feat(kernel): shared ABI decoder+proofs, no-panic gate, syscall storm, kani on shrunk kernel

crates/domain/src/lib.rs

@@ -1,4 +1,18 @@
 #![no_std]
+// A kernel panic takes the whole system down, so kernel code may not
+// contain any way to panic. Tests and proofs are exempt.
+#![cfg_attr(
+    not(any(test, kani)),
+    deny(
+        clippy::unwrap_used,
+        clippy::expect_used,
+        clippy::panic,
+        clippy::unreachable,
+        clippy::todo,
+        clippy::unimplemented,
+        clippy::indexing_slicing
+    )
+)]
 
 #[cfg(kani)]
 pub mod proofs;