fuel-dispatch 0.20.61

Dispatch infrastructure for fuel: KernelBindingTable, per-backend registration wrappers, CompiledNode + compile_node, ExecutionPlan + compile_plan + resolve_kernel, FusedKernelRegistry, PipelinedExecutor. The layer that takes a graph and runs it against registered backends. Extracted from fuel-memory 2026-05-31.
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
---
fkc_version: 1
provider:
  name: fuel-cpu-backend
  backend: Cpu                       # maps to BackendId::Cpu
  kernel_source: "portable-cpu"      # the BindingEntry.kernel_source tag
  link_registry: fuel_cpu_backend::fkc::ENTRY_POINTS   # §12.6 symbol→KernelRef map
  revision_base: "git:f41137b4"      # provider build id, folded into kernel_revision_hash
---

# fuel-cpu-backend — padding kernel contracts


Portable byte-shaped CPU padding kernels from `fuel-cpu-backend/src/byte_kernels.rs`. All operate
on flat contiguous `CpuStorageBytes` slices (offset 0, row-major); the pipelined executor's
auto-Contiguize pass realizes any strided/broadcast/offset producer into a dense buffer *before*
these kernels run, so the input-layout contract for every kernel here is **contiguous, offset 0**
(`reverse_strides: rejected` throughout — none of these kernels consults a `Layout` or walks a
signed stride; they compute their own non-negative row-major strides via
`compute_row_major_strides`). Shape/stride semantics arrive as explicit `usize` params
(`in_shape` / `out_shape` / `padding` / `mode_tag`), never derived from a layout object.

The three forward modes (Constant / Reflect / Replicate) share **one** `OpKind::Pad` selected by
the `mode_tag` field of `OpParams::Pad`; per-dtype byte width is carried by `dtype_size` +
pre-encoded `fill_bytes`, so the forward kernels are **dtype-agnostic** (one logical kernel per
mode). Backward is per-dtype (`OpKind::PadBackward`) because gradient accumulation needs typed
addition; bf16/f16 (and f32) widen the accumulator scratch to **f64**.

Cost on every kernel is `provenance: judge_measured` — the Judge bootstraps it. A bandwidth
formula hint is given where derivable (these are pure byte movers / accumulators, bandwidth-bound
over element counts); no FLOPs/latency numbers are fabricated.

**Re-author note (2026-07-03).** The forward half was originally authored as THREE per-mode sections
(`pad_const_cpu` / `pad_reflect_cpu` / `pad_replicate_cpu`) plus the shared `pad_walk_cpu` helper,
all `registrable: false` (DEFERRED). That could not model production truthfully: all three modes are
served by the SINGLE mode-dispatching `pad_cpu_wrapper` (mode chosen at runtime via `mode_tag`, incl.
the reflect `before/after <= n-1` validation) at ONE `(Pad, [T, T])` binding per dtype, so three
independent same-key registrations would collide (`DuplicateKernelRef`); and the sections enumerated
10 byte-agnostic dtypes while production wires only 6. The forward half is now modeled by ONE
mode-unified registrable **`## pad`** section (below) over the 6 production-wired dtypes
(`U8/U32/BF16/F16/F32/F64`) on a dtype-agnostic BASE `entry_point` (`…::pad_cpu`) that the importer's
§3.4 fan-out expands to `pad_cpu_{u8,u32,bf16,f16,f32,f64}`, ALL resolving the one `pad_cpu_wrapper`
(the Flip/Roll/Concat pattern — a fabricated per-dtype symbol onto one dtype-agnostic wrapper). The
three per-mode sections + `pad_walk_cpu` are RETAINED below, converted to **`registrable: false`**
describe-only mode documentation (§3.10) — their const/reflect/replicate semantics and the reflect
bound validation are the load-bearing prose the unified section points back at. Backward
(`PadBackward`, per-dtype) is unaffected.

## pad  (mode-unified forward pad — the registrable forward entry point)


One-line: mode-unified multi-dim forward pad; ONE `(Pad, [T, T])` binding per dtype dispatches Constant/Reflect/Replicate at runtime via `mode_tag`.

