diff --git a/.github/workflows/REVIEW.md b/.github/workflows/REVIEW.md
index 063fd62f51..3e55ae3e07 100644
--- a/.github/workflows/REVIEW.md
+++ b/.github/workflows/REVIEW.md
@@ -2,15 +2,16 @@
 
 **Read `REVIEW_COMMON.md` (repo root) first - its contract binds this checklist.**
 Architecture doc: `skills/internal/preflight.md` (repo root). A per-PR check is a step, a
-matrix cell, or a workflow trigger whose failure turns a branch or a published artifact red
-before a human merges or ships it - a `pull_request` lane's step and a branch-push lane's
-smoke alike.
+matrix cell, or a workflow trigger whose failure means the tree or a published artifact is
+wrong, and that turns the lane red before a human merges or ships it - a `pull_request` lane's
+step and a branch-push lane's smoke alike. A provisioning step - a toolchain install, a version
+pin - is not itself a per-PR check.
 
-**A diff that weakens a per-PR check is a defect: deleting it while no per-PR lane still
-runs its cases, stopping its failure from failing the lane (`continue-on-error`, a trailing
-`|| true`, a swallowed exit code), shrinking what it checks, or narrowing its condition to
-anything but a `matrix.role` condition that still runs it on every pull request or the
-nightly cron.**
+**A diff that weakens a per-PR check is a defect: deleting it, or a step it depends on, while
+no per-PR lane still runs its cases, stopping its failure from failing the lane
+(`continue-on-error`, a trailing `|| true`, a swallowed exit code), shrinking what it checks, or
+narrowing its condition to anything but a `matrix.role` condition that still runs it on every
+pull request.**
 
 **A per-PR check the diff adds fails the lane when it finds a defect.**
 
@@ -29,10 +30,10 @@ preflight gate - a check `preflight` runs locally before a push - that keeps it
 (`skills/internal/preflight.md` sec."extended_checks.yml") or states the platform no per-PR
 cell has.** A per-PR job fits 35 minutes; what does not fit moves.
 
-**A diff that adds or changes a per-PR check states a run of that check's command, on the
-lane's platform, in its PR body or commit message; a green run of that lane on the PR's head
-commit is that evidence.** A check that fails for a non-defect turns a green branch red for
-everyone.
+**A diff that adds or changes a per-PR check, or adds, changes, or removes a step a per-PR
+check depends on, states a run of that check's command, on the lane's platform, in its PR body
+or commit message; a green run of that lane on the PR's head commit is that evidence.** A check
+that fails for a non-defect turns a green branch red for everyone.
 
 **A step in `pages.yml` that names more than one id under `examples/games/` spells them as a
 `for g in <ids>; do` loop, never inline.** `examples/games/REVIEW.das` (repo root) reads the
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 669964d255..0da83354d0 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -39,14 +39,6 @@ jobs:
     - name: "Install CMake and Ninja"
       uses: lukka/get-cmake@latest
 
-    # The wasm64 (MEMORY64) modules emscripten emits refuse to load under a node older than 23
-    # ("This emscripten-generated code requires node v23.0.0"); ubuntu-latest ships 22, and the
-    # DlimConfiguration probe below runs one of those modules under the runner's node.
-    - name: "Install node 24 (the wasm64 probe runs under it)"
-      uses: actions/setup-node@v4
-      with:
-        node-version: 24
-
     # The host daslang now builds with dasGlfw/dasOpenGL ON so it can drive the
     # /examples game cross-compile (daspkg release wasm). dasGlfw's
     # find_package(OpenGL REQUIRED) needs the GL + X11 dev headers.
@@ -213,9 +205,9 @@ jobs:
     # WASM build: the wasm32 interpreter playground (daslang_static) + the wasm64
     # compiled path (runtime/module archives, compute samples, and the /examples
     # games). Skipped on a cache hit — the cached web/output + web/output64 are
-    # reused. wasm32 is the universal interpreter fallback; everything COMPILED
-    # is wasm64 (the cross-compile is layout-correct only when host ptr width ==
-    # target ptr width).
+    # reused. Everything COMPILED is cross-compiled as wasm64 (layout-correct only
+    # when host ptr width == target ptr width) and lowered to a 32-bit memory at
+    # link (-sMEMORY64=2), so it runs on every engine, WebKit included.
     - name: "Build WASM (Emscripten): playground + wasm64 examples"
       if: steps.wasm-cache.outputs.cache-hit != 'true'
       run: |
@@ -241,7 +233,7 @@ jobs:
         # 1. wasm32 interpreter playground (daslang_static) + vendored UI + the example .das
         #    sources staged into site/playground. THREADED build (-pthread + the imgui family),
         #    so new_thread / JobQue map to Web Workers and every playground sample runs
-        #    cross-origin-isolated (coi-serviceworker drops the memory64 gate for /playground).
+        #    cross-origin-isolated (coi-serviceworker).
         #    stage_site_playground also generates the furier + path_tracer_lab samples from the
         #    canonical examples/graphics sources. If the imgui-family build breaks (an external's
         #    master regressed), degrade rather than blocking every deploy: drop the clones and
@@ -298,8 +290,8 @@ jobs:
         #    drives its .das_package release_wasm_build to produce the 3 wasm64
         #    archives on demand — no daspkg install step (the example declares
         #    no deps). Non-fatal — a wasm-build hiccup must not red the whole
-        #    deploy; the furier card is skipped at stage time below (examples.js
-        #    shows a "needs memory64" note when the iframe is unavailable).
+        #    deploy; the furier card is skipped at stage time below (a placeholder
+        #    page stands in for the iframe).
         if ./bin/daslang utils/daspkg/main.das -- \
                 release wasm --root examples/graphics/furier --out "$REPO/web/output64/examples"; then
             echo "furier wasm build OK"
@@ -545,9 +537,9 @@ jobs:
         fi
 
         # /examples/ runtime: the interpreted runner harness + per-game artifacts.
-        # Each game dir holds BOTH the compiled wasm64 build (loaded in an iframe on
-        # memory64 engines) AND the .das sources + HUD font the interpreted fallback
-        # (_interp.html) mounts on Safari/iOS. The page UI (examples.html, posters,
+        # Each game dir holds BOTH the compiled build (loaded in an iframe on every
+        # engine) AND the .das sources + HUD font the interpreted runner
+        # (_interp.html) mounts under ?force=interp. The page UI (examples.html, posters,
         # files/examples.js) was already staged above via cp site/examples.html +
         # cp -r site/files.
         mkdir -p _site/examples
@@ -568,11 +560,11 @@ jobs:
             cp modules/dasStbImage/fonts/droidsansmono.ttf "_site/examples/$g/"
         done
 
-        # furier — the ImGui-in-wasm showcase. wasm64-only: it bundles the compiled
+        # furier — the ImGui-in-wasm showcase. Compiled-only: it bundles the compiled
         # dasImgui module, which the universal interpreter can't bind, so there is NO
-        # interpreted fallback (no .das sources to stage). The card is always listed
+        # interpreted form (no .das sources to stage). The card is always listed
         # in examples.js, so stage the compiled build only when ALL THREE outputs are
-        # present; otherwise stage a small placeholder furier.html so a memory64 engine
+        # present; otherwise stage a small placeholder furier.html so the player
         # loads a friendly "being rebuilt" note instead of 404-ing the iframe (and
         # flipping the player to a bogus "running" on the 404 page's load event).
         mkdir -p _site/examples/furier
diff --git a/CHANGELIST.md b/CHANGELIST.md
index 1a41a07bd4..681af21422 100644
--- a/CHANGELIST.md
+++ b/CHANGELIST.md
@@ -95,6 +95,7 @@ A public site and service for the `[tune]` ecosystem: upload a tuned box's sidec
 - **On-demand wasm compilation** (#3628, #3630, #3633) - a fresh pre-warmed throwaway runtime per run, a content-addressed build queue behind a rootless-podman network-none sandboxed builder (`dasweb-buildd`), and standalone graphics/audio pages served from `run.daslang.io`
 - **The sample verifiers** (#3645, #3649, #3679) - a tier-1 batch compile gate over all 39 curated samples per PR, and a nightly playwright leg that drives the live playground per sample per engine (first sweep 70/77, zero false positives)
 - **Stability round** (#3635, #3648, #3650, #3652, #3667, #3714) - canvas size reconciled to the CSS box every frame (retiring three workarounds), wasm memory growth to 2 GB with reported OOM, channel `gather` outside the lock (the "dead window" wedge), the runtime wasm compiled once per page (the browser-tab OOM cliff), and a scripted fail-closed toolchain-bump protocol
+- **Every browser** (#4051) - the compiled web builds link `-sMEMORY64=2` (wasm64 pointers over a memory lowered to 32-bit) and drop `+relaxed-simd`, so the example cards, the playground's wasm engine and the dasllama.io examples run on Safari and iOS; the memory64 gates are gone from both sites, and dasllama.io serves its examples under COEP `require-corp`
 
 #### The Fast Dev Loop: Module Cache + Split JIT (#3683, #3687, #3692, #3693, #3701, #3707, #3936)
 
diff --git a/doc/source/reference/utils/daspkg.rst b/doc/source/reference/utils/daspkg.rst
index e8a53d61d5..9e1dfee9b4 100644
--- a/doc/source/reference/utils/daspkg.rst
+++ b/doc/source/reference/utils/daspkg.rst
@@ -133,7 +133,8 @@ Options:
 - ``--quick`` -- on ``release``, accept a complete existing ``[tune]``
   sidecar instead of re-minting (``--paranoid`` is accepted for
   compatibility; the tuner runs one margin-decided protocol).
-- ``--wasm`` -- on ``build``, target wasm64 (memory64).
+- ``--wasm`` -- on ``build``, target wasm64 (memory64, lowered to a 32-bit
+  memory at link so every browser runs the artifact).
 - ``--wasm-lib-dir <path>`` -- directory holding the wasm64 archives;
   default ``<das_root>/web/output64/lib``.
 
diff --git a/examples/REVIEW.md b/examples/REVIEW.md
index bd2928dbd0..94ce6075d3 100644
--- a/examples/REVIEW.md
+++ b/examples/REVIEW.md
@@ -5,8 +5,8 @@
 **A `.das` in this folder tree that a game's `main.das` requires, directly or through another
 required file, answers to `games/REVIEW.md` too - wherever the diff puts it.**
 
-**A folder with a `web_shell.html`, and every `.das` and `models.json` in it, answers to
-`dasLLAMA/REVIEW.md` too, wherever the diff puts it.**
+**Every file in a folder that holds a `web_shell.html` answers to `dasLLAMA/REVIEW.md` (beside
+this file) too - wherever in this tree that folder sits.**
 
 **A diff that drops `require live/audio_live` from a program states, in the PR body, why that
 program's audio is meant to die with a reload** - `audio_live` is what carries the audio
diff --git a/examples/dasLLAMA/REVIEW.md b/examples/dasLLAMA/REVIEW.md
index 21428448bd..6c9f08b3ae 100644
--- a/examples/dasLLAMA/REVIEW.md
+++ b/examples/dasLLAMA/REVIEW.md
@@ -7,20 +7,27 @@ A browser example is a subfolder here with a `web_shell.html` (`ARCHITECTURE.md`
 rules below bind browser examples; a rule naming `library/` binds that folder instead.
 
 **A browser example reads its input inside its own frame - a `glfwSet*Callback` written in
-`.das` is a defect; an example that draws its own text polls each input every frame and
-edge-detects it (`glfwGetKey`, `glfwGetMouseButton`), and one on the imgui harness reads ImGui's
-state.** In the browser build a callback lambda fires outside any frame of the program and the
-program traps (`ARCHITECTURE.md` sec. 3.3).
-
-**A browser example's `web_shell.html` gives the canvas element `max-width` / `max-height` so the
-element's box is exactly the rendered image - never `object-fit` on a canvas stretched to fill the
-page area around it.** A click maps through the element's box with one ratio per axis, so a
-stretched box mis-maps every click (`ARCHITECTURE.md` sec. 3.3).
+`.das` is a defect; an example that draws its own text polls each input every frame and acts
+when it goes down, never on every frame it stays down - a repeat comes from the example's own
+hold timer (`glfwGetKey`, `glfwGetMouseButton`) - and one on the imgui harness reads ImGui's
+state.** In the browser build a callback lambda fires outside any frame
+of the program and the program traps (`ARCHITECTURE.md` sec. 3.3).
+
+**A browser example whose `main.das` reads the mouse - `glfwGetMouseButton`, or ImGui's mouse
+state through the imgui harness - gives the canvas element `max-width` / `max-height` in its
+`web_shell.html` - never `object-fit` on a canvas stretched to fill the page area around it.** A
+click maps through the element's box with one ratio per axis, so a stretched box mis-maps every
+click (`ARCHITECTURE.md` sec. 3.3).
 
 **A browser example's `web_shell.html` must reload a page the browser restored from its
 back-forward cache - a `pageshow` handler that reloads when `persisted` is set.** Such a page
 comes back with its workers and audio output frozen out of step (`ARCHITECTURE.md` sec. 3.1).
 
+**A browser example's `web_shell.html` never refuses a browser on a WebAssembly feature probe -
+it gates on the page's cross-origin isolation (`crossOriginIsolated`, `SharedArrayBuffer`)
+alone.** The build runs on every engine, so a feature gate only refuses browsers that would have
+run it.
+
 **A diff that plays a second sound creates a new status box (`set_status_update`) for it and
 releases the first when its sound ends - never reuse a box across sounds.** The mixer's last
 report for the first sound lands after the second attaches, and reads as the second's stop
@@ -43,6 +50,6 @@ writes nothing (`ARCHITECTURE.md` sec. 3.8).
 
