1 binds each thinking block to the exact bytes of the prefix that produced it

Any harness that refreshes the date in its system prompt or slips a status line into the transcript between turns now gets a 400 instead of a completion, which makes append-only history the fix rather than a retry loop.