szl-kernels suite: governed norm, Λ-gate, energy meter, signing, provenance-DAG. SHA3-256 hash-chained receipts per op.