Portable, deliberately unfused executor for canonical ModelPlan operations.
This crate is a correctness oracle, not a serving backend. It has no CUDA dependency and no external engine fallback. Unsupported canonical operations return a named error.