Formally verified pure kernels shared by Crabka's consensus and log crates.
Every function here is a total, synchronous, allocation-light kernel whose
functional contract is proven with Creusot (see docs/verification.md).
Host crates call through - there are no duplicate bodies anywhere.