Fix RC2 recovery and accounting for bounded Home pilot

.small-command-proofs/logs/f6bbda15d790df6d023dea340edd1b85ccac89c82db362652a1b656981e82d96/commands/20261016T233350.244228000Z.txt

@@ -0,0 +1 @@
+git add .small/plan.small.yml .small/progress.small.yml .small/workspace.small.yml CHANGELOG.md README.md SPEC.md cmd/loopexec/budget.go cmd/loopexec/candidate.go cmd/loopexec/main.go cmd/loopexec/receipt.go cmd/loopexec/receipt_test.go cmd/loopexec/report.go cmd/loopexec/run.go cmd/loopexec/workflow.go cmd/loopexec/workflow_test.go cmd/loopexec/continuation.go cmd/loopexec/continuation_test.go cmd/loopexec/pilot_recovery_test.go cmd/loopexec/recovery.go cmd/loopexec/resume_validation.go cmd/loopexec/review_recovery_test.go docs/cli-reference.generated.md docs/cli.md docs/documentation-continuity.md docs/documentation-files.json docs/model-assignments.md docs/status-and-roadmap.md docs/workflows.md docs/recovery-and-continuation.md docs/releases/v0.5.0-rc.2-pilot.md docs/releases/v0.5.0-rc.2.md internal/workflow/contract.go scripts/release-readiness.json tools/release-policy/main.go tools/release-policy/readiness.go tools/release-policy/readiness_test.go

.small-command-proofs/logs/f6bbda15d790df6d023dea340edd1b85ccac89c82db362652a1b656981e82d96/commands/20261017T143327.736725000Z.txt

@@ -0,0 +1 @@
+git add -- cmd/loopexec/budget.go cmd/loopexec/candidate.go cmd/loopexec/resume_validation.go cmd/loopexec/run.go cmd/loopexec/workflow.go cmd/loopexec/workflow_test.go cmd/loopexec/offline_review_test.go cmd/loopexec/usage_evidence.go docs/workflows.md docs/recovery-and-continuation.md docs/releases/v0.5.0-rc.2.md docs/releases/v0.5.0-rc.2-offline-repair.md docs/documentation-files.json scripts/release-readiness.json CHANGELOG.md .small/handoff.small.yml .small/plan.small.yml .small/progress.small.yml .small/workspace.small.yml

.small/handoff.small.yml

@@ -1,6 +1,6 @@
 small_version: "1.0.0"
 owner: agent
-summary: 'Model assignments and prerelease-safe publication locally verified for v0.5.0-rc.1. Full Go suite, vet, internal race tests, offline two-role proof and isolated consumer protocol rejection pass. Matching canonical docs prepared. Next: exact-head hosted checks, paired docs deployment and official readback, main merge, rehearsal and RC publication. Stable remains v0.4.1; no live critic or consumer budget reset.'
+summary: RC2 scoped merge payload ready locally. Accepted6a564143 remains runtime/tooling/workflow-byte identical with source digeste563ec37. Complete historical SMALL progress/proofs preserved via CLI snapshot/checkout, new bounded-acceptance prose/CHANGELOG/allowlist added, no RC3 or consumer harness changes. Local full/focused Go, vet, internal/scoped races, contract, five offline proofs, gitleaks, docs/privacy/cochange/format/cache-free gates passed. Enclosing audit task59 will publish fast-forward to existing PR10 and verify exact final hosted SHA before merge decision; no merge authorized. Original b2df4d52 acceptance stays bound to6a/f71 only; stable/live release and proposed190k review remain held. No model calls, Home writes, runtime replacement, tag, publish or deploy.
 resume:
     current_task_id: task-36
     next_steps:

.small/plan.small.yml

@@ -136,3 +136,36 @@ tasks:
     - id: task-44
       title: Make v0.5.0-rc.1 publication prerelease-safe and verify before tag release
       status: completed
+    - id: task-45
+      title: Repair pilot recovery, retain failure chain and unresolved accounting; validate offline with stable held
+      status: completed
+    - id: task-46
+      title: 'Hold stable: obtain fresh bounded live-pilot authorization, independent review delivery and exact candidate hosted/docs readback evidence'
+      status: blocked
+    - id: task-47
+      title: Allow deterministic resume recovery after deadline or unresolved usage without dispatch; reject missing authoritative journals
+      status: completed
+    - id: task-48
+      title: Run authorized independent review and fresh bounded rc.2 live pilot; preserve Home World and hold stable
+      status: completed
+    - id: task-49
+      title: Reproduce and fix independent RC recovery review findings before authorized pilot dispatch
+      status: completed
+    - id: task-50
+      title: Repair final independent critic accounting, baseline replay and controller mutation findings without more model calls
+      status: completed
+    - id: task-51
+      title: Commit scoped held RC2 corrections and verify hosted source CI without release publication
+      status: completed
+    - id: task-52
+      title: Verify exact RC2 binary binding and perform one explicitly extended independent acceptance review without Home spending