box-and-box is the governance kernel of the [&] stack: every agent syscall passes feasible ▸ permitted ▸ best, over an un-weakenable safety floor, with a proof for every verdict — one modal core, any model, any language, 116 property-tested laws.