The single registrable forward-`Pad` section, modeling production's `pad_cpu_wrapper` truthfully.
The wrapper takes ONE input + ONE output and selects the byte-kernel at runtime from `mode_tag`:
`0` → `pad_const_cpu` (two-pass constant fill; see the `pad_const_cpu` describe-only section below),
`1` → `pad_reflect_cpu` (reflect index map, edge NOT repeated; the wrapper enforces the load-bearing
`before <= n-1 AND after <= n-1` per-axis validity BEFORE calling the kernel), `2` →
`pad_replicate_cpu` (replicate / edge-clamp index map). All three are dtype-agnostic byte copies —
per-element byte width is carried by `dtype_size` (read from the output dtype) + pre-encoded
`fill_bytes`, so ONE logical binding per dtype covers every mode. The dtype list is trimmed to the 6
dtypes production materializes forward pads for (`U8/U32/BF16/F16/F32/F64`), NOT the kernel's full
byte-agnostic set, so the §3.4 fan emits BYTE-FOR-BYTE the deleted hand-written
`table.register(Pad, &unary(t), …)` regs (key `[T, T]`, `out: passthrough(input)`). Numerics: none —
pure byte copy, bit-exact for any dtype. Perf: bandwidth-bound (Constant: two output passes + one
input pass; Reflect/Replicate: one output pass). Contiguous + offset-0 only (the executor's
auto-Contiguize pass realizes any strided/broadcast/offset producer first). Validates rank agreement,
byte lengths, and `out_shape[i] == in_shape[i] + before + after` per axis, returning `Result` (no
panic).

```fkc
kernel: pad
op_kind: Pad
blurb: "Mode-unified multi-dim forward pad; one (Pad,[T,T]) binding per dtype dispatches Constant/Reflect/Replicate at runtime via mode_tag."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_cpu"   # BASE (synthetic umbrella over the three mode byte-kernels pad_{const,reflect,replicate}_cpu); §3.4 fans pad_cpu_{u8,u32,bf16,f16,f32,f64}, ALL → the one dispatch-layer pad_cpu_wrapper (mode chosen at runtime); §12.6
kernel_revision_hash: auto

accept:
  inputs:
    - name: input
      # Byte-dtype-agnostic (only dtype_size matters), but the REGISTRATION covers
      # the 6 dtypes the executor actually materializes forward pads for — the fan
      # builds one `[T, T]` binding per dtype, ALL resolving `pad_cpu_wrapper`.
      # Trimmed from the kernel's full byte-agnostic set to match production
      # truthfully (byte-for-byte the deleted `table.register(Pad, &unary(t), …)`).
      dtypes: [U8, U32, BF16, F16, F32, F64]
      dtype_class: any
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=out"
  op_params:
    variant: Pad                    # OpParams::Pad (fuel-dispatch::kernel) — primitive namespace
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len(); for Reflect (mode_tag==1) also before <= in_shape[i]-1 AND after <= in_shape[i]-1 (wrapper-enforced)" }
      mode_tag:  { kind: u8, constraint: "in {0 Constant, 1 Reflect, 2 Replicate} — selects the byte-kernel at runtime" }
      fill_bytes: { kind: "Vec<u8>", constraint: "Constant: len == dtype_size (one element pre-encoded); ignored for Reflect/Replicate" }

return:
  outputs:
    - name: out
      dtype_rule: passthrough(input)        # byte width preserved; dtype = input dtype
      shape_rule: from_params(out_shape)     # per-axis in_shape[i] + before + after
      layout_guarantee: contiguous           # fresh dense row-major; executor pre-allocates
      aliasing: none                         # full overwrite

caps:
  awkward_layout_strategy: requires_contiguous   # ← planner inserts Op::Contiguize (itself an FKC kernel) + sums its cost
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 8                  # byte-granular copy (dtype-agnostic)

cost:
  provenance: judge_measured                 # Judge bootstraps; bandwidth-bound byte mover
  class: cheap_elementwise
  flops: "0"                                  # pure copy, no arithmetic
  bytes_moved: "(2 * out_elem + 2 * in_elem) * dtype_bytes"   # Constant worst case (fill + copy); Reflect/Replicate move 2*out_elem
  overhead_ns: ~                              # judge_measured
  memory: { device_bytes: 0, host_bytes: "out_elem * dtype_bytes", disk_bytes: 0 }

precision:
  bit_stable_on_same_hardware: true          # byte copy: bit-exact for any dtype, any hardware
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Pure byte copy (constant fill / reflect / replicate index map); no arithmetic, bit-exact for every dtype."

determinism: bitwise                         # exact byte shuffle/copy, hardware-independent
```