 **A diff that adds an entry point to `library/dasllama_lib.das` gives it `[export_c]` and a
 result `daslib/c_api_header.das` can spell in C - a scalar, a string, a pointer, an enum, a
-vector or a POD struct, never an array, a fixed array, a table or a tuple.** An `[export_c]`
+vector, a POD struct, or nothing at all, never an array, a fixed array, a table or a tuple.** An `[export_c]`
 whose signature that describer refuses is a hard emit error, not a skipped export
 (`ARCHITECTURE.md` sec. 3.8).
diff --git a/examples/dasLLAMA/parrot/web_shell.html b/examples/dasLLAMA/parrot/web_shell.html
index 3973e44e56..9bfc221f47 100644
--- a/examples/dasLLAMA/parrot/web_shell.html
+++ b/examples/dasLLAMA/parrot/web_shell.html
@@ -11,7 +11,7 @@
 <link rel="stylesheet" href="/files/dasllama-io.css">
 <script src="/files/github-star.js" defer></script>
 <!-- Analytics — site code "dasllama" under the borisbat goatcounter account -->
-<script data-goatcounter="https://dasllama.goatcounter.com/count" async src="//gc.zgo.at/count.js"></script>
+<script data-goatcounter="https://dasllama.goatcounter.com/count" async crossorigin="anonymous" src="//gc.zgo.at/count.js"></script>
 <style>
   html, body { margin: 0; height: 100%; background: #12101a; overflow: hidden; }
   body {
@@ -51,10 +51,9 @@
 </head>
 <body>
 <!-- The parrot shell: the dasllama.io nav on top (its css and script come from the site
-     root, /files/), then the stage. The shell checks the browser first - the build is wasm64
-     (memory64) with real Web Workers, so it needs an engine with memory64 (Chrome or Edge 133+,
-     Firefox 134+; Safari has none yet, and every iPhone and iPad browser is Safari's engine) on a
-     cross-origin-isolated page; a browser without either gets the note below and never fetches a
+     root, /files/), then the stage. The shell checks the page first - the build runs its real
+     Web Workers on SharedArrayBuffer, so it needs a cross-origin-isolated page; a page without
+     it gets the note below and never fetches a
      byte. Then it reads models/manifest.json - the list the deploy minted, stamped with the
      IMAGE_VERSION it minted at - and refuses a set minted for another version before fetching a
      megabyte of it: the program would decline the images anyway, this way the reason is on the
@@ -96,18 +95,11 @@ <h1>parrot</h1>
   // modules/dasLLAMA/dasllama/dasllama_image.das); 0 means "not stamped" (a local rig), no check
   var PAGE_IMAGE_VERSION = /* @image-version */ 0;
 
-  // wasm64 (memory64): validate a minimal module whose memory section carries the memory64
-  // flag (0x04) - true only where the engine parses it, unlike a Memory descriptor probe an
-  // engine can silently downgrade. Same probe as daslang.io's examples page.
-  var HAS_WASM64 = (function () {
-    try { return WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])); }
-    catch (e) { return false; }
-  })();
   // the -pthread build runs its workers on SharedArrayBuffer, which a page gets only when the
   // server sent the cross-origin isolation headers
   var HAS_ISOLATION = !!(self.crossOriginIsolated && typeof SharedArrayBuffer !== 'undefined');
   var FORCE = new URLSearchParams(location.search).get('force');
-  var SUPPORTED = FORCE === 'unsupported' ? false : (HAS_WASM64 && HAS_ISOLATION);
+  var SUPPORTED = FORCE === 'unsupported' ? false : HAS_ISOLATION;
 
   function setStatus(text) { document.getElementById('status').textContent = text; }
   function showNote(status, html) {
@@ -131,17 +123,10 @@ <h1>parrot</h1>
   window.addEventListener('pageshow', function (e) { if (e.persisted) location.reload(); });
 
   if (!SUPPORTED) {
-    if (FORCE === 'unsupported' || !HAS_WASM64) {
-      showNote('needs a memory64 browser',
-        '<b>This browser cannot run parrot.</b><br>The example is dasLLAMA compiled to ' +
-        'WebAssembly memory64, which needs Chrome or Edge 133+ or Firefox 134+ on a desktop. Safari ' +
-        'does not support memory64 yet, and on iPhone and iPad every browser runs on Safari\'s engine.');
-    } else {
-      showNote('needs SharedArrayBuffer',
-        '<b>SharedArrayBuffer is not available on this page.</b><br>The build runs on Web Workers ' +
-        'over it, and a browser grants it only to a cross-origin-isolated page - one the server ' +
-        'sends the Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy headers for.');
-    }
+    showNote('needs SharedArrayBuffer',
+      '<b>SharedArrayBuffer is not available on this page.</b><br>The build runs on Web Workers ' +
+      'over it, and a browser grants it only to a cross-origin-isolated page - one the server ' +
+      'sends the Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy headers for.');
   } else {
     // the probes passed but the program refuses the browser anyway (emcc's own user-agent check
     // throws "compiled without support for <browser>" at the top of its script): the error
diff --git a/examples/dasLLAMA/storyteller/web_shell.html b/examples/dasLLAMA/storyteller/web_shell.html
index 222745a705..843964554a 100644
--- a/examples/dasLLAMA/storyteller/web_shell.html
+++ b/examples/dasLLAMA/storyteller/web_shell.html
@@ -11,7 +11,7 @@
 <link rel="stylesheet" href="/files/dasllama-io.css">
 <script src="/files/github-star.js" defer></script>
 <!-- Analytics — site code "dasllama" under the borisbat goatcounter account -->
-<script data-goatcounter="https://dasllama.goatcounter.com/count" async src="//gc.zgo.at/count.js"></script>
+<script data-goatcounter="https://dasllama.goatcounter.com/count" async crossorigin="anonymous" src="//gc.zgo.at/count.js"></script>
 <style>
   html, body { margin: 0; height: 100%; background: #12101a; overflow: hidden; }
   body {
@@ -44,11 +44,9 @@
 </head>
 <body>
 <!-- The storyteller's shell: the dasllama.io nav on top (its css and script come from the
-     site root, /files/), then the stage. The shell checks the browser first - the build is
-     wasm64 (memory64) with real Web Workers, so it needs an engine with memory64 (Chrome or
-     Edge 133+, Firefox 134+; Safari has none yet, and every iPhone and iPad browser is Safari's
-     engine) on a cross-origin-isolated page; a browser
-     without either gets the note below and never fetches a byte. Then it reads
+     site root, /files/), then the stage. The shell checks the page first - the build runs its
+     real Web Workers on SharedArrayBuffer, so it needs a cross-origin-isolated page; a page
+     without it gets the note below and never fetches a byte. Then it reads
      models/manifest.json - the list the deploy minted, stamped with the IMAGE_VERSION it minted
      at - and refuses a set minted for another version before fetching a megabyte of it: the
      program would decline the images anyway, this way the reason is on the page. Otherwise it
@@ -86,18 +84,11 @@ <h1>storyteller</h1>
   // modules/dasLLAMA/dasllama/dasllama_image.das); 0 means "not stamped" (a local rig), no check
   var PAGE_IMAGE_VERSION = /* @image-version */ 0;
 
-  // wasm64 (memory64): validate a minimal module whose memory section carries the memory64
-  // flag (0x04) - true only where the engine parses it, unlike a Memory descriptor probe an
-  // engine can silently downgrade. Same probe as daslang.io's examples page.
-  var HAS_WASM64 = (function () {
-    try { return WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])); }
-    catch (e) { return false; }
-  })();
   // the -pthread build runs its workers on SharedArrayBuffer, which a page gets only when the
   // server sent the cross-origin isolation headers
   var HAS_ISOLATION = !!(self.crossOriginIsolated && typeof SharedArrayBuffer !== 'undefined');
   var FORCE = new URLSearchParams(location.search).get('force');
-  var SUPPORTED = FORCE === 'unsupported' ? false : (HAS_WASM64 && HAS_ISOLATION);
+  var SUPPORTED = FORCE === 'unsupported' ? false : HAS_ISOLATION;
 
   function setStatus(text) { document.getElementById('status').textContent = text; }
   function showNote(status, html) {
@@ -121,17 +112,10 @@ <h1>storyteller</h1>
   window.addEventListener('pageshow', function (e) { if (e.persisted) location.reload(); });
 
   if (!SUPPORTED) {
-    if (FORCE === 'unsupported' || !HAS_WASM64) {
-      showNote('needs a memory64 browser',
-        '<b>This browser cannot run the storyteller.</b><br>The example is dasLLAMA compiled to ' +
-        'WebAssembly memory64, which needs Chrome or Edge 133+ or Firefox 134+ on a desktop. Safari ' +
-        'does not support memory64 yet, and on iPhone and iPad every browser runs on Safari\'s engine.');
-    } else {
-      showNote('needs SharedArrayBuffer',
-        '<b>SharedArrayBuffer is not available on this page.</b><br>The build runs on Web Workers ' +
-        'over it, and a browser grants it only to a cross-origin-isolated page - one the server ' +
-        'sends the Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy headers for.');
-    }
+    showNote('needs SharedArrayBuffer',
+      '<b>SharedArrayBuffer is not available on this page.</b><br>The build runs on Web Workers ' +
+      'over it, and a browser grants it only to a cross-origin-isolated page - one the server ' +
+      'sends the Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy headers for.');
   } else {
     // the probes passed but the program refuses the browser anyway (emcc's own user-agent check
     // throws "compiled without support for <browser>" at the top of its script): the error
diff --git a/examples/dasLLAMA/storywish/web_shell.html b/examples/dasLLAMA/storywish/web_shell.html
index ea440a34c7..b46478c7e1 100644
--- a/examples/dasLLAMA/storywish/web_shell.html
+++ b/examples/dasLLAMA/storywish/web_shell.html
@@ -11,7 +11,7 @@
 <link rel="stylesheet" href="/files/dasllama-io.css">
 <script src="/files/github-star.js" defer></script>
 <!-- Analytics — site code "dasllama" under the borisbat goatcounter account -->
-<script data-goatcounter="https://dasllama.goatcounter.com/count" async src="//gc.zgo.at/count.js"></script>
+<script data-goatcounter="https://dasllama.goatcounter.com/count" async crossorigin="anonymous" src="//gc.zgo.at/count.js"></script>
 <style>
   html, body { margin: 0; height: 100%; background: #12101a; overflow: hidden; }
   body {
@@ -44,10 +44,9 @@
 </head>
 <body>
 <!-- The storywish shell: the dasllama.io nav on top (its css and script come from the site
-     root, /files/), then the stage. The shell checks the browser first - the build is wasm64
-     (memory64) with real Web Workers, so it needs an engine with memory64 (Chrome or Edge 133+,
-     Firefox 134+; Safari has none yet, and every iPhone and iPad browser is Safari's engine) on a
-     cross-origin-isolated page; a browser without either gets the note below and never fetches a
+     root, /files/), then the stage. The shell checks the page first - the build runs its real
+     Web Workers on SharedArrayBuffer, so it needs a cross-origin-isolated page; a page without
+     it gets the note below and never fetches a
      byte. Then it reads models/manifest.json - the list the deploy minted, stamped with the
      IMAGE_VERSION it minted at - and refuses a set minted for another version before fetching a
      megabyte of it: the program would decline the images anyway, this way the reason is on the
@@ -85,18 +84,11 @@ <h1>storywish</h1>
   // modules/dasLLAMA/dasllama/dasllama_image.das); 0 means "not stamped" (a local rig), no check
   var PAGE_IMAGE_VERSION = /* @image-version */ 0;
 
-  // wasm64 (memory64): validate a minimal module whose memory section carries the memory64
-  // flag (0x04) - true only where the engine parses it, unlike a Memory descriptor probe an
-  // engine can silently downgrade. Same probe as daslang.io's examples page.
-  var HAS_WASM64 = (function () {
-    try { return WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])); }
-    catch (e) { return false; }
-  })();
   // the -pthread build runs its workers on SharedArrayBuffer, which a page gets only when the
   // server sent the cross-origin isolation headers
   var HAS_ISOLATION = !!(self.crossOriginIsolated && typeof SharedArrayBuffer !== 'undefined');
   var FORCE = new URLSearchParams(location.search).get('force');
-  var SUPPORTED = FORCE === 'unsupported' ? false : (HAS_WASM64 && HAS_ISOLATION);
+  var SUPPORTED = FORCE === 'unsupported' ? false : HAS_ISOLATION;
 
   function setStatus(text) { document.getElementById('status').textContent = text; }
   function showNote(status, html) {
@@ -120,17 +112,10 @@ <h1>storywish</h1>
   window.addEventListener('pageshow', function (e) { if (e.persisted) location.reload(); });
 
   if (!SUPPORTED) {
-    if (FORCE === 'unsupported' || !HAS_WASM64) {
-      showNote('needs a memory64 browser',
-        '<b>This browser cannot run storywish.</b><br>The example is dasLLAMA compiled to ' +
-        'WebAssembly memory64, which needs Chrome or Edge 133+ or Firefox 134+ on a desktop. Safari ' +
-        'does not support memory64 yet, and on iPhone and iPad every browser runs on Safari\'s engine.');
-    } else {
-      showNote('needs SharedArrayBuffer',
-        '<b>SharedArrayBuffer is not available on this page.</b><br>The build runs on Web Workers ' +
-        'over it, and a browser grants it only to a cross-origin-isolated page - one the server ' +
-        'sends the Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy headers for.');
-    }
+    showNote('needs SharedArrayBuffer',
+      '<b>SharedArrayBuffer is not available on this page.</b><br>The build runs on Web Workers ' +
+      'over it, and a browser grants it only to a cross-origin-isolated page - one the server ' +
+      'sends the Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy headers for.');
   } else {
     // the probes passed but the program refuses the browser anyway (emcc's own user-agent check
     // throws "compiled without support for <browser>" at the top of its script): the error
diff --git a/modules/dasLLAMA/PERF_LEDGER.md b/modules/dasLLAMA/PERF_LEDGER.md
index e1f1762042..a87faa7a98 100644
--- a/modules/dasLLAMA/PERF_LEDGER.md
+++ b/modules/dasLLAMA/PERF_LEDGER.md
@@ -11,6 +11,28 @@ what it costs today and what the fix would change.
 
