The Policy Kernel — compiles a declarative, signable action Policy into the Action Kernel's PolicyGate. Three-valued gate (allow/deny/hold), trust-ladder floor, and the approval-request lifecycle. Part of Lodestar, the trust layer for AI agents.