Darwin's self-modifying AI agents can rewrite their whole harness, thinking loop included. Here's how, and why every safety check lives outside the container.