 ## Entries
 
+- **LANDED (2026-09-16) - the browser build runs on every engine; `+relaxed-simd` leaves the
+  wasm feature string.** WebKit implements none of the relaxed opcodes, and the previous entry's
+  `+relaxed-simd` put `f32x4.relaxed_max` (the backend's lowering of an `nnan` vector max, which
+  the previous entry believed it never emitted) into function 298 of every release, so Safari
+  refused the whole module at validation. The feature is gone and the module links
+  `-sMEMORY64=2` (wasm64 pointers, the memory lowered to 32-bit). Cost measured on the storywish
+  page in Chrome (this M5, `DASLLAMA_ALLOW_UNTUNED=1`, one run each, steady-state clips): Pocket
+  TTS rtf 0.167-0.171 with the fused multiply-add, 0.167-0.171 without it - the split
+  `mul` + `add` costs nothing measurable, so the previous entry's first lever bought reach on
+  Chrome only in theory. Prefill and decode of the story model were not measured separately.
+
+  Provenance, **direction-grade** and **out-of-process**: the two readings compare two wasm
+  builds (the feature string with and without `+relaxed-simd`, same tree otherwise), and every
+  figure is read from a console line outside the timed program. Box: the M5 Max Mac (this
+  machine). Harness: the storywish page's own first story, reading the engine's
+  `dasLLAMA tts: ... rtf` line from the Chrome console; the artifact is the wasm64 release of
+  `examples/dasLLAMA/storywish` built by `daspkg release wasm` from the wasm-host worktree,
+  served locally by `site-dasllama/serve.py` to Chrome. Flags: the wasm cross target (not `-jit`,
+  not AOT), `DASLLAMA_ALLOW_UNTUNED=1` so `DAS_TUNE_POLICY` served the reference bodies, the
+  release's 16-worker pool. One story per build, the steady-state clips after the first two.
+  NOT board-grade: no record cell backs it, and an rtf read from a page console is not an
+  `lcpp_bench` figure.
 - **LANDED (2026-09-16) - the browser gets its FMA and an int8 dot, and the spin loop stops
   crossing into JS.** Four levers on the parrot page (Pocket TTS, zen2 box, Chrome with the window
   verified in front before AND after each run, 7 workers + team dispatch, `DASLLAMA_ALLOW_UNTUNED=1`
diff --git a/modules/dasLLAMA/REVIEW.md b/modules/dasLLAMA/REVIEW.md
index a641ba14cb..9f92f42744 100644
--- a/modules/dasLLAMA/REVIEW.md
+++ b/modules/dasLLAMA/REVIEW.md
@@ -197,7 +197,7 @@ rig and tool surface: any output another tool parses. A console-only diagnostic
 **A diff that falsifies a statement in checked-in text under this folder - docs, `//!` docstrings,
 `//` comments, or string data, any language - or in a document outside this folder whose own
 checklist routed this diff here, updates that text in the same change** - no lint reads text no
-`[arch]` cites; only the reviewer does.
+`[arch]` cites. A dated `PERF_LEDGER.md` row is refuted by a new dated row, never edited.
 
 **Weakening `dasllama_lint` (`dasllama/dasllama_lint.das`) - the compile-time check that a
 consumer requires only this module's public entry modules, matched by the resolved file's
@@ -208,7 +208,7 @@ charter line naming it a sanctioned public entry point, and the DASLLAMA001 erro
 naming it beside the facade. The allowed set is the table in the lint.
 
 **A STYLE037 or STYLE038 suppression, `// nolint:` or the file's `options _function_length` /
-`_cyclomatic_complexity`, on a function a follow-up ledger entry says can be shortened or split
+`_cyclomatic_complexity`, on a function a `followup_*.md` entry says can be shortened or split
 is a defect - land the ledgered split instead.** The warning keeps the entry visible; an entry
 asking that twin bodies merge into one template does not fire this rule.
 
@@ -267,7 +267,7 @@ one by one - a weight format, a serving lane (the quant form a tensor serves fro
 structure - that the charter does not name, lands, in the same change, the edit that keeps the
 charters true - in an `ARCHITECTURE_*.md` companion, never `ARCHITECTURE.md`.**
 
-**A follow-up ledger row whose work landed in this change is deleted, the rows below keep their
+**A `followup_*.md` row whose work landed in this change is deleted, the rows below keep their
 numbers - text cites rows by number - and when a row lists several items and one landed, that item
 goes and the row stays; every checked-in citation of what was deleted is repointed or dropped.**
 
diff --git a/modules/dasLLVM/ARCHITECTURE_TARGET_FEATURES.md b/modules/dasLLVM/ARCHITECTURE_TARGET_FEATURES.md
index 2696b5178d..c52abade3e 100644
--- a/modules/dasLLVM/ARCHITECTURE_TARGET_FEATURES.md
+++ b/modules/dasLLVM/ARCHITECTURE_TARGET_FEATURES.md
@@ -66,8 +66,8 @@ folds them into the quad lanes the generic form defines - exact for every int8 l
 first operand widens with ZExt rather than SExt, so the unsigned-by-signed form takes this same
 path instead of the 16-lane generic IR; the i16 product still holds every value that pair can make
 (255 * -128 = -32640), so the fold stays exact there too. The relaxed-SIMD dot
-(`i32x4.relaxed_dot_i8x16_i7x16_add_s`) is NOT what the generic op lowers to, though
-`+relaxed-simd` is in the feature string of sec.12: its second operand is 7-bit, so the sign trick that
+(`i32x4.relaxed_dot_i8x16_i7x16_add_s`) is NOT what the generic op lowers to, and sec.12 keeps
+the feature out of the string: its second operand is 7-bit, so the sign trick that
 would feed it (`dot(w, x) == dot(sign(x)*w, |x|)`) wraps at -128 in either operand and answers the
 wrong sign there - an operand a caller can bound to 7 bits is a different op, not this one.
 
@@ -166,12 +166,14 @@ a rebuild.
 
 ## 12. The wasm target's feature string {#wasm-feature-string}
 
-A wasm cross-compile gets `+simd128,+relaxed-simd,+nontrapping-fptoint`, with
-`+atomics,+bulk-memory` appended on the threaded rail (`wasm_target_features`). `+relaxed-simd` is
-in it for one instruction: `f32x4.relaxed_madd` is the only multiply-add wasm has, so without the
-feature a contracted multiply-add has nothing to become and splits back into `f32x4.mul` plus
-`f32x4.add` - every fused multiply-add of every kernel, gone. The engine chooses whether
-`relaxed_madd` fuses, so a float answer can differ by one rounding from the split form, which is
-the latitude every native FMA target already takes. Nothing else in the feature moves what this
-emitter produces: `f32x4.relaxed_min` / `_max` come only from their explicit builtins, which it
-never emits, and the relaxed dot is ruled out for the idot family by sec.9 above.
+A wasm cross-compile gets `+simd128,+nontrapping-fptoint`, with `+atomics,+bulk-memory` appended
+on the threaded rail (`wasm_target_features`). The string carries no `+relaxed-simd`, and the
+reason is reach, not codegen: WebKit implements none of the relaxed opcodes, so one of them
+anywhere in a module makes Safari and every iOS browser refuse the whole module at validation,
+and the browser builds ship to every engine. What the feature would buy is `f32x4.relaxed_madd`,
+the only multiply-add wasm has; without it a contracted multiply-add splits back into `f32x4.mul`
+plus `f32x4.add`. Measured on the Pocket TTS page in Chrome the split form runs at the same
+real-time factor as the fused one, so nothing is paid for the reach. The feature would also move
+more than the multiply-add: with it on, the backend lowers an `nnan` float min/max on a vector
+to `f32x4.relaxed_min` / `_max`, whose NaN and signed-zero answers are the engine's choice, and
+the relaxed dot stays ruled out for the idot family by sec.9 above whatever the string says.
diff --git a/modules/dasLLVM/REVIEW.md b/modules/dasLLVM/REVIEW.md
index 8b3d599ada..583e778dbd 100644
--- a/modules/dasLLVM/REVIEW.md
+++ b/modules/dasLLVM/REVIEW.md
@@ -30,9 +30,10 @@ there.
   script.** A child writes its caches relative to the cwd otherwise, which is the tree two
   concurrent runs share.
 
-- **A diff that adds or changes a branch on the target triple records in its PR body the
-  `-exe --jit-target=<triple>` build for that target that exercised the behavior.** The suite runs on
-  the host, so a target-triple branch is checked only by the artifact built for that target.
+- **A diff that adds or changes a branch keyed on the target triple, or changes code only a
+  cross target's arm of such a branch reaches, records in its PR body the
+  `-exe --jit-target=<triple>` build for that target that exercised the behavior.** The suite runs on the host, so a target-triple branch is checked
+  only by the artifact built for that target.
 
 - **A diff that adds work to, or moves work within, what `run_jit`
   (`daslib/llvm_jit_run.das`) or `run_jit_linked` (`daslib/llvm_jit_link.das`) executes - its
@@ -169,14 +170,16 @@ there.
   sign-alternating chain moves the last few bits of the result, and the interpreter and AOT
   answers do not move with it.
 
-- **A diff that changes what an emitter whose daslang body is the reference implementation
-  produces - the emitter itself, or which of its arms a call selects - also adds a cell
-  comparing the emitted result with the interpreted result over the operand range that emitter
-  serves (every vector width for a vector emitter, the full int8 lattice for a dot), and for a
-  float emitter one asserting both answer NaN in the same lanes; a lowering only a cross target
-  runs states in the PR body the artifact that compared them.** A clamp or a conversion written with
-  ordered compares turns a NaN lane into a number, and an accuracy bound reads that as success;
-  an IR-shape test names the instruction and never a number.
+- **A diff that changes the machine code an emitter whose daslang body is the reference
+  implementation produces - its body, which of its arms a call selects, or the feature set its
+  output is lowered under - ships a cell comparing the emitted result with the interpreted result
+  over the operand range that emitter serves (every vector width for a vector emitter, the full
+  int8 lattice for a dot), added in the same change when no cell covers that range.** An IR-shape
+  test names the instruction and never a number.
+
+- **A cell comparing a float emitter's emitted and interpreted results also asserts both answer
+  NaN in the same lanes.** A clamp or a conversion written with ordered compares turns a NaN lane
+  into a number, and an accuracy bound reads that as success.
 
 - **A change that makes `REVIEW.das` (beside this file) report fewer inputs is a defect:**
   dropping a check, shrinking a scanned set or a tracked-fixture directory (a guard over nothing),
@@ -189,8 +192,8 @@ there.
   (`ARCHITECTURE_EXE.md` sec.2). A promoted module's global initializers are program
   code, and a walk that skips them leaves the address globals they need null in the exe.
 
-- **A diff that builds an x64 or aarch64 machine's feature string appends the forced ones
-  (`x64_forced_plus_features` / `arm64_forced_plus_features`, `daslib/llvm_jit_common.das`) AFTER
-  the detected host features.** LLVM's `SubtargetFeatures` takes the last occurrence of a name, so
-  a forced feature placed first is silently overridden by detection. A wasm machine has no force
-  knob and no detected features, so the rule does not reach it.
+- **A diff that builds a feature string for a machine that has a force knob - a
+  `*_forced_plus_features` function in `daslib/llvm_jit_common.das` - appends the forced names
+  AFTER the detected host features.** LLVM's `SubtargetFeatures` takes
+  the last occurrence of a name, so a forced feature placed first is silently overridden by
+  detection.
diff --git a/modules/dasLLVM/daslib/llvm_jit_common.das b/modules/dasLLVM/daslib/llvm_jit_common.das
index 79d4cce9e0..b368177467 100644
--- a/modules/dasLLVM/daslib/llvm_jit_common.das
+++ b/modules/dasLLVM/daslib/llvm_jit_common.das
@@ -514,7 +514,7 @@ var public g_jit_check_handled_abi = false
 
 [arch(at = "../ARCHITECTURE_TARGET_FEATURES.md#wasm-feature-string")]
 def private wasm_target_features() : string {
-    return g_target_wasm_threads ? "+simd128,+relaxed-simd,+nontrapping-fptoint,+atomics,+bulk-memory" : "+simd128,+relaxed-simd,+nontrapping-fptoint"
+    return g_target_wasm_threads ? "+simd128,+nontrapping-fptoint,+atomics,+bulk-memory" : "+simd128,+nontrapping-fptoint"
 }
 
 def public LLVMAddFunctionWithType(mod : LLVMModuleRef; name : string; typ : LLVMTypeRef) {
@@ -1128,9 +1128,6 @@ def private find_runtime_lib(override_path : string) : Option<string> {
     return stat(candidate).is_valid ? some(candidate) : none(type<string>)
 }
 
-// Cross-compile a module to wasm64 (memory64) and link a runnable .wasm via emcc against the
-// web/output64 runtime archive (-sMEMORY64=1). triple defaults to wasm64-unknown-emscripten;
-// needs_runtime gates linking libDaScript_runtime.a (true=link if found else warn; false=omit).
 def public write_wasm(mod : LLVMOpaqueModule?; out_path : string; triple : string; path_to_emcc : string; needs_runtime : bool; explicit_runtime : string = ""; emit_object_only : bool = false) : bool {
     var wasm_ok = true
     LLVMInitializeWasmTarget()
diff --git a/modules/dasLLVM/daslib/llvm_jit_plan.das b/modules/dasLLVM/daslib/llvm_jit_plan.das
index cf6503e0c2..4fb7554845 100644
--- a/modules/dasLLVM/daslib/llvm_jit_plan.das
+++ b/modules/dasLLVM/daslib/llvm_jit_plan.das
@@ -31,7 +31,7 @@ require jit
 // invalidates cached DLLs (e.g. edits to llvm_jit.das, llvm_macro.das, llvm_jit_common.das,
 // runtime helper ABI, default target triple). Cache filenames fold this in, so a bump
 // makes every previously written DLL miss the cache on the next run and get GC'd.
-let public LLVM_JIT_CODEGEN_VERSION : uint64 = 0x84ul   // 0x84: a wasm target's feature string carries +relaxed-simd, and idot_wasm_simd128 widens an unsigned operand with ZExt so both call sites take the SIMD128 arm for the unsigned form
+let public LLVM_JIT_CODEGEN_VERSION : uint64 = 0x85ul   // 0x85: a wasm target's feature string carries no +relaxed-simd
 
 let public JIT_FNV_PRIME : uint64 = 1099511628211ul
 
diff --git a/modules/dasLLVM/daslib/llvm_jit_run.das b/modules/dasLLVM/daslib/llvm_jit_run.das
index d8abd3e92c..3a97c423d1 100644
--- a/modules/dasLLVM/daslib/llvm_jit_run.das
+++ b/modules/dasLLVM/daslib/llvm_jit_run.das
@@ -37,7 +37,7 @@ var LINK_WHOLE_LIB = false // when true, standalone exe links against the whole
 
 // Read by tests-cpp/small/test_jit_emitter_pin.cpp: FNV-1a64 of the emitter sources
 // (normalized to LF; file list in the test)
-let LLVM_JIT_EMITTER_HASH : uint64 = 0xf18af4cba02319abul
+let LLVM_JIT_EMITTER_HASH : uint64 = 0x39cbe46110eda829ul
 
 def private apply_fast_math_to_module(m : LLVMOpaqueModule?) {
     var fn = LLVMGetFirstFunction(m)
diff --git a/site-dasllama/REVIEW.md b/site-dasllama/REVIEW.md
index 94ab92fb8c..1cfd3a3d0b 100644
--- a/site-dasllama/REVIEW.md
+++ b/site-dasllama/REVIEW.md
@@ -66,10 +66,11 @@ it points.
 the PR body, the URL it fetched for each artifact the copy points at and what the fetch
 returned.**
 
-**A figure in a `_news/*.md` or `_stories/*.md` entry that does not name both the date and the
-build sha of the run it came from - in the entry's own text or its `<!-- figures: ... -->`
-comment - is a defect, and a sha the entry marks as unconfirmed does not count as named** - a
-number without its date reads as a standing claim.
+**A measurement result in a `_news/*.md` or `_stories/*.md` entry - a figure, or words about
+what a run measured: speed, error rate, footprint, size - that does not name the date and the
+build sha of that run, in the entry's own text or in its `<!-- figures: ... -->` comment, is a
+defect, and a sha the entry marks as unconfirmed does not count as named** - a result without
+its date reads as a standing claim.
 