## pad_const_cpu  (multi-dim Constant pad)


One-line: multi-dim constant-fill pad; tiles the output with one constant element then copies the input region in.

Multi-dimensional Constant (`mode_tag = 0`) pad. Two-pass, dtype-agnostic at the byte level:
**pass 1** copies the single-element `fill_bytes` pattern into every one of the `out_elem` output
slots; **pass 2** walks the input's multi-index via a mixed-radix counter (last axis varies
fastest, no recursion, arbitrary rank) and copies each input element's `dtype_size` bytes into its
shifted output position `out_flat = Σ (idx[k] + padding[k].before) * out_stride[k]`. Padded slots
keep the constant — they never index into the input. Numerics: none — it is a byte copy, so it is
bit-exact for any dtype (the fill value's bits are supplied pre-encoded by the caller). Perf:
bandwidth-bound, two linear passes over the output plus one over the input
(`out_elem` fills + `in_elem` element copies). Validates rank agreement
(`in_shape.len() == out_shape.len() == padding.len()`), `fill_bytes.len() == dtype_size`, and exact
byte lengths (`in == in_elem*dtype_size`, `out == out_elem*dtype_size`), returning `Result` (no
panic). Limitations: contiguous + offset-0 only; no symbolic-extent awareness (reads full concrete
shapes); `out_shape[i]` must equal `in_shape[i] + before + after` per axis (the dispatch wrapper
guarantees this).

```fkc
kernel: pad_const_cpu
op_kind: Pad                        # mode_tag = 0 distinguishes Constant from Reflect/Replicate
registrable: false          # DESCRIBE-ONLY (§3.10): the `mode_tag = 0` (Constant) branch of the mode-unified `## pad` section above. Retained for its constant-fill semantics (two-pass tile-then-copy); it does NOT register independently — the SINGLE `## pad` binding (served by `pad_cpu_wrapper`, mode chosen at runtime) is the registrable forward entry point. An independent reg would collide on the shared `(Pad, [T, T])` key (DuplicateKernelRef).
blurb: "Multi-dim constant-fill pad; tiles the output with one constant element then copies the input region in."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_const_cpu"   # byte_kernels.rs:497
kernel_revision_hash: auto

accept:
  inputs:
    - name: input
      dtypes: [U8, I8, U32, I16, I32, I64, BF16, F16, F32, F64]   # dtype-agnostic byte copy (any element width)
      dtype_class: any
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=out"
  op_params:
    variant: Pad                    # OpParams::Pad (fuel-dispatch::kernel) — primitive namespace
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len()" }
      mode_tag:  { kind: u8, constraint: "== 0  (Constant)" }
      fill_bytes: { kind: "Vec<u8>", constraint: "len == dtype_size (one element pre-encoded)" }

return:
  outputs:
    - name: out
      dtype_rule: passthrough(input)        # byte width preserved; dtype = input dtype
      shape_rule: from_params(out_shape)     # per-axis in_shape[i] + before + after
      layout_guarantee: contiguous           # fresh dense row-major; executor pre-allocates
      aliasing: none                         # full overwrite (pass 1 fills every slot)

caps:
  awkward_layout_strategy: requires_contiguous   # ← planner inserts Op::Contiguize (itself an FKC kernel) + sums its cost
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 8                  # byte-granular copy (dtype-agnostic)

cost:
  provenance: judge_measured                 # Judge bootstraps; bandwidth-bound byte mover
  class: cheap_elementwise
  flops: "0"                                  # pure copy, no arithmetic
  bytes_moved: "(2 * out_elem + 2 * in_elem) * dtype_bytes"   # fill writes out_elem; copy reads+writes in_elem
  overhead_ns: ~                              # judge_measured
  memory: { device_bytes: 0, host_bytes: "out_elem * dtype_bytes", disk_bytes: 0 }

precision:
  bit_stable_on_same_hardware: true          # byte copy: bit-exact for any dtype, any hardware
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Pure byte copy (fill pattern + input region); no arithmetic, bit-exact for every dtype."

determinism: bitwise                         # exact byte shuffle/copy, hardware-independent
```

