### `wai.world.model`'s integer renderer through the integer operator set

- **The lowering, from the models the renderer holds.** `wai-ops` gains
  `lower::world_net` and `lower::world_net_loaded`: `world/1`
  ([integer-operators](extensions/integer-operators.md) §13.5, informative) of two
  networks already parsed, the second loading `T` before it lowers `g_s`. Both write
  and refuse what `lower::world` does from the bytes; the committed sets' graphs and
  certificates are unchanged.
- **No `ops` member.** The renderer runs through the operator set, but its lowering is
  informative: the capability's registered payload is its signed action trace, and no
  payload text yet binds a trace to a renderer's set. SPEC §5's row cites §13.5, and the
  registry's test holds that `wai.world.model` has no `ops` member.
- **The direct guard, test-only.** `int_world::legacy::checked` runs the direct renderer
  with the check every other integer decoder made before each layer
  (`run_net_checked`); the tests hold the `check` ranges of `world/1` to it, layer by
  layer, at the edge of every range and through the whole renderer.
- **The switch.** `int_world::{decode, decode_deltas, decode_planes}`, and the browser's
  `WorldModel`, now render through `world/1`: `T` and `g_s` lowered and loaded under
  `acc64` once (`int_world::load`, an `int_world::World`), then planned on the latent's
  shape, then run frame by frame. Every committed frame and clip digest is unchanged, on
  every leg and in wasm32. Each now returns a `Result`; `WorldModel`'s methods throw on a
  refusal. The per-row `step`, `step_delta` and `step_planes` of a parsed model are
  replaced by `World::step`, `World::step_delta`, `World::step_action` and
  `World::render`. The direct renderer is `int_world::legacy`, test-only (`legacy_int`).
- **Planned breaks** (integer-operators §15.3 item 2, SPEC §8). Before the first frame,
  where the direct renderer rendered from the input or panicked: a set whose `afrac` is
  outside `1..=30` or unequal, with no action plane, or that breaks a `WHM1` network's
  rules (`model_mismatch`); a row without one value per action plane, and `T` or `g_s`
  that does not fit the latent (`model_mismatch`); a latent that is not `C·lat·lat`
  values (`geometry_mismatch`), of side 0 or past `2^26` values, and a move whose plane
  value leaves `i64`. A value outside a `check` range is refused (`field_range`). No
  committed set or clip is affected.
- **Memory.** With its set loaded, a clip through the operator set holds no more than the
  direct renderer held for it, and so do one step and one frame
  (`tests/int_world_memory.rs`).

