kernel cones guarantees w/ embedding operator