## pad_reflect_cpu  (multi-dim Reflect pad)


One-line: multi-dim reflect pad (edge not repeated); delegates to the generic pad walker with the reflect index map.

Multi-dimensional Reflect (`mode_tag = 1`) pad. A thin wrapper that delegates to `pad_walk_cpu`
(below) with `reflect_index`. Per-axis mapping for output index `j`, input dim `n`,
`i = j - before`: `i < 0 → in[-i]`; `0 ≤ i < n → in[i]`; `i ≥ n → in[2*(n-1) - i]` — i.e. the edge
element is **not** repeated (a true reflection about the boundary element). Dtype-agnostic byte
copy. Numerics: none (byte copy, bit-exact). Perf: bandwidth-bound, one linear pass over the output
(`out_elem` mapped reads + writes). **Limitation (caller-enforced, load-bearing):** `before ≤ n-1`
and `after ≤ n-1` for every axis — otherwise the reflection runs off the opposite side and
produces out-of-range indices; the dispatch wrapper validates this, the kernel does not re-check it.
Contiguous + offset-0 only.

```fkc
kernel: pad_reflect_cpu
op_kind: Pad                        # mode_tag = 1 distinguishes Reflect
registrable: false          # DESCRIBE-ONLY (§3.10): the `mode_tag = 1` (Reflect) branch of the mode-unified `## pad` section above. Retained for its reflect index-map semantics (edge NOT repeated) and the load-bearing `before/after <= n-1` per-axis validity the wrapper enforces before calling the kernel; it does NOT register independently — the SINGLE `## pad` binding is the registrable forward entry point. An independent reg would collide on the shared `(Pad, [T, T])` key (DuplicateKernelRef).
blurb: "Multi-dim reflect pad (edge not repeated); delegates to the generic pad walker with the reflect index map."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_reflect_cpu"   # byte_kernels.rs:580 → pad_walk_cpu:631
kernel_revision_hash: auto

accept:
  inputs:
    - name: input
      dtypes: [U8, I8, U32, I16, I32, I64, BF16, F16, F32, F64]
      dtype_class: any
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=out"
  op_params:
    variant: Pad
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len(); before <= in_shape[i]-1 AND after <= in_shape[i]-1 (reflect validity)" }
      mode_tag:  { kind: u8, constraint: "== 1  (Reflect)" }
      fill_bytes: { kind: "Vec<u8>", constraint: "ignored for Reflect (no constant fill)" }

return:
  outputs:
    - name: out
      dtype_rule: passthrough(input)
      shape_rule: from_params(out_shape)
      layout_guarantee: contiguous
      aliasing: none

caps:
  awkward_layout_strategy: requires_contiguous
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 8

cost:
  provenance: judge_measured
  class: cheap_elementwise
  flops: "0"
  bytes_moved: "2 * out_elem * dtype_bytes"   # one mapped read + write per output element
  overhead_ns: ~
  memory: { device_bytes: 0, host_bytes: "out_elem * dtype_bytes", disk_bytes: 0 }

precision:
  bit_stable_on_same_hardware: true
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Pure byte copy via reflect index map; no arithmetic, bit-exact for every dtype. Caller must keep before/after <= n-1 per axis."

determinism: bitwise
```

## pad_replicate_cpu  (multi-dim Replicate / edge-repeat pad)


One-line: multi-dim replicate pad (edge repeated); delegates to the generic pad walker with the replicate index map.

