proof(ordinal): reduce Fidelity trust boundary 3→2 — construct BH target in --safe kernel

proof(ordinal): reduce Fidelity trust boundary 3→2 — construct BH target in --safe kernel #746