Kernel Contracts — formal specs for ML kernel correctness
ML kernels ship with implicit contracts nobody writes down, leading to silent disagreements across AMD, NVIDIA, and other silicon. This paper proposes a specification language with eight components (identifier, scope, precondition, postcondition, tolerance, reference oracle, measurement protocol, violation signature) to formalize what a kernel actually computes. For hardware engineers and framework maintainers shipping kernels that must behave identically across platforms.