 **An author's query or marker - `[NAME: ...]`, `TODO`, `FIXME` - in a page, or in a
 `_news/*.md` or `_stories/*.md` entry, its `<!-- figures: ... -->` comment included, is a
@@ -82,9 +83,10 @@ string landing in `href`/`src` or fed to `fetch` goes through `safeApiHref()` (a
 allow-list, `#` for anything else) and nothing else; any other string landing as text or as a
 quoted-attribute value is `esc()`-escaped (`< > & " '`).**
 
-**Weakening `test_metadata.py`'s per-page assertions - the test that fails an `.html` page
-without a `<title>`, a meta description, the OpenGraph tags, or the Atom `<link>` - is a
-defect.**
+**A diff to `test_metadata.py` that leaves any page, story page, or browser example shell
+(`examples/dasLLAMA/*/web_shell.html`, repo root) proved less than it was before - a shell
+dropped from a census the file iterates, an assertion deleted, a required property no longer
+asserted anywhere in the file - is a defect.**
 
 **Weakening `REVIEW.das`'s page census - the gate that reports a served file, or the `stories/`
 directory, missing from the dasllama.io deploy step (`.github/workflows/pages.yml`, repo root),
diff --git a/site-dasllama/_news/2026-09-16-every-browser.md b/site-dasllama/_news/2026-09-16-every-browser.md
new file mode 100644
index 0000000000..9ffaaab032
--- /dev/null
+++ b/site-dasllama/_news/2026-09-16-every-browser.md
@@ -0,0 +1,10 @@
+---
+date: 2026-09-16
+tag: examples
+title: The storyteller, storywish and parrot now run in every browser - Safari and iOS included.
+---
+
+The three examples were compiled to wasm64, which WebKit does not implement, so Safari and every
+iPhone and iPad browser got a note instead of a story. The engine still cross-compiles as wasm64
+inside - that is what keeps its layouts honest - but the link now lowers the memory to 32-bit,
+and the one SIMD extension WebKit lacks left the build. [Try it](examples.html).
diff --git a/site-dasllama/examples.html b/site-dasllama/examples.html
index 23c7869858..069f5e2eef 100644
--- a/site-dasllama/examples.html
+++ b/site-dasllama/examples.html
@@ -51,8 +51,8 @@ <h3 class="forge-ex-card__name"><a class="dio-ex-card__open" href="examples/stor
       <span class="forge-ex-card__kind">llm + tts · in the browser</span>
     </div>
     <p class="forge-ex-card__desc">A small story model writes a children's tale one token at a time while <a class="dio-ex-card__credit" href="https://github.com/KittenML/KittenTTS">KittenTTS</a> reads it aloud. Both models arrive as prepared <code>.dlim</code> images; the whole engine runs in your browser, the speech thread and the parallel kernels on Web Workers.</p>
-    <div class="forge-ex-card__tags"><span class="forge-ex-tag">llm</span><span class="forge-ex-tag">tts</span><span class="forge-ex-tag">wasm64</span><span class="forge-ex-tag">threads</span></div>
-    <div class="forge-ex-card__foot"><span>space · next story</span><span>Chrome or Edge 133+, Firefox 134+ (memory64)</span></div>
+    <div class="forge-ex-card__tags"><span class="forge-ex-tag">llm</span><span class="forge-ex-tag">tts</span><span class="forge-ex-tag">wasm</span><span class="forge-ex-tag">threads</span></div>
+    <div class="forge-ex-card__foot"><span>space · next story</span><span>any current browser</span></div>
   </div>
 </article>
 
@@ -66,9 +66,9 @@ <h3 class="forge-ex-card__name"><a class="dio-ex-card__open" href="examples/stor
       <h3 class="forge-ex-card__name"><a class="dio-ex-card__open" href="examples/storywish/storywish.html" aria-label="open Storywish">Storywish</a></h3>
       <span class="forge-ex-card__kind">llm + tts · in the browser</span>
     </div>
-    <p class="forge-ex-card__desc">Type the words you wish for and a story model trained to take requests - our own 27M llama on the TinyStoriesInstruct corpus, published on Hugging Face as borisbat/dasllama-stories - writes a children's tale that uses them while <a class="dio-ex-card__credit" href="https://github.com/kyutai-labs/pocket-tts">Kyutai Pocket TTS</a> reads it aloud in one baked voice, no phoneme front end in the loop. The same wasm64 engine as the storyteller, a 32 MB story image and the speech model's own file.</p>
-    <div class="forge-ex-card__tags"><span class="forge-ex-tag">llm</span><span class="forge-ex-tag">tts</span><span class="forge-ex-tag">wasm64</span><span class="forge-ex-tag">threads</span></div>
-    <div class="forge-ex-card__foot"><span>type · Enter tells the story · Tab asks for dialogue</span><span>Chrome or Edge 133+, Firefox 134+ (memory64)</span></div>
+    <p class="forge-ex-card__desc">Type the words you wish for and a story model trained to take requests - our own 27M llama on the TinyStoriesInstruct corpus, published on Hugging Face as borisbat/dasllama-stories - writes a children's tale that uses them while <a class="dio-ex-card__credit" href="https://github.com/kyutai-labs/pocket-tts">Kyutai Pocket TTS</a> reads it aloud in one baked voice, no phoneme front end in the loop. The same engine as the storyteller, a 32 MB story image and the speech model's own file.</p>
+    <div class="forge-ex-card__tags"><span class="forge-ex-tag">llm</span><span class="forge-ex-tag">tts</span><span class="forge-ex-tag">wasm</span><span class="forge-ex-tag">threads</span></div>
+    <div class="forge-ex-card__foot"><span>type · Enter tells the story · Tab asks for dialogue</span><span>any current browser</span></div>
   </div>
 </article>
 
@@ -82,9 +82,9 @@ <h3 class="forge-ex-card__name"><a class="dio-ex-card__open" href="examples/stor
       <h3 class="forge-ex-card__name"><a class="dio-ex-card__open" href="examples/parrot/parrot.html" aria-label="open Parrot">Parrot</a></h3>
       <span class="forge-ex-card__kind">voice cloning · in the browser</span>
     </div>
-    <p class="forge-ex-card__desc">Press record and talk for a few seconds. <a class="dio-ex-card__credit" href="https://github.com/kyutai-labs/pocket-tts">Kyutai Pocket TTS</a> clones your voice from the take and reads the text in the box - a poem to begin with, or whatever you type - in it; Silero VAD ends the take when you go quiet, and you can record again at any time. The recording stays in the tab: nothing is uploaded. The same wasm64 engine, the speech model's 75 MB file with its codec encoder, and a 1 MB voice-activity model.</p>
-    <div class="forge-ex-card__tags"><span class="forge-ex-tag">tts</span><span class="forge-ex-tag">voice cloning</span><span class="forge-ex-tag">wasm64</span><span class="forge-ex-tag">threads</span></div>
-    <div class="forge-ex-card__foot"><span>record · talk · say</span><span>Chrome or Edge 133+, Firefox 134+ (memory64)</span></div>
+    <p class="forge-ex-card__desc">Press record and talk for a few seconds. <a class="dio-ex-card__credit" href="https://github.com/kyutai-labs/pocket-tts">Kyutai Pocket TTS</a> clones your voice from the take and reads the text in the box - a poem to begin with, or whatever you type - in it; Silero VAD ends the take when you go quiet, and you can record again at any time. The recording stays in the tab: nothing is uploaded. The same engine, the speech model's 75 MB file with its codec encoder, and a 1 MB voice-activity model.</p>
+    <div class="forge-ex-card__tags"><span class="forge-ex-tag">tts</span><span class="forge-ex-tag">voice cloning</span><span class="forge-ex-tag">wasm</span><span class="forge-ex-tag">threads</span></div>
+    <div class="forge-ex-card__foot"><span>record · talk · say</span><span>any current browser</span></div>
   </div>
 </article>
 
diff --git a/site-dasllama/feed.xml b/site-dasllama/feed.xml
index 42a416cf13..1696de050f 100644
--- a/site-dasllama/feed.xml
+++ b/site-dasllama/feed.xml
@@ -4,9 +4,19 @@
 <author><name>dasllama.io</name></author>
 <link href="https://dasllama.io/"/>
 <link href="https://dasllama.io/feed.xml" rel="self"/>
-<updated>2026-09-11T00:00:00Z</updated>
+<updated>2026-09-16T00:00:00Z</updated>
 <id>https://dasllama.io/</id>
 <entry>
+<title>The storyteller, storywish and parrot now run in every browser - Safari and iOS included.</title>
+<link href="https://dasllama.io/#n-2026-09-16-every-browser"/>
+<id>https://dasllama.io/#n-2026-09-16-every-browser</id>
+<updated>2026-09-16T00:00:00Z</updated>
+<content type="html">&lt;p&gt;The three examples were compiled to wasm64, which WebKit does not implement, so Safari and every
+iPhone and iPad browser got a note instead of a story. The engine still cross-compiles as wasm64
+inside - that is what keeps its layouts honest - but the link now lowers the memory to 32-bit,
+and the one SIMD extension WebKit lacks left the build. &lt;a href=&quot;examples.html&quot;&gt;Try it&lt;/a&gt;.&lt;/p&gt;</content>
+</entry>
+<entry>
 <title>The Qwen family runs on Vulkan.</title>
 <link href="https://dasllama.io/#n-2026-09-11-vulkan-qwen-family"/>
 <id>https://dasllama.io/#n-2026-09-11-vulkan-qwen-family</id>
diff --git a/site-dasllama/index.html b/site-dasllama/index.html
index d72d6a93f4..c221ff13c4 100644
--- a/site-dasllama/index.html
+++ b/site-dasllama/index.html
@@ -63,8 +63,15 @@ <h1>Local inference, <em>written in daslang.</em></h1>
 <div id="dio-feed-items">
 <!-- news:begin — everything between the markers is generated from _news/*.md by
      build_news.py (run at deploy AND checked in, so preview matches production) -->
-<article class="dio-item dio-item--lead is-open" id="n-2026-09-11-vulkan-qwen-family" onclick="this.classList.toggle('is-open')">
-<div class="dio-item__head"><span class="dio-item__date">2026-09-11</span><span class="dio-item__tag">engine</span><h2 class="dio-item__title">The Qwen family runs on Vulkan.<span class="dio-latest">latest</span></h2><span class="dio-item__chev">▾</span></div>
+<article class="dio-item dio-item--lead is-open" id="n-2026-09-16-every-browser" onclick="this.classList.toggle('is-open')">
+<div class="dio-item__head"><span class="dio-item__date">2026-09-16</span><span class="dio-item__tag">examples</span><h2 class="dio-item__title">The storyteller, storywish and parrot now run in every browser - Safari and iOS included.<span class="dio-latest">latest</span></h2><span class="dio-item__chev">▾</span></div>
+<div class="dio-item__body"><p>The three examples were compiled to wasm64, which WebKit does not implement, so Safari and every
+iPhone and iPad browser got a note instead of a story. The engine still cross-compiles as wasm64
+inside - that is what keeps its layouts honest - but the link now lowers the memory to 32-bit,
+and the one SIMD extension WebKit lacks left the build. <a href="examples.html">Try it</a>.</p></div>
+</article>
+<article class="dio-item" id="n-2026-09-11-vulkan-qwen-family" onclick="this.classList.toggle('is-open')">
+<div class="dio-item__head"><span class="dio-item__date">2026-09-11</span><span class="dio-item__tag">engine</span><h2 class="dio-item__title">The Qwen family runs on Vulkan.</h2><span class="dio-item__chev">▾</span></div>
 <div class="dio-item__body"><p>Every Qwen text model in the zoo, 0.5B to 48 GB, dense and mixture-of-experts, runs on the
 Vulkan tier. Qwen3.8-27B UD-IQ4_XS runs whole on an RTX 5060 Ti 16 GB under Windows at
 865.4 / 23.5 tok/s (pp512 / tg128, measured 2026-09-07), Qwen3.6-35B-A3B UD-IQ2_XXS at
diff --git a/site-dasllama/serve.py b/site-dasllama/serve.py
index c0e69f13fb..c4ce96d11a 100644
--- a/site-dasllama/serve.py
+++ b/site-dasllama/serve.py
@@ -46,7 +46,7 @@ def end_headers(self):
         # mirrors the `header /examples/*` block of utils/internal/dasllama-ladder/caddy.snippet
         if self.path.startswith("/examples/"):
             self.send_header("Cross-Origin-Opener-Policy", "same-origin")
-            self.send_header("Cross-Origin-Embedder-Policy", "credentialless")
+            self.send_header("Cross-Origin-Embedder-Policy", "require-corp")
         super().end_headers()
 
     def proxy_api(self):
diff --git a/site-dasllama/sitemap.xml b/site-dasllama/sitemap.xml
index dd61ff6dcf..e0490514d1 100644
--- a/site-dasllama/sitemap.xml
+++ b/site-dasllama/sitemap.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
-<url><loc>https://dasllama.io/</loc><lastmod>2026-09-11</lastmod></url>
+<url><loc>https://dasllama.io/</loc><lastmod>2026-09-16</lastmod></url>
 <url><loc>https://dasllama.io/examples.html</loc></url>
 <url><loc>https://dasllama.io/stories.html</loc><lastmod>2026-09-11</lastmod></url>
 <url><loc>https://dasllama.io/ladder.html</loc></url>
diff --git a/site-dasllama/test_metadata.py b/site-dasllama/test_metadata.py
index 00d7a40e96..66c07f8645 100644
--- a/site-dasllama/test_metadata.py
+++ b/site-dasllama/test_metadata.py
@@ -106,6 +106,19 @@ def test_caddy_redirects_explicit_index(self):
         ).read_text(encoding="utf-8")
         self.assertIn("redir /index.html / 308", snippet)
 
