System and method for bounded actuation authority of a machine reasoning host over a broker-based semantic model of a vehicle, with consequence-tiered command surface, independently enforced gates, measurement-derived dynamic envelopes, context-referenced decision records, and shadow validation of candidate hosts