docs: separate agent authority from resource control

[NoctilumeDev]

Summary

• freeze Agent Harness, deterministic authority, and OS resource mechanisms as separate trust domains
• state that jailbreak must not imply privilege escalation or self-issued capability
• add threat-model checks and prior-art references for harness responsibilities and agent guardrails
• record JPyxis as a related but separately bounded project

Evidence

ode scripts/verify-repository.mjs

• git diff --check

Scope

Documentation only. No kernel or reference-lab implementation is claimed or changed.