Multi-dimensional Replicate / edge-repeat (`mode_tag = 2`) pad. A thin wrapper that delegates to
`pad_walk_cpu` with `replicate_index`. Per-axis mapping for `i = j - before`: `i < 0 → in[0]`;
`0 ≤ i < n → in[i]`; `i ≥ n → in[n-1]` — the boundary element is clamped/repeated outward.
Dtype-agnostic byte copy. Numerics: none (byte copy, bit-exact). Perf: bandwidth-bound, one linear
pass over the output. No `before ≤ n-1` restriction (clamping is well-defined for any pad width).
Contiguous + offset-0 only.

```fkc
kernel: pad_replicate_cpu
op_kind: Pad                        # mode_tag = 2 distinguishes Replicate
registrable: false          # DESCRIBE-ONLY (§3.10): the `mode_tag = 2` (Replicate) branch of the mode-unified `## pad` section above. Retained for its replicate / edge-clamp index-map semantics (boundary element repeated outward, no pad-width restriction); it does NOT register independently — the SINGLE `## pad` binding is the registrable forward entry point. An independent reg would collide on the shared `(Pad, [T, T])` key (DuplicateKernelRef).
blurb: "Multi-dim replicate pad (edge repeated); delegates to the generic pad walker with the replicate index map."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_replicate_cpu"   # byte_kernels.rs:595 → pad_walk_cpu:631
kernel_revision_hash: auto

accept:
  inputs:
    - name: input
      dtypes: [U8, I8, U32, I16, I32, I64, BF16, F16, F32, F64]
      dtype_class: any
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=out"
  op_params:
    variant: Pad
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len()" }
      mode_tag:  { kind: u8, constraint: "== 2  (Replicate)" }
      fill_bytes: { kind: "Vec<u8>", constraint: "ignored for Replicate (no constant fill)" }

return:
  outputs:
    - name: out
      dtype_rule: passthrough(input)
      shape_rule: from_params(out_shape)
      layout_guarantee: contiguous
      aliasing: none

caps:
  awkward_layout_strategy: requires_contiguous
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 8

cost:
  provenance: judge_measured
  class: cheap_elementwise
  flops: "0"
  bytes_moved: "2 * out_elem * dtype_bytes"
  overhead_ns: ~
  memory: { device_bytes: 0, host_bytes: "out_elem * dtype_bytes", disk_bytes: 0 }

precision:
  bit_stable_on_same_hardware: true
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Pure byte copy via replicate (edge-clamp) index map; no arithmetic, bit-exact for every dtype."

determinism: bitwise
```

## pad_walk_cpu  (generic multi-dim pad walker — shared internal core)


One-line: generic dtype-agnostic pad walker; copies each output element from its mapped input position via a per-axis index function.

The shared generic walker that backs both Reflect and Replicate (Constant has its own two-pass
shape because padded slots do not index the input). Walks every one of the `out_elem` output
positions; for each, computes the corresponding input flat offset by applying a per-axis
`map_index(i, n)` function to `i = out_idx[k] - padding[k].before` and summing `m * in_stride[k]`,
then copies `dtype_size` bytes from input to output. Dtype-agnostic. Numerics: none (byte copy).
Perf: bandwidth-bound, one linear pass over the output. Validates rank agreement and exact byte
lengths, returning `Result`.