+    def test_examples_are_isolated_with_require_corp(self):
+        """The -pthread browser examples need a cross-origin-isolated page on every engine, and
+        WebKit implements only `require-corp`; the local preview server mirrors the vhost."""
+        snippet = (
+            REPO_ROOT / "utils" / "internal" / "dasllama-ladder" / "caddy.snippet"
+        ).read_text(encoding="utf-8")
+        serve = (ROOT / "serve.py").read_text(encoding="utf-8")
+        for text, where in ((snippet, "caddy.snippet"), (serve, "serve.py")):
+            self.assertIn("Cross-Origin-Embedder-Policy", text, f"{where} sets COEP on /examples/")
+            self.assertNotIn("credentialless", text, f"{where} sends a COEP value WebKit implements")
+        self.assertIn("Cross-Origin-Embedder-Policy require-corp", snippet)
+        self.assertIn('"Cross-Origin-Embedder-Policy", "require-corp"', serve)
+
 
 EXAMPLE_SHELLS = {
     "storyteller": (REPO_ROOT / "examples" / "dasLLAMA" / "storyteller" / "web_shell.html", "runStoryteller"),
@@ -117,9 +130,9 @@ def test_caddy_redirects_explicit_index(self):
 class ExampleShellTest(unittest.TestCase):
     """Each browser example's page (examples/dasLLAMA/<id>/web_shell.html, served at
     /examples/<id>/) guards the browser before it loads the program: emcc's script tag lands in
-    an inert template and only a browser that passes the memory64 and isolation probes gets a
-    live copy. A shell that moved the placeholder out of the template would run emcc's user-agent
-    check on Safari again and leave the download line up forever. Each shell also reads the
+    an inert template and only a cross-origin-isolated page gets a live copy. A shell that moved
+    the placeholder out of the template would run emcc's own user-agent check before the note and
+    leave the download line up forever. Each shell also reads the
     deploy's models/manifest.json and carries the IMAGE_VERSION slot the deploy stamps
     (examples/dasLLAMA/wasm/mint_models.py --stamp-page), so a set minted for another version is
     refused before it is fetched, and routes a program abort back onto the page."""
@@ -136,8 +149,8 @@ def test_program_tag_is_inert_until_the_guard_runs(self):
             self.assertIn(placeholder, text[start:end], "the placeholder sits inside the loader template")
             # the guard is the only path to a live program tag: it copies the template's src
             self.assertIn("document.getElementById('loader').content.querySelector('script')", text)
-            self.assertLess(text.index("WebAssembly.validate("), text.index(f"function {runner}()"),
-                            "the memory64 probe is decided before the program path")
+            self.assertLess(text.index("self.crossOriginIsolated"), text.index(f"function {runner}()"),
+                            "the isolation probe is decided before the program path")
 
     def test_the_only_live_scripts_are_the_site_files(self):
         for name, text, runner in self.shells():
@@ -145,21 +158,36 @@ def test_the_only_live_scripts_are_the_site_files(self):
             scripts = []
             parser.handle_starttag_orig = parser.handle_starttag
 
+            subresources = []
+
             def handle_starttag(tag, attrs):
-                if tag == "script" and dict(attrs).get("src"):
-                    scripts.append(dict(attrs)["src"])
+                a = dict(attrs)
+                if tag == "script" and a.get("src"):
+                    scripts.append(a)
+                url = a.get("src") if tag in ("script", "img") else a.get("href") if tag == "link" else None
+                if url:
+                    subresources.append((tag, url, a))
                 parser.handle_starttag_orig(tag, attrs)
 
             parser.handle_starttag = handle_starttag
             parser.feed(text)
-            for src in scripts:
+            for tag in scripts:
+                src = tag["src"]
                 self.assertTrue(src.startswith("/files/") or src.startswith("//gc.zgo.at/"),
                                 f"a live script tag the guard does not control: {src}")
+            for tag, url, a in subresources:
+                if url.startswith("//") or "://" in url:
+                    # the page is served under COEP require-corp, which silently drops a
+                    # cross-origin load that does not ask for CORS
+                    self.assertEqual(a.get("crossorigin"), "anonymous",
+                                     f"{name}: cross-origin <{tag}> {url} loads without crossorigin")
 
     def test_the_notes_name_what_the_browser_lacks(self):
         for name, text, runner in self.shells():
-            for needle in ("memory64", "Safari", "iPhone", "SharedArrayBuffer", "back to the examples", "force=unsupported"):
+            for needle in ("SharedArrayBuffer", "back to the examples", "force=unsupported"):
                 self.assertIn(needle, text, f"the shell names {needle!r}")
+            for stale in ("memory64", "Safari", "iPhone"):
+                self.assertNotIn(stale, text, f"the shell no longer gates on {stale!r}: the lowered build runs on every engine")
 
     def test_the_model_set_is_read_from_the_manifest_and_version_checked(self):
         for name, text, runner in self.shells():
diff --git a/site/REVIEW.md b/site/REVIEW.md
index 1077005ef9..54bce6b969 100644
--- a/site/REVIEW.md
+++ b/site/REVIEW.md
@@ -58,14 +58,15 @@ post) - is a defect.**
 in the same change.** The gate still compiles such a block; it owes no link.
 
 **A PR whose diff changes `playground/` (this folder) or `examples/_interp.html` (this folder)
-states, in the PR body, a run of the WASM-staged Playwright suite (`tests/playground/`, this
-folder) against the branch tip, naming the passes and any failures; a later edit to those
+beyond comments states, in the PR body, a run of the Playwright suite (`tests/playground/`,
+this folder) against the branch tip, naming the passes and any failures; a later edit to those
 files restates the run.** The no-WASM lane cannot see a broken runtime path, and a run
 recorded mid-branch describes a tree that no longer ships.
 
-**A stated Playwright run names every playground sample the diff changed (the samples are
-staged from `web/examples/ui/samples/`, repo root): for each, the spec that loaded it, or -
-when no spec loads it - that it was opened and run by hand in the playground.**
+**A stated Playwright run names every playground sample the diff changed - a `.das` under
+`web/examples/ui/samples/` (repo root), or a `.das` under `examples/graphics/` (repo root) that
+the playground stages as a sample: for each, the spec that loaded it, or - when no spec loads
+it - that it was opened and run by hand in the playground.**
 
 **A stated Playwright run names the runtime artifacts it used: built from this change when
 the diff touches any source compiled into the WASM runtime (`daslang_static` - its `main()`
diff --git a/site/_news/2026-09-16-the-browser-examples-now-run-on-safari-too.md b/site/_news/2026-09-16-the-browser-examples-now-run-on-safari-too.md
new file mode 100644
index 0000000000..3906ef0882
--- /dev/null
+++ b/site/_news/2026-09-16-the-browser-examples-now-run-on-safari-too.md
@@ -0,0 +1,6 @@
+---
+date: 2026-09-16
+tag: examples
+title: The browser examples now run in every browser - Safari, iPhone and iPad included. The compiled builds stay wasm64 inside and are lowered to a 32-bit memory at link, so nothing needs memory64 any more.
+link: https://daslang.io/examples.html
+---
diff --git a/site/coi-serviceworker.js b/site/coi-serviceworker.js
index be4401966d..44c712ceed 100644
--- a/site/coi-serviceworker.js
+++ b/site/coi-serviceworker.js
@@ -11,25 +11,21 @@
  * and /playground*. The landing page, docs and blog pass through untouched — they don't
  * need isolation and keep their ordinary cross-origin fonts / docsearch behavior.
  *
- * TWO ISOLATION SUBTREES, DIFFERENT REGISTRATION GATES:
- *  - /examples ships only wasm64 (memory64) compiled builds, so isolation is pointless on
- *    an engine without memory64 (the games can't instantiate there anyway). Gated on memory64.
- *  - /playground runs the THREADED wasm32 interpreter (daslang_static, -pthread), which needs
- *    SharedArrayBuffer on EVERY engine — including Safari, which has no memory64 but does have
- *    threads. So /playground isolates regardless of memory64.
+ * TWO ISOLATION SUBTREES, ONE GATE: both /examples (the compiled builds, cross-compiled as
+ * wasm64 and lowered to a 32-bit memory at link time) and /playground (the threaded wasm32
+ * interpreter, daslang_static -pthread) run on every engine and need SharedArrayBuffer on
+ * every engine, so the worker isolates both wherever a service worker can register.
  *
  * COEP VALUE: credentialless lets cross-origin no-cors subresources (Google Fonts, Algolia
  * docsearch) load without per-resource CORP, but Safari/WebKit doesn't support it. So we emit
  * credentialless on Chromium/Firefox and require-corp on Apple WebKit. Under require-corp those
  * cross-origin subresources are blocked (fonts fall back to system, docsearch won't load) — an
- * accepted degradation on Safari/playground until the fonts are self-hosted (follow-up). The
- * /examples gate means Safari never reaches the examples subtree, so its require-corp only ever
- * applies to /playground.
+ * accepted degradation on Safari.
  *
  * Adapted from github.com/gzuidhof/coi-serviceworker (MIT). */
 
 // Only these subtrees get isolated. Root-scoped worker, narrow effect.
-// /files/wasm/ is the interpreter runtime the /examples fallback (_interp.html)
+// /files/wasm/ is the interpreter runtime the /examples ?force=interp runner (_interp.html)
 // spawns its -pthread workers from: a dedicated worker script must itself carry
 // COEP under an isolated owner, or the load dies with ERR_BLOCKED_BY_RESPONSE
 // and the runtime waits on "loading-workers" forever. On a non-isolated page
@@ -42,11 +38,6 @@ function coiInIsolationScope(url) {
          url.pathname.indexOf("/files/wasm/") === 0);
 }
 
-// /playground is the threaded wasm32 interpreter — it isolates on every engine (gate dropped).
-function coiIsPlaygroundScope(pathname) {
-    return pathname.indexOf("/playground") === 0;
-}
-
 // Apple WebKit (Safari, iOS) ships SharedArrayBuffer/threads but NOT COEP credentialless, so it
 // must isolate via require-corp. Everything else (Chromium, Firefox) supports credentialless,
 // which keeps the cross-origin fonts/docsearch working. (No JS feature-detect for credentialless
@@ -94,14 +85,6 @@ if (typeof window === "undefined") {
 } else {
     // ─── Window context: register self ──────────────────────────────────
     (function () {
-        // memory64 probe: \0asm | version | memory section { count=1, flags=0x04 (memory64), min=1 }.
-        var hasWasm64 = false;
-        try {
-            hasWasm64 = WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1]));
-        } catch (e) { hasWasm64 = false; }
-        // /playground (threaded wasm32 interpreter) isolates on every engine; /examples
-        // (wasm64 compiled builds) only where memory64 exists — nothing to isolate otherwise.
-        if (!coiIsPlaygroundScope(window.location.pathname) && !hasWasm64) return;
         if (!window.isSecureContext) return;     // service workers need https (localhost counts)
         if (window.crossOriginIsolated) return;  // already isolated — nothing to do
         if (!("serviceWorker" in navigator)) return;
diff --git a/site/examples.html b/site/examples.html
index d6bff6f294..694e23ded2 100644
--- a/site/examples.html
+++ b/site/examples.html
@@ -9,8 +9,8 @@
     <link rel="canonical" href="https://daslang.io/examples.html" />
 
     <!-- Cross-origin isolation for the threaded (-pthread) wasm examples. Must run
-         before anything else so the one-time reload happens up front. Self-registers
-         only on memory64 engines; scoped to /examples* + /playground* (see the file). -->
+         before anything else so the one-time reload happens up front. Scoped to
+         /examples* + /playground* (see the file). -->
     <script src="/coi-serviceworker.js"></script>
 
     <link rel="icon" type="image/svg+xml" href="files/daslang-favicon.svg" />
diff --git a/site/examples/_interp.html b/site/examples/_interp.html
index 9dc67312b0..cc20bb5f49 100644
--- a/site/examples/_interp.html
+++ b/site/examples/_interp.html
@@ -21,7 +21,7 @@
   <canvas id="canvas" tabindex="0" oncontextmenu="event.preventDefault()"></canvas>
   <div id="ex-load">loading interpreter…</div>
   <script>
-    // Interpreted runner for the /examples player's non-memory64 fallback.
+    // Interpreted runner for the /examples player's ?force=interp path.
     // Loads daslang_static.wasm (the universal wasm32 interpreter the playground
     // uses), mounts the game's source bundle into MEMFS, and callMain's it — the
     // C++ WebLoop drives the exported init/update/shutdown per rAF.
diff --git a/site/files/examples.js b/site/files/examples.js
index f6e3f4e66d..83a1678af1 100644
--- a/site/files/examples.js
+++ b/site/files/examples.js
@@ -1,13 +1,13 @@
 /* examples.js — daslang apps compiled to WebAssembly, played in-browser.
  *
- * Each game ships as a standalone wasm64 build (host == target pointer width,
- * so the cross-compile is layout-correct). The compiled artifacts live at
+ * Each game ships as a standalone compiled build (cross-compiled as wasm64 so host and
+ * target pointer widths match, then lowered to a 32-bit memory at link time, so every
+ * engine runs it). The compiled artifacts live at
  *   examples/<id>/<id>.{html,js,wasm}
  * and are loaded into an <iframe> player on demand.
  *
- * wasm64 (memory64) is Chrome/Edge/Firefox 133+. On engines without it
- * (Safari, iOS) we fall back to running the same example interpreted in the
- * playground — slower, but universal. */
+ * ?force=interp runs the same example interpreted instead (slower) — a QA path, not a
+ * fallback any browser needs. */
 (function () {
     'use strict';
 
