G2: propose bounded reset-2 recovery amendment

[kmccleary3301]

Decision requested

Approve or reject the inert G2/reset-2 planning amendment. This PR does not activate reset-2, select or merge a seed, mutate runtime state, or close/supersede any packet.

Exact scope

• Subject commit: d03324f9d44f1318b1a4ffb37ab62c6ebe250eae
• Tree: d2e5c486295d98956e8d3111239e917ba88b25d8
• Sole parent/base: 6a31143dfd0255bebb1a26130d96d95eb53e4ca3
• Files: EXECUTION_PLAN.md, LOOP_SPEC.yaml
• Diff: 4,356 additions + 133 deletions = 4,489 changed lines (cap: 4,500)

Purpose

Reset-1 is exhausted and immutable negative evidence. This amendment defines the only bounded lawful reset-2 path while preserving the logical G2 packet, tracker issue, dependency graph, product scope, and completion criteria. Activation still requires fresh exact planning reviews and distinct authenticated human action/consumption records for scope/budget, governance schema, and security boundary. Seed/candidate merge and closure remain separately gated.

Verification

• strict duplicate-key YAML parse: PASS
• embedded standard-library admission validator AST/compile: PASS
• scripts/check_phase20_freeze.py: PASS
• git diff --check: PASS
• class/result/phase maps: 33/33/33 exact parity
• action/binding/consumption maps: 8/8/8 exact parity
• final specification review: APPROVE, zero P0-P2 (G2Reset2DigestFinalSpec)
• final security/authority review: APPROVE, zero P0-P2 (G2Reset2DigestFinalSecurity)

Human gate

Merging changes packet-control governance and security-boundary planning. Do not merge without Kyle's explicit exact-scope approval. Approval of this planning PR alone does not authorize reset-2 activation actions, seed/candidate merges, packet closure, claim publication, or release.