**Registrability note (faithful to as-built):** `pad_walk_cpu` is an **internal helper**, not a
standalone dispatch entry point. It is generic over the index-map function pointer
`F: Fn(i64, usize) -> usize` (instantiated as `reflect_index` / `replicate_index`), so it is not
itself addressable by a single `(OpKind, dtypes, backend)` key — the registrable kernels are
`pad_reflect_cpu` / `pad_replicate_cpu`, which bind the map. This contract documents its behavior
for completeness (the inventory names it); the importer would register it via its two mode-bound
wrappers, not as a third independent binding. Its `op_kind`/key are therefore the same
`OpKind::Pad` family the wrappers expose, with `mode_tag` selecting the bound map.

```fkc
kernel: pad_walk_cpu
op_kind: Pad                        # internal core for Reflect (mode_tag=1) / Replicate (mode_tag=2)
registrable: false          # DESCRIBE-ONLY (§3.10): internal helper — NOT a standalone dispatch entry point (generic over the index-map fn pointer, instantiated as reflect_index/replicate_index; backs the Reflect/Replicate branches of the mode-unified `## pad` section, themselves dispatched by pad_cpu_wrapper). Documented for completeness per the Registrability note above; it does NOT register independently.
blurb: "Generic dtype-agnostic pad walker; copies each output element from its mapped input position via a per-axis index function."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_walk_cpu"   # byte_kernels.rs:631 (internal; bound by mode wrappers)
kernel_revision_hash: auto

accept:
  inputs:
    - name: input
      dtypes: [U8, I8, U32, I16, I32, I64, BF16, F16, F32, F64]
      dtype_class: any
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=out"
  op_params:
    variant: Pad
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len()" }
      mode_tag:  { kind: u8, constraint: "in {1 (Reflect), 2 (Replicate)} — selects the bound map_index" }
      fill_bytes: { kind: "Vec<u8>", constraint: "ignored by the walker (Reflect/Replicate never fill)" }

return:
  outputs:
    - name: out
      dtype_rule: passthrough(input)
      shape_rule: from_params(out_shape)
      layout_guarantee: contiguous
      aliasing: none

caps:
  awkward_layout_strategy: requires_contiguous
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 8

cost:
  provenance: judge_measured
  class: cheap_elementwise
  flops: "0"
  bytes_moved: "2 * out_elem * dtype_bytes"
  overhead_ns: ~
  memory: { device_bytes: 0, host_bytes: "out_elem * dtype_bytes", disk_bytes: 0 }

precision:
  bit_stable_on_same_hardware: true
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Pure byte copy via a per-axis index map (reflect or replicate); no arithmetic, bit-exact. Internal helper bound by the mode wrappers, not an independent dispatch key."

determinism: bitwise
```

## pad_backward_f32  (Pad backward — f32)


One-line: Pad gradient on f32; accumulates grad_out into grad_in over the forward index mapping, f64 scratch accumulator.

Backward of `Pad` on `f32` (`OpKind::PadBackward`). Walks every one of the `out_elem` output
positions and, per `mode_tag`, maps each to an input position (Constant: **skip** positions that
fall in the padded region — they did not come from the input; Reflect: `reflect_index`; Replicate:
`replicate_index`), accumulating `grad_out[out_flat]` into an internal **f64** accumulator slot for
that input element. Many output positions can map to the same input slot (e.g. all corners of a
Replicate-padded image fold onto one input corner), so the f64 accumulator is the load-bearing
precision invariant — it avoids loss when summing many contributions. After the walk, each input
slot is **narrowed** from the f64 accumulator to `f32` and written to `grad_in`. Output behavior:
`grad_in` is **fully written** (every slot is set from its accumulator, which started at 0.0) — it
is *not* read-modified-written against prior `grad_in` contents, so `aliasing: none` (the
accumulation is internal to the kernel's scratch, not into the output buffer). Perf: bandwidth-bound
over `out_elem` reads + a final `in_elem` narrow/store, plus an `in_elem`-sized f64 scratch alloc.
Validates rank agreement and element counts, returning `Result`.

```fkc
kernel: pad_backward_f32
op_kind: PadBackward
blurb: "Pad gradient on f32; accumulates grad_out into grad_in over the forward index mapping, f64 scratch accumulator."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_backward_f32"   # byte_kernels.rs:787 (pad_backward_kernel!:702)
kernel_revision_hash: auto

accept:
  inputs:
    - name: grad_out
      dtypes: [F32]
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=grad_in; element_count == out_elem"
  op_params:
    variant: PadBackward            # OpParams::PadBackward (primitive namespace)
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len()" }
      mode_tag:  { kind: u8, constraint: "in {0 Constant, 1 Reflect, 2 Replicate}" }

return:
  outputs:
    - name: grad_in
      dtype_rule: passthrough(grad_out)       # F32 in → F32 out
      shape_rule: from_params(in_shape)        # the (smaller) input shape
      layout_guarantee: contiguous
      aliasing: none                           # fully written from internal f64 acc (not RMW of grad_in)

caps:
  awkward_layout_strategy: requires_contiguous
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 32                  # f32 element granular

cost:
  provenance: judge_measured
  class: cheap_elementwise
  flops: "out_elem"                            # one f64 add per non-skipped output element
  bytes_moved: "(out_elem + in_elem) * 4"      # read grad_out (F32) + write grad_in (F32); + in_elem*8 f64 scratch
  overhead_ns: ~
  memory: { device_bytes: 0, host_bytes: "in_elem * 8", disk_bytes: 0 }   # f64 accumulator scratch

precision:
  bit_stable_on_same_hardware: true            # fixed walk order, deterministic f64 accumulation
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "f64 accumulator scratch; deterministic accumulation order; narrow to f32 on store."

determinism: same_hardware_bitwise
```

