Metal

Headless rendering and real offline Metal libraries worked. Passing a nil depth state caused a driver crash. The driver rejected the thirty-third counter buffer with a generic allocation error; grouped disjoint sample ranges worked. Shared-event completion preceded command-status publication.