@@ -64,11 +64,7 @@
             controls: 'mouse · imgui widgets',
             poster: 'files/examples/furier-poster.png',
             aspect: 1024 / 1024,
-            // The in-page player is the dasImgui-bundling wasm64 build, so it is
-            // memory64-only (no interpreted fallback in the iframe). The playground,
-            // though, runs the threaded daslang_static interpreter — which now binds
-            // dasImgui — so it can host this sample there: playgroundSlug names it.
-            wasm64Only: true,
+            compiledOnly: true,
             playgroundSlug: 'furier',
             src: 'examples/graphics/furier_opengl_imgui_example.das',
         },
@@ -82,12 +78,7 @@
             controls: 'mouse · imgui widgets · pick a render mode',
             poster: 'files/examples/path_tracer_lab-poster.jpg',
             aspect: 512 / 512,
-            // In-page player: threaded (-pthread) wasm64 bundling dasImgui, running
-            // new_thread / JobQue on real Web Workers — memory64-only, and the page must
-            // be crossOriginIsolated (coi-serviceworker.js). The playground hosts the
-            // same sample on the threaded daslang_static interpreter (playgroundSlug),
-            // which is likewise isolated (the worker drops the memory64 gate for /playground).
-            wasm64Only: true,
+            compiledOnly: true,
             playgroundSlug: 'path_tracer_lab',
             src: 'examples/graphics/path_tracer_lab_opengl_imgui_example.das',
         },
@@ -102,12 +93,7 @@
             controls: 'drag to attract the slime · imgui widgets · worker-thread slider',
             poster: 'files/examples/physarum_lab-poster.jpg',
             aspect: 1024 / 1024,
-            // Same wasm64-only / native-dasImgui story as the path tracer: the in-page player is
-            // the threaded (-pthread) wasm64 build bundling dasImgui + dasAudio, on real Web Workers
-            // and crossOriginIsolated (coi-serviceworker.js). The playground hosts the same sample on
-            // the threaded daslang_static interpreter (playgroundSlug), which binds the in-tree
-            // dasImgui and dasAudio/strudel.
-            wasm64Only: true,
+            compiledOnly: true,
             playgroundSlug: 'physarum_lab',
             src: 'examples/graphics/physarum_lab_opengl_imgui_example.das',
         },
@@ -116,35 +102,14 @@
     DAS_EXAMPLES.forEach(function (ex) {
         ex.gameUrl = 'examples/' + ex.id + '/' + ex.id + '.html';
         ex.srcUrl = ex.src ? (REPO_ROOT + ex.src) : (REPO_BLOB + ex.id + '/main.das');
-        // Examples registered as playground samples get an "open in playground" link.
-        // playgroundSlug names the data.json sample to deep-link (?example=<slug>). The
-        // ImGui showcases set it explicitly: they bind the native dasImgui module (in-tree
-        // since the dasImgui merge), so
-        // their in-page player is wasm64-only, but the threaded daslang_static
-        // interpreter now hosts them in the playground. A plain (non-wasm64-only) sample
-        // defaults to its id; a wasm64-only card with no slug has no playground link.
-        var pgSlug = ex.playgroundSlug || (ex.wasm64Only ? null : ex.id);
+        // playgroundSlug must name a data.json sample. A compiled-only card can still carry one:
+        // the playground's threaded interpreter binds the native module its in-page player bundles.
+        var pgSlug = ex.playgroundSlug || (ex.compiledOnly ? null : ex.id);
         ex.playgroundUrl = pgSlug ? ('/playground/?example=' + pgSlug) : null;
     });
 
-    // ─── wasm64 (memory64) feature detection ────────────────────────────
-    var HAS_WASM64 = (function () {
-        try {
-            // Validate a minimal module declaring a 64-bit (memory64) memory:
-            // \0asm | version | memory section {count=1, flags=0x04 (memory64), min=1}.
-            // More robust than `new WebAssembly.Memory({index:'i64'})`, which can
-            // false-positive on engines that silently ignore the unknown descriptor
-            // field and hand back a wasm32 memory. validate() parses the memory64
-            // flag, so it is true only where the engine truly supports it. (Chrome/Edge/FF 133+.)
-            return WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1]));
-        } catch (e) {
-            return false;
-        }
-    })();
-
-    // ?force=interp / ?force=wasm64 forces a path (for QA on a memory64 browser).
     var FORCE = new URLSearchParams(window.location.search).get('force');
-    var USE_WASM64 = FORCE === 'wasm64' ? true : (FORCE === 'interp' ? false : HAS_WASM64);
+    var USE_COMPILED = FORCE !== 'interp';
 
     function esc(s) {
         return String(s == null ? '' : s)
@@ -244,23 +209,17 @@
         if (entering && frame.contentWindow) { try { frame.contentWindow.focus(); } catch (e) {} }
     }
 
-    // wasm64 present → the compiled standalone build; else → the interpreted
-    // runner (daslang_static.wasm, universal wasm32), same game source.
     function runnerUrl(ex) {
-        return USE_WASM64 ? ex.gameUrl : ('examples/_interp.html?g=' + encodeURIComponent(ex.id));
+        return USE_COMPILED ? ex.gameUrl : ('examples/_interp.html?g=' + encodeURIComponent(ex.id));
     }
     function viewportHTML(ex) {
-        // wasm64-only example on an engine without memory64: there is no interpreted
-        // fallback (the native module can't run in the interpreter), so show
-        // a clear note instead of an iframe that would never load.
-        if (ex.wasm64Only && !USE_WASM64) {
+        if (ex.compiledOnly && !USE_COMPILED) {
             return '<div class="forge-ex-player__fallback">' +
                      '<div class="forge-ex-player__fallback-glyph" aria-hidden="true">⚠</div>' +
-                     '<div class="forge-ex-player__fallback-head">Needs a memory64 browser</div>' +
+                     '<div class="forge-ex-player__fallback-head">Compiled only</div>' +
                      '<p class="forge-ex-player__fallback-body">' + esc(ex.name) + ' bundles the Dear ImGui ' +
-                       'module compiled to wasm64 — it runs on Chrome or Edge 133+ and Firefox 134+ (engines with ' +
-                       'WebAssembly memory64). The universal interpreter can’t bind a native module, so ' +
-                       'this one has no interpreted fallback.</p>' +
+                       'module compiled to WebAssembly. The universal interpreter can’t bind a native module, so ' +
+                       'this one has no interpreted form.</p>' +
                      '<a class="forge-ex-player__fallback-btn" href="' + esc(ex.srcUrl) + '" target="_blank" rel="noopener">view source ↗</a>' +
                    '</div>';
         }
@@ -271,9 +230,9 @@
     function openPlayer(ex) {
         closePlayer();
 
-        var needs64 = ex.wasm64Only && !USE_WASM64;
-        var statusText = needs64 ? 'needs memory64' : (USE_WASM64 ? 'loading…' : 'loading · interpreted');
-        var statusClass = needs64 ? 'is-fallback' : 'is-loading';
+        var noInterp = ex.compiledOnly && !USE_COMPILED;
+        var statusText = noInterp ? 'compiled only' : (USE_COMPILED ? 'loading…' : 'loading · interpreted');
+        var statusClass = noInterp ? 'is-fallback' : 'is-loading';
 
         var overlay = document.createElement('div');
         overlay.className = 'forge-ex-overlay';
@@ -322,9 +281,9 @@
             if (act === 'close') closePlayer();
             else if (act === 'restart') {
                 var f = document.getElementById('ex-frame');
-                if (!f) return;           // no iframe (e.g. memory64-only note) — nothing to restart
+                if (!f) return;           // no iframe (the compiled-only note) — nothing to restart
                 f.src = f.src;
-                setStatus(USE_WASM64 ? 'loading…' : 'loading · interpreted', 'is-loading');
+                setStatus(USE_COMPILED ? 'loading…' : 'loading · interpreted', 'is-loading');
             } else if (act === 'fullscreen') {
                 var vp = document.getElementById('ex-viewport');
                 if (vp && vp.requestFullscreen) vp.requestFullscreen().catch(function () {});
@@ -334,7 +293,7 @@
         var frame = overlay.querySelector('#ex-frame');
         if (frame) {
             frame.addEventListener('load', function () {
-                setStatus(USE_WASM64 ? 'running' : 'running · interpreted', 'is-running');
+                setStatus(USE_COMPILED ? 'running' : 'running · interpreted', 'is-running');
                 // Focus the game canvas inside the iframe so keyboard input flows, and
                 // guard scroll-keys at runtime (belt-and-suspenders with the shell's own
                 // guard — covers any already-deployed card built before that shell). The
diff --git a/site/playground/index.html b/site/playground/index.html
index 0e6bc87fa6..3dad9f076f 100644
--- a/site/playground/index.html
+++ b/site/playground/index.html
@@ -7,8 +7,8 @@
     <meta name="description" content="Run daslang in your browser. Multi-file workspace, sample picker, WebAssembly." />
 
     <!-- Cross-origin isolation so threaded (-pthread) wasm can run here. Must run
-         before anything else so the one-time reload happens up front. Self-registers
-         only on memory64 engines; scoped to /examples* + /playground* (see the file). -->
+         before anything else so the one-time reload happens up front. Scoped to
+         /examples* + /playground* (see the file). -->
     <link rel="canonical" href="https://daslang.io/playground/" />
 
     <script src="/coi-serviceworker.js"></script>
diff --git a/site/tests/playground/REVIEW.md b/site/tests/playground/REVIEW.md
index fa7588b2b3..22ef10ef6d 100644
--- a/site/tests/playground/REVIEW.md
+++ b/site/tests/playground/REVIEW.md
@@ -10,6 +10,10 @@ stages the site without WASM artifacts and runs the suite with `--grep-invert '@
 run only in `nightly_playground.yml`'s `wasm_specs` job, against the DEPLOYED site.
 
 **A diff that adds an `@wasm` test whose assertion depends on a runtime change in the same
-diff states in its PR body that the nightly drives the deployed site and the test stays red
-until the rebuilt artifact ships.** Without the statement, the first post-merge nightly reads
-as a mystery regression to whoever is on it.
+diff states in its PR body that `nightly_playground.yml` drives the deployed site and the test
+stays red until the rebuilt artifact ships.** Without the statement, the first post-merge
+nightly reads as a mystery regression to whoever is on it.
+
+**A diff that makes a test - or a whole `*.spec.js` file - skip itself or change its assertions
+based on what the browser engine supports is a defect.** The shipped artifacts run on every
+engine: stub `/api/build/info` to say whether the wasm engine is available.
diff --git a/site/tests/playground/engine-toggle.spec.js b/site/tests/playground/engine-toggle.spec.js
index 89d2d65e10..a3e1c3d915 100644
--- a/site/tests/playground/engine-toggle.spec.js
+++ b/site/tests/playground/engine-toggle.spec.js
@@ -1,11 +1,8 @@
 // The interpreter/wasm radio in the playground toolbar, and the build flow
 // behind it.
 //
-// The wasm engine compiles the editor's code on the build service, so
-// availability is a property of the BROWSER (wasm64 artifacts need memory64)
-// and the SERVICE (a live toolchain) — not of the loaded sample, the way the
-// retired precompiled-artifact path worked. The service is stubbed via
-// route() so these tests do not need a live backend.
+// The wasm engine compiles the editor's code on the build service, which is
+// stubbed via route() so these tests do not need a live backend.
 
 const { test, expect } = require('./fixtures.js');
 
@@ -77,12 +74,6 @@ test('wasm radio becomes selectable when the service can build', async ({ playgr
     await stubBuildInfo(playground, true);
     await reloadWithStubs(playground);
 
-    // Skipped where the browser cannot run wasm64 at all — the engine is
-    // genuinely unavailable there and the radio is right to stay off.
-    const memory64 = await playground.evaluate(() =>
-        WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])));
-    test.skip(!memory64, 'browser lacks wasm64/memory64');
-
     await expect.poll(() => playground.locator(wasmSel).isDisabled(), { timeout: 5_000 }).toBe(false);
 
     // Enabled for a multi-file sample too: content-addressing removed the
@@ -124,10 +115,6 @@ test('a queued build narrates its progress and then runs', async ({ playground }
     }));
     await reloadWithStubs(playground);
 
-    const memory64 = await playground.evaluate(() =>
-        WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])));
-    test.skip(!memory64, 'browser lacks wasm64/memory64');
-
     await playground.locator(wasmSel).check();
     await playground.locator('#run').click();
 
@@ -188,10 +175,6 @@ test('module-rail stdout survives a wasm memory grow', async ({ playground }) =>
     }));
     await reloadWithStubs(playground);
 
-    const memory64 = await playground.evaluate(() =>
-        WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])));
-    test.skip(!memory64, 'browser lacks wasm64/memory64');
-
     await playground.locator(wasmSel).check();
     await playground.locator('#run').click();
 
@@ -227,10 +210,6 @@ test('a page-kind build runs as an embedded page frame', async ({ playground })
     }));
     await reloadWithStubs(playground);
 
-    const memory64 = await playground.evaluate(() =>
-        WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])));
-    test.skip(!memory64, 'browser lacks wasm64/memory64');
-
     await playground.locator(wasmSel).check();
     await playground.locator('#run').click();
 
@@ -317,10 +296,6 @@ test('a module-kind run clears a previous page frame', async ({ playground }) =>
     });
     await reloadWithStubs(playground);
 
-    const memory64 = await playground.evaluate(() =>
-        WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])));
-    test.skip(!memory64, 'browser lacks wasm64/memory64');
-
     await playground.locator(wasmSel).check();
     await playground.locator('#run').click();
     await expect(playground.locator('iframe.pg-page-frame')).toHaveCount(1, { timeout: 15_000 });
@@ -338,10 +313,6 @@ test('a failed build shows the compiler error', async ({ playground }) => {
     ]);
     await reloadWithStubs(playground);
 
-    const memory64 = await playground.evaluate(() =>
-        WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1])));
-    test.skip(!memory64, 'browser lacks wasm64/memory64');
-
     await playground.locator(wasmSel).check();
     await playground.locator('#run').click();
 
diff --git a/skills/daspkg.md b/skills/daspkg.md
index a0881d9d36..5ab135d0a9 100644
--- a/skills/daspkg.md
+++ b/skills/daspkg.md
@@ -315,7 +315,7 @@ The macro captures the call-site source file path at expansion, then walks the s
 
 `daspkg release wasm` cross-compiles a project to a **standalone wasm64 web app** (`<name>.{html,js,wasm}`) that runs compiled (not interpreted) in the browser. It is the web analogue of native `release`: one `.das_package` per example, driven by the same `release()` hook.
 