## pad_backward_f64  (Pad backward — f64)


One-line: Pad gradient on f64; accumulates grad_out into grad_in over the forward index mapping (native f64 accumulator).

Backward of `Pad` on `f64`. Identical structure to `pad_backward_f32` but the accumulator is
native `f64` (the widen/narrow are identity), so it is lossless end-to-end. Walks `out_elem` output
positions, maps each to its input position per `mode_tag` (Constant skips padded slots), accumulates
into an `in_elem`-sized f64 scratch, then writes each input slot. `grad_in` is fully written;
`aliasing: none`. Bandwidth-bound. Returns `Result`.

```fkc
kernel: pad_backward_f64
op_kind: PadBackward
blurb: "Pad gradient on f64; accumulates grad_out into grad_in over the forward index mapping (native f64 accumulator)."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_backward_f64"   # byte_kernels.rs:788
kernel_revision_hash: auto

accept:
  inputs:
    - name: grad_out
      dtypes: [F64]
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=grad_in; element_count == out_elem"
  op_params:
    variant: PadBackward
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len()" }
      mode_tag:  { kind: u8, constraint: "in {0 Constant, 1 Reflect, 2 Replicate}" }

return:
  outputs:
    - name: grad_in
      dtype_rule: passthrough(grad_out)        # F64 in → F64 out
      shape_rule: from_params(in_shape)
      layout_guarantee: contiguous
      aliasing: none

caps:
  awkward_layout_strategy: requires_contiguous
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 64                  # f64 element granular

cost:
  provenance: judge_measured
  class: cheap_elementwise
  flops: "out_elem"
  bytes_moved: "(out_elem + in_elem) * 8"      # read grad_out (F64) + write grad_in (F64); native f64 scratch
  overhead_ns: ~
  memory: { device_bytes: 0, host_bytes: "in_elem * 8", disk_bytes: 0 }

precision:
  bit_stable_on_same_hardware: true            # native f64; lossless; deterministic walk order
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Native f64 accumulator (lossless); deterministic accumulation order."

determinism: same_hardware_bitwise
```

## pad_backward_bf16  (Pad backward — bf16)


One-line: Pad gradient on bf16; accumulates in f64 scratch (widened from bf16), narrows to bf16 on store.

