BertModelWarper now delegates to the real BertModel.forward instead of reimplementing internals whose private signatures drift between releases; checkpoint weights remap bert.* -> bert.bert_model.* at load. The installer force-checkouts each pin (discarding prior patches) then applies any scripts/patches/<pack>-*.patch, so re-runs stay idempotent and the image build gets the same fix the GB10 venv had by hand.