Applies the immutable Morph proposal ceiling to governance operations.
The policy computes the meet between the compiled Surface and host-provided ceilings during composition, then verifies a parent-to-candidate diff derived by the Surface boundary at activation. Transient Change fields are never authority-bearing inputs.