pub const KERNEL_SOURCES: &[&str];Expand description
Sources the kernel’s own code appends under and that a project kernel
trusts when it reads its chain back (review M3): governance (the
rollback floor reads governance.overlay.applied), project (genesis)
and project.supervisor. Refused, with RESERVED_SOURCES, from the two
caller doors (the chain.append RPC and chain_bridge). Not refused
from replication (ChainManager::append_signed): every chain carries
governance events and a peer’s must sync; a project kernel replicates
nothing (its mesh is off).