Function captured_beat_is_canonical_kernel 

pub fn captured_beat_is_canonical_kernel(
    candidate: SignerOutputBeat,
    expected_beat: b6,
    frame_active: bool,
    expected_job: b32,
    expected_cluster: b2,
) -> bool

Validate every byte-control and identity invariant before a BRAM write.