-**wasm64 ONLY.** Every compiled web artifact is memory64 (8-byte pointers). The wasm32 *cross-compile* target is unsupported - on a 64-bit host it bakes 8-byte-pointer layouts the wasm32 runtime reads as 4 (garbage); pure scripts only ever "worked" at wasm32 by dodging that bug class. wasm64 makes host-ptr-size == target-ptr-size, so the bug class vanishes with zero codegen changes. The browser needs memory64 (Chrome/Edge/Firefox 133+); on Safari/iOS the site falls back to the wasm32 *interpreter* (`daslang_static.wasm`, an ordinary C++->wasm build - not the cross-compiler, so unaffected).
+**wasm64 ONLY, lowered at link.** Every compiled web artifact is cross-compiled as memory64 (8-byte pointers). The wasm32 *cross-compile* target is unsupported - on a 64-bit host it bakes 8-byte-pointer layouts the wasm32 runtime reads as 4 (garbage); pure scripts only ever "worked" at wasm32 by dodging that bug class. wasm64 makes host-ptr-size == target-ptr-size, so the bug class vanishes with zero codegen changes. The link then runs emscripten's `-sMEMORY64=2`: the objects and archives keep their 8-byte pointers (the JS boundary still passes them as BigInt), and Binaryen lowers the memory itself to 32-bit, so the artifact runs on every engine - WebKit included, which has no memory64. The price is a 4 GB address space (2 GB by emscripten's default `MAXIMUM_MEMORY`). The feature string carries no `+relaxed-simd` for the same reason: WebKit refuses a module that uses any of it.
 
 ### Two-step workflow
 
diff --git a/src/builtin/module_jit.cpp b/src/builtin/module_jit.cpp
index a5a55db548..8ba03d984e 100644
--- a/src/builtin/module_jit.cpp
+++ b/src/builtin/module_jit.cpp
@@ -592,10 +592,9 @@ namespace das {
         // STANDALONE_WASM build with growth imports NOTHING from env, so wasmtime is
         // unaffected. Measured on that emsdk: usable heap 120MB -> 2040MB.
         const std::string runtimeArg = withRuntime ? fmt::format("\"{}\" ", runtimeLibPath) : "";
-        // -sMEMORY64=1: wasm64 (memory64) target — 8-byte pointers. The object and
-        // runtime archive must also be wasm64 (built with -sMEMORY64=1); the linker
-        // setting must match or wasm-ld rejects the mixed-ABI inputs.
-        const char * mem64Arg = memory64 ? " -sMEMORY64=1" : "";
+        // -sMEMORY64=2: wasm64 (8-byte pointer) object + runtime archive, memory lowered
+        // to 32-bit at link so engines without memory64 (WebKit) run the module too.
+        const char * mem64Arg = memory64 ? " -sMEMORY64=2" : "";
         // Windows: wrap the whole command in an extra outer quote pair
         // (`""emcc.bat" ... 2>&1"`). popen → cmd.exe strips the outermost pair,
         // leaving the inner quoted argv intact; without this wrap cmd.exe mangles
diff --git a/tests/jit_tests/wasm_idot_lowering.das b/tests/jit_tests/wasm_idot_lowering.das
index 13ede21e8d..e4bcb2038d 100644
--- a/tests/jit_tests/wasm_idot_lowering.das
+++ b/tests/jit_tests/wasm_idot_lowering.das
@@ -1,8 +1,9 @@
 // The signed idot family on the wasm64 cross target lowers to the ISA's exact int8 dot halves -
 // the i16x8 extmul products summed by i32x4.extadd_pairwise_i16x8_s and folded even/odd - and never
 // to the generic widen-multiply chain that runs a fifth as fast there; the relaxed 7-bit dot is
-// refused by design (it wraps at -128, and +relaxed-simd re-means min/max/mad), so the dump carries
-// no relaxed intrinsic either. A host compile of the same fixture emits no wasm intrinsic.
+// refused by design (it wraps at -128, and the feature string carries no +relaxed-simd - WebKit
+// runs none of it), so the dump carries no relaxed intrinsic either. A host compile of the same
+// fixture emits no wasm intrinsic.
 // Compile-only keeps both compiles on this host and never touches the artifact cache, so --jit-dump
 // prints every time.
 options gen2
@@ -12,6 +13,7 @@ require dastest/testing_boost
 require daslib/fio
 require daslib/strings_boost
 require strings
+require math
 
 let FIXTURE = "{get_das_root()}/tests/jit_tests/_wasm_idot_fixture.das"
 let PAIRWISE_ADD = "llvm.wasm.extadd.pairwise.signed"
@@ -73,4 +75,41 @@ def test_wasm_idot_lowering(t : T?) {
         t |> success(length(ln) > 20, "the host dump printed ({length(ln)} lines)")
         t |> success(count_with(ln, "llvm.wasm.") == 0, "no wasm intrinsic on the host")
     }
+    t |> run("the wasm object's target features carry simd128 and no relaxed-simd") @(t : T?) {
+        let dir_r = create_temp_directory_result("wasm_idot_features")
+        if (!(dir_r is value)) {
+            t |> failure("temp dir failed")
+            return
+        }
+        let dir = unsafe(dir_r.value)
+        let obj = "{dir}/idot.o"
+        var ln : array<string>
+        spawn_child("\"{bin}\" -exe -output \"{obj}\" \"{FIXTURE}\" -- --jit-target=wasm64-unknown-emscripten --jit-emit-object", ln)
+        let features = object_target_features(obj)
+        t |> success(find(features, "simd128") >= 0, "the object's target_features section names simd128: {features}")
+        t |> success(find(features, "relaxed-simd") < 0, "no relaxed opcode can be in a module WebKit must run: {features}")
+        rmdir_rec_result(dir)
+    }
+}
+
+// the object's `target_features` custom section as one text line - each feature name is ASCII
+// inside a binary file, so the bytes are read into an array and every non-printable byte becomes
+// a space before the search
+def private object_target_features(path : string) : string {
+    var bytes : array<uint8>
+    fopen(path, "rb") $(f) {
+        if (f == null) {
+            return
+        }
+        bytes |> resize(int64(stat(path).size))
+        fread(f, bytes)
+    }
+    let text = build_string() $(w) {
+        for (b in bytes) {
+            let c = int(b)
+            w |> write(c >= 0x20 && c < 0x7f ? to_char(c) : " ")
+        }
+    }
+    let at = find(text, "target_features")
+    return at < 0 ? "" : slice(text, at, min(at + 256, length(text)))
 }
diff --git a/utils/daspkg/README.md b/utils/daspkg/README.md
index fc3c6e43a7..80d2cfc20a 100644
--- a/utils/daspkg/README.md
+++ b/utils/daspkg/README.md
@@ -59,7 +59,7 @@ All package commands accept `--global` / `-g` to operate on global modules.
 | `--json` | Machine-readable JSON output (`search`, `list`, `check`) |
 | `--branch <name>`, `-b <name>` | Install from a git branch (e.g. `master`) instead of a tag |
 | `--out <path>` | Output directory for `release` (default: current directory) |
-| `--wasm` | Target wasm64 (memory64): `build --wasm` builds the wasm64 runtime and module archives, `release wasm` ships compiled `.wasm` artifacts |
+| `--wasm` | Target wasm64 (memory64, lowered to a 32-bit memory at link so every browser runs it): `build --wasm` builds the wasm64 runtime and module archives, `release wasm` ships compiled `.wasm` artifacts |
 | `--wasm-lib-dir <path>` | Directory holding the wasm64 archives `release wasm` links (default `<das_root>/web/output64/lib`) |
 | `--paranoid` | Accepted for compatibility; the tuner runs one margin-decided protocol and this flag no longer changes the budget |
 | `--quick` | During `release`, accept a complete existing sidecar instead of re-minting (an incomplete or stale scope still mints - an exe never ships unmeasured). Forgetting it costs one re-mint, never correctness |
diff --git a/utils/daspkg/REVIEW.md b/utils/daspkg/REVIEW.md
index 011cf630f2..81e7a15e9f 100644
--- a/utils/daspkg/REVIEW.md
+++ b/utils/daspkg/REVIEW.md
@@ -14,16 +14,17 @@ utils/daspkg/test_daspkg_git.das`, and it needs network (the `borisbat/daspkg-te
 repos).
 
 **A diff that changes any code on the `daspkg release` path - `cmd_release`, `cmd_release_wasm`,
-and the `ship_*` / `release_*` helpers they call in `commands.das` - states in the review whether
-the release was run on macOS.** The release layout differs per platform (`.app` bundle vs flat
-directory).
+and the `ship_*` / `release_*` helpers they call in `commands.das` - states in the review which
+platform the release was run on.** The native release layout differs per platform (`.app` bundle
+vs flat directory), and the wasm release links with the emsdk installed on that platform.
 
 **A diff that adds a command also adds its `print_usage` line and its row in the `README.md`
 Commands table, in the same change.**
 
-**A diff that adds a `daspkg` command-line flag also adds its `@clarg_doc` on the new
-`DaspkgArgs` field and its row in the `README.md` Options table, in the same change** - the
-help text renders the annotation, so a field without one is a blank help line.
+**A diff that adds a `daspkg` command-line flag, or changes a flag's `@clarg_doc` text on its
+`DaspkgArgs` field, lands that annotation and the matching row in the `README.md` Options table
+in the same change** - the help text renders the annotation, so a field without one is a blank
+help line.
 
 **A diff that adds a `.das_package` manifest function - a function `daslib/daspkg.das` (repo
 root) exports for a manifest body to call - also adds it to the `README.md` `.das_package`
diff --git a/utils/daspkg/commands.das b/utils/daspkg/commands.das
index 35668a3ca3..df0fe1b4c3 100644
--- a/utils/daspkg/commands.das
+++ b/utils/daspkg/commands.das
@@ -78,7 +78,7 @@ struct DaspkgArgs {
     fat : string = ""
 
     @clarg_name = "wasm"
-    @clarg_doc = "Target wasm64 (memory64): `build --wasm` builds the wasm64 runtime + module archives; `release wasm` ships compiled .wasm artifacts"
+    @clarg_doc = "Target wasm64 (memory64, lowered to a 32-bit memory at link so every browser runs it): `build --wasm` builds the wasm64 runtime + module archives; `release wasm` ships compiled .wasm artifacts"
     wasm : bool
 