Backward of `Pad` on `bf16`. Same walk as the other backward kernels, but each `grad_out[out_flat]`
is widened `bf16 → f64` before accumulation, the per-input-slot sum is held in an `in_elem`-sized
**f64** scratch, and the final value is narrowed `f64 → f32 → bf16` on store. The f64 accumulator is
the precision invariant — when many output positions fold onto one input slot (Reflect/Replicate
overlaps) a half-precision accumulator would lose contributions, so accumulation is done wide.
`grad_in` is fully written; `aliasing: none`. Bandwidth-bound. Returns `Result`.

```fkc
kernel: pad_backward_bf16
op_kind: PadBackward
blurb: "Pad gradient on bf16; accumulates in f64 scratch (widened from bf16), narrows to bf16 on store."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_backward_bf16"   # byte_kernels.rs:789
kernel_revision_hash: auto

accept:
  inputs:
    - name: grad_out
      dtypes: [BF16]
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=grad_in; element_count == out_elem"
  op_params:
    variant: PadBackward
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len()" }
      mode_tag:  { kind: u8, constraint: "in {0 Constant, 1 Reflect, 2 Replicate}" }

return:
  outputs:
    - name: grad_in
      dtype_rule: passthrough(grad_out)        # BF16 in → BF16 out
      shape_rule: from_params(in_shape)
      layout_guarantee: contiguous
      aliasing: none

caps:
  awkward_layout_strategy: requires_contiguous
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 16                  # bf16 element granular

cost:
  provenance: judge_measured
  class: cheap_elementwise
  flops: "out_elem"                            # one widened f64 add per non-skipped output element
  bytes_moved: "(out_elem + in_elem) * 2"      # read grad_out (BF16) + write grad_in (BF16); + in_elem*8 f64 scratch
  overhead_ns: ~
  memory: { device_bytes: 0, host_bytes: "in_elem * 8", disk_bytes: 0 }   # f64 accumulator scratch

precision:
  bit_stable_on_same_hardware: true            # f64 accumulation; deterministic walk order; narrow on store
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Accumulator widened to f64 (avoids loss when many outputs fold onto one input slot); narrow f64->f32->bf16 on store."

determinism: same_hardware_bitwise
```

## pad_backward_f16  (Pad backward — f16)


One-line: Pad gradient on f16; accumulates in f64 scratch (widened from f16), narrows to f16 on store.

Backward of `Pad` on `f16`. Identical to `pad_backward_bf16` with the IEEE half type: each
`grad_out` element is widened `f16 → f64`, summed in an `in_elem`-sized f64 scratch, and narrowed
`f64 → f32 → f16` on store. f64 accumulator is the precision invariant for the many-to-one fold.
`grad_in` is fully written; `aliasing: none`. Bandwidth-bound. Returns `Result`.

```fkc
kernel: pad_backward_f16
op_kind: PadBackward
blurb: "Pad gradient on f16; accumulates in f64 scratch (widened from f16), narrows to f16 on store."
backend: Cpu
kernel_source: "portable-cpu"
entry_point: "fuel_cpu_backend::byte_kernels::pad_backward_f16"   # byte_kernels.rs:790
kernel_revision_hash: auto

accept:
  inputs:
    - name: grad_out
      dtypes: [F16]
      layout: { contiguous: required, strided: rejected, broadcast_stride0: rejected, start_offset: rejected, reverse_strides: rejected }
      rank: any
      shape_constraint: "same_rank=grad_in; element_count == out_elem"
  op_params:
    variant: PadBackward
    fields:
      in_shape:  { kind: "Vec<usize>" }
      out_shape: { kind: "Vec<usize>", constraint: "out_shape[i] == in_shape[i] + padding[i].0 + padding[i].1" }
      padding:   { kind: "Vec<(usize,usize)>", constraint: "len == in_shape.len()" }
      mode_tag:  { kind: u8, constraint: "in {0 Constant, 1 Reflect, 2 Replicate}" }

return:
  outputs:
    - name: grad_in
      dtype_rule: passthrough(grad_out)        # F16 in → F16 out
      shape_rule: from_params(in_shape)
      layout_guarantee: contiguous
      aliasing: none

caps:
  awkward_layout_strategy: requires_contiguous
  fast_paths: []
  in_place: false
  alignment_bytes: 64
  access_granularity_bits: 16                  # f16 element granular

cost:
  provenance: judge_measured
  class: cheap_elementwise
  flops: "out_elem"
  bytes_moved: "(out_elem + in_elem) * 2"      # read grad_out (F16) + write grad_in (F16); + in_elem*8 f64 scratch
  overhead_ns: ~
  memory: { device_bytes: 0, host_bytes: "in_elem * 8", disk_bytes: 0 }

precision:
  bit_stable_on_same_hardware: true
  max_ulp: ~
  max_relative: ~
  max_absolute: ~
  audited: true
  notes: "Accumulator widened to f64 (avoids loss when many outputs fold onto one input slot); narrow f64->f32->f16 on store."

determinism: same_hardware_bitwise
```