Exact kernel gates: verify variants emitted from the same WGSL source restore the int32 oracle on the kernels training actually runs; bit-exact epilogue mirror removes the tolerance entirely; shape sweep; dead exactly-gated kernel deleted. Continuous verification: random-cell audit at live shapes + canonical cross-device kernel probe (the weight hash structurally cannot detect kernel disagreement). New test_gates.js mutation-tests the gate itself.