     @clarg_name = "wasm-lib-dir"
@@ -3175,7 +3175,9 @@ def private release_one_wasm_app(root, out_dir, app_name, main_script : string;
             w |> write(" \"{a}\"")
         }
         w |> write(" \"{runtime_archive}\"")
-        // Release defaults: wasm64 + WebGL2/ES3 + modern wasm EH + filesystem + threads. -pthread
+        // Release defaults: wasm64 lowered to a 32-bit memory (-sMEMORY64=2: the objects and archives
+        // keep 8-byte pointers, and an engine without memory64 - WebKit - runs the module) + WebGL2/ES3
+        // + modern wasm EH + filesystem + threads. -pthread
         // matches the threaded runtime archive (new_thread / JobQue map to Web Workers); the pool is
         // pre-sized for the DAS_MAX_HW_JOBS-capped worker count. A -pthread module only instantiates
         // cross-origin-isolated, so the host page must send COOP same-origin + COEP require-corp.
@@ -3190,7 +3192,7 @@ def private release_one_wasm_app(root, out_dir, app_name, main_script : string;
         // emscripten fork needed — the wrap + shim live in libDaScript_runtime.a (like the malloc lock).
         // EXPORTED_RUNTIME_METHODS=FS,ENV: a custom shell stages files into MEMFS and sets the
         // program's environment knobs in Module.preRun (the C environment is built from Module.ENV at startup).
-        w |> write(" -sMEMORY64=1 -sFULL_ES3 -sMAX_WEBGL_VERSION=2 -sGL_ENABLE_GET_PROC_ADDRESS=1 -sALLOW_MEMORY_GROWTH=1 -sSTACK_SIZE=4MB -fwasm-exceptions -sWASM_LEGACY_EXCEPTIONS=0 -sEXIT_RUNTIME=0 -sFORCE_FILESYSTEM=1 -sEXPORTED_RUNTIME_METHODS=FS,ENV -pthread -sPTHREAD_POOL_SIZE=16 -sAUDIO_WORKLET=1 -sWASM_WORKERS=1 -Wl,--wrap=emscripten_futex_wait")
+        w |> write(" -sMEMORY64=2 -sFULL_ES3 -sMAX_WEBGL_VERSION=2 -sGL_ENABLE_GET_PROC_ADDRESS=1 -sALLOW_MEMORY_GROWTH=1 -sSTACK_SIZE=4MB -fwasm-exceptions -sWASM_LEGACY_EXCEPTIONS=0 -sEXIT_RUNTIME=0 -sFORCE_FILESYSTEM=1 -sEXPORTED_RUNTIME_METHODS=FS,ENV -pthread -sPTHREAD_POOL_SIZE=16 -sAUDIO_WORKLET=1 -sWASM_WORKERS=1 -Wl,--wrap=emscripten_futex_wait")
         if (include_symbols) {w |> write(" -g3 --emit-symbol-map")}
         for (a in emcc_args) {
             w |> write(" {a}")
diff --git a/utils/internal/dasllama-ladder/README.md b/utils/internal/dasllama-ladder/README.md
index 1e7eeddfc1..fa6834f689 100644
--- a/utils/internal/dasllama-ladder/README.md
+++ b/utils/internal/dasllama-ladder/README.md
@@ -113,6 +113,15 @@ sudo dasllama-deploy.sh install $SHA /tmp/dasllama-ladder-$SHA.tar.gz
 sudo dasllama-deploy.sh caddy                                      # splice /api into the dasllama.io vhost, validate, reload
 ```
 
+`caddy` also carries the `header /examples/*` block: the browser examples served there are
+`-pthread` builds whose Web Workers share memory through `SharedArrayBuffer`, which a browser
+grants only to a cross-origin-isolated page - one whose responses carry
+`Cross-Origin-Opener-Policy same-origin` and `Cross-Origin-Embedder-Policy require-corp`. The
+COEP value is `require-corp` because Safari implements no other; under it the page's only
+cross-origin subresource, the analytics script, loads with `crossorigin`. A later `caddy` run
+replaces the deployed block when the snippet's text differs, so a header value changed in the
+snippet reaches the box.
+
 The unit `provision` writes is **sandboxed** (`ProtectSystem=strict`, all capabilities dropped,
 loopback-only, `ReadWritePaths` limited to the data dir + release tree) - it contains a
 hypothetical parser/runtime RCE to a process that can only write its own db and logs, while the
diff --git a/utils/internal/dasllama-ladder/REVIEW.md b/utils/internal/dasllama-ladder/REVIEW.md
index bab5756be3..3cdfc40133 100644
--- a/utils/internal/dasllama-ladder/REVIEW.md
+++ b/utils/internal/dasllama-ladder/REVIEW.md
@@ -32,13 +32,16 @@ fetch, and the loopback `Host` refuses DNS rebinding.
 **Every operator route gates through `is_operator_caller`.**
 
 **A diff that adds a route a public caller needs also adds it to `caddy.snippet`, in the same
-change as its handler; never edit `caddy.snippet` to match the deployed Caddyfile - edit the
-deployed Caddyfile to match `caddy.snippet` instead.**
+change as its handler.**
 
-**A diff that adds a directive at `caddy.snippet`'s top level - a line or block sitting
-directly inside the `dasllama.io { }` block, not nested in another block - also makes
-`dasllama-deploy.sh`'s `caddy_apply` splice it into a deployed `dasllama.io` block that lacks
-it, in the same change.**
+**A diff that changes `caddy.snippet` never does so to match the deployed Caddyfile - the
+deployed Caddyfile is edited to match `caddy.snippet`, through `dasllama-deploy.sh caddy`.**
+
+**A diff that adds or changes a directive at `caddy.snippet`'s top level - a line or block
+sitting directly inside the `dasllama.io { }` block, not nested in another block - also makes
+`dasllama-deploy.sh`'s `caddy_apply` reconcile that directive on the box in the same change:
+splice it when the deployed `dasllama.io` block lacks it, replace it when its deployed text
+differs from the snippet's.** Presence alone leaves a changed value on the box.
 
 **On a route that serves board data, mutates the store, or refuses a caller, a response path
 that does not log one `ladder.req` line through `log_request` is a defect.**
@@ -59,6 +62,10 @@ false, or adds an opener reachable from a non-loopback path, is a defect** - onl
 `/api/submit/sidecar` matcher carries the `request_body { max_size 64KB }` cap, and that
 matcher carries `max_size 8MB` and no smaller cap.**
 
+**Every `/examples/*` response in `caddy.snippet` carries `Cross-Origin-Opener-Policy
+same-origin` and `Cross-Origin-Embedder-Policy require-corp` - never `credentialless`, which
+Safari does not implement.**
+
 **A file in this directory requires no dasLLAMA, dasLLVM, or model machinery other than the
 engine-free `dasllama/dasllama_exchange_schema`, and only `ladder_store.das` requires that**
 (`README.md` sec.3).
diff --git a/utils/internal/dasllama-ladder/caddy.snippet b/utils/internal/dasllama-ladder/caddy.snippet
index 5209370c0d..a63a3a2424 100644
--- a/utils/internal/dasllama-ladder/caddy.snippet
+++ b/utils/internal/dasllama-ladder/caddy.snippet
@@ -63,13 +63,11 @@ handle /api/sidecar/* {
 	reverse_proxy 127.0.0.1:8201
 }
 
-# The browser examples (/examples/<id>/) are -pthread wasm64 builds: SharedArrayBuffer needs
-# a cross-origin-isolated page, so the two isolation headers ride every response under
-# /examples/. `credentialless` (not require-corp) keeps the analytics script loading; every
-# memory64-capable browser supports it, and the model files are same-origin.
+# /examples/<id>/ shells are -pthread wasm: SharedArrayBuffer needs cross-origin isolation.
+# Their one cross-origin subresource, the analytics script, loads with `crossorigin`.
 header /examples/* {
 	Cross-Origin-Opener-Policy same-origin
-	Cross-Origin-Embedder-Policy credentialless
+	Cross-Origin-Embedder-Policy require-corp
 }
 
 # /admin/* and /shutdown are deliberately absent: they are operator surfaces.
diff --git a/utils/internal/dasllama-ladder/dasllama-deploy.sh b/utils/internal/dasllama-ladder/dasllama-deploy.sh
index e6a15c7a23..b0449ac8b3 100644
--- a/utils/internal/dasllama-ladder/dasllama-deploy.sh
+++ b/utils/internal/dasllama-ladder/dasllama-deploy.sh
@@ -103,6 +103,16 @@ vhost_has() {
     awk '/^dasllama\.io \{/ { b = 1 } b { print } b && /^\}/ { b = 0 }' "$CADDYFILE" | grep -q "$1"
 }
 
+examples_block() {
+    # the `header /examples/* { ... }` block of $1, one directive per line, indentation stripped
+    awk '/^[ \t]*header \/examples\/\*/ { b = 1 } b { sub(/^[ \t]+/, ""); print } b && /^\}/ { b = 0 }' "$1"
+}
+
+examples_block_vhost() {
+    # the same block as the dasllama.io vhost of the shared Caddyfile carries it today
+    awk '/^dasllama\.io \{/ { b = 1 } b { print } b && /^\}/ { b = 0 }' "$CADDYFILE" | examples_block /dev/stdin
+}
+
 splice_vhost_line() {
     # one top-level directive line ($1) into the dasllama.io vhost, right after its opening brace;
     # validated before reload, restored from the timestamped backup on any failure
@@ -140,24 +150,29 @@ caddy_apply() {
             spliced=1
         done < "$lines"
         rm -f "$lines"
-        # ... then the `header /examples/*` isolation block
-        if grep -q "header /examples/\*" "$snippet" && ! vhost_has "header /examples/\*"; then
+        # ... then the `header /examples/*` isolation block: spliced when the vhost lacks it,
+        # replaced when the vhost's copy differs from the snippet's (a header value the snippet
+        # changed - the COEP value - never reaches the box on presence alone)
+        if grep -q "header /examples/\*" "$snippet" && [ "$(examples_block "$snippet")" != "$(examples_block_vhost)" ]; then
             ts=$(date +%Y%m%d-%H%M%S)
             cp "$CADDYFILE" "$CADDYFILE.bak-$ts"
             awk -v snip="$snippet" '
-                /^dasllama\.io \{/ && !done {
-                    print
+                function emit_block(   line, inblock) {
                     inblock = 0
                     while ((getline line < snip) > 0) {
                         if (line ~ /^header \/examples\/\*/) inblock = 1
                         if (inblock) print "\t" line
                         if (inblock && line ~ /^\}/) inblock = 0
                     }
-                    close(snip); done=1; next
+                    close(snip)
                 }
+                /^dasllama\.io \{/ && !invhost { invhost = 1; print; next }
+                invhost && /^\}/ { if (!done) { emit_block(); done = 1 }; invhost = 0; print; next }
+                invhost && /^[ \t]*header \/examples\/\*/ { emit_block(); done = 1; skipping = 1; next }
+                skipping { if ($0 ~ /^[ \t]*\}/) skipping = 0; next }
                 { print }
             ' "$CADDYFILE.bak-$ts" > "$CADDYFILE"
-            if ! vhost_has "header /examples/\*"; then
+            if [ "$(examples_block "$snippet")" != "$(examples_block_vhost)" ]; then
                 echo "caddy: header splice inserted nothing (dasllama.io vhost not matched) - restoring $CADDYFILE.bak-$ts"; cp "$CADDYFILE.bak-$ts" "$CADDYFILE"; exit 1
             fi
             if ! caddy validate --config "$CADDYFILE" --adapter caddyfile >/dev/null 2>&1; then
diff --git a/web/CMakeLists.txt b/web/CMakeLists.txt
index a5002205e0..0f1de7da76 100644
--- a/web/CMakeLists.txt
+++ b/web/CMakeLists.txt
@@ -38,13 +38,14 @@ add_compile_options(-mnontrapping-fptoint)
 # target-ptr-size, so the JIT/AOT cross-compile bakes correct layouts (no
 # pointer-width mismatch). Build the runtime archive with this ON and point
 # DAS_WEB_OUTPUT_DIR at a separate dir (e.g. web/output64) so it does not
-# collide with the wasm32 archive — they are ABI-incompatible. dasLLVM
-# (find_runtime_lib / link_wasm) auto-selects web/output64 + -sMEMORY64=1 for a
-# wasm64-unknown-emscripten target.
+# collide with the wasm32 archive — they are ABI-incompatible. Archives compile
+# -sMEMORY64=1; every link (this file's, dasLLVM link_wasm, daspkg release wasm)
+# passes -sMEMORY64=2: 8-byte pointers over a 32-bit memory, so engines without
+# memory64 (WebKit) run it.
 option(DAS_WASM_MEMORY64 "Build wasm output for memory64 (8-byte pointers)" OFF)
 if(DAS_WASM_MEMORY64)
     add_compile_options(-sMEMORY64=1)
-    add_link_options(-sMEMORY64=1)
+    add_link_options(-sMEMORY64=2)
 endif()
 
 # Threads: build the runtime/modules with -pthread so std::thread (new_thread,
diff --git a/web/examples/ui/REVIEW.md b/web/examples/ui/REVIEW.md
index 9cfc58cf44..0e404b0954 100644
--- a/web/examples/ui/REVIEW.md
+++ b/web/examples/ui/REVIEW.md
@@ -3,21 +3,21 @@
 **Read `REVIEW_COMMON.md` (repo root) first - its contract binds this checklist.** Architecture doc:
 `site/README.md`.
 
-**A boulder-dash sample file - a `.das` source, a dastest suite, or that sample's
-`ARCHITECTURE.md` - answers to `samples/examples/boulder-dash/REVIEW.md`, wherever the diff
-puts it.**
+**A file of the boulder-dash sample - a `.das` the `boulder-dash` entry of `samples/data.json`
+lists, a dastest suite over one of those files, or that sample's `ARCHITECTURE.md` - answers to
+`samples/examples/boulder-dash/REVIEW.md`, wherever the diff puts it.**
 
 **A diff that changes a file of this folder applies `site/REVIEW.md` (repo root) too.** The
-deploy copies these files into the site (`.github/workflows/pages.yml`, repo root), so
-`site/playground/` never shows the change.
+deploy publishes this folder's `src/` as the site's playground, so a change here changes the
+site with no diff under `site/`.
 
-**A PR whose diff changes `src/` (this folder) states, in the PR body, a run of the
-WASM-staged Playwright suite (`site/tests/playground/`, repo root) against the branch tip,
-naming the passes and any failures; a later edit to `src/` restates the run.** The no-WASM
-lane cannot see a broken runtime path, and a run recorded mid-branch describes a tree that no
-longer ships.
+**A PR whose diff changes `src/` (this folder) states, in the PR body, a run of the full
+Playwright suite (`site/tests/playground/`, repo root) with WASM artifacts staged at
+`site/playground/` - the deployed artifacts count, `src/` is not compiled into them - against
+the branch tip, naming the passes and any failures; a later edit to `src/` restates the run.** A run without those artifacts cannot see a broken runtime path, and a
+run recorded mid-branch describes a tree that no longer ships.
 
-**A PR whose diff changes a bundle under `samples/` - the file set a `data.json` entry lists -
+**A PR whose diff changes a bundle under `samples/` - the file set a `samples/data.json` entry lists -
 states, in the PR body, a run that loaded that bundle on a runtime built from the branch tip -
 the dasweb-verify browser run (`utils/internal/dasweb-verify`, repo root), or the bundle's game
 card or playground page opened and run for a few frames - naming the bundle and the
diff --git a/web/examples/ui/src/main.js b/web/examples/ui/src/main.js
index 2241007bbd..5626f3861c 100644
--- a/web/examples/ui/src/main.js
+++ b/web/examples/ui/src/main.js
@@ -253,28 +253,11 @@ async function collectAssetUrls() {
     }
 }
 
-// Built artifacts are wasm64 (memory64) — browsers without memory64
-// (Safari/iOS) cannot instantiate them, so the wasm engine stays disabled
-// there no matter what the build service says. Detected once at load.
-const WASM64_SUPPORTED = (() => {
-    try {
-        // Validate a minimal module declaring a 64-bit (memory64) memory:
-        // \0asm | version | memory section {count=1, flags=0x04 (memory64), min=1}.
-        // More robust than `new WebAssembly.Memory({index:'i64'})`, which can
-        // false-positive on engines that silently ignore the unknown descriptor
-        // field and hand back a wasm32 memory. validate() parses the memory64
-        // flag, so it is true only where the engine truly supports it.
-        return WebAssembly.validate(new Uint8Array([0, 0x61, 0x73, 0x6d, 1, 0, 0, 0, 5, 3, 1, 4, 1]));
-    } catch (e) {
-        return false;
-    }
-})();
-
 // Whether the wasm engine can be offered at all. Unlike the retired
 // precompiled-artifact path, this no longer depends on which sample is loaded:
 // builds are content-addressed, so any editor state — including a multi-file
-// one — is buildable. What it does depend on is this browser (wasm64 artifacts
-// need memory64) and the service having a live toolchain to build against.
+// one — is buildable. The artifact is wasm64 lowered to a 32-bit memory at link,
+// so every engine runs it: no browser check, only the build service's toolchain.
 function updateEngineAvailability() {
     const wasmRadio = document.querySelector('input[name=engine][value=wasm]');
     if (!wasmRadio) return;
@@ -288,7 +271,7 @@ function updateEngineAvailability() {
             if (interpRadio) interpRadio.checked = true;
         }
     };
-    if (!WASM64_SUPPORTED || !window.pgWasmBuild) { disableWasm(); return; }
+    if (!window.pgWasmBuild) { disableWasm(); return; }
     window.pgWasmBuild.buildInfo()
         .then(info => { if (info.enabled) wasmRadio.disabled = false; else disableWasm(); })
         .catch(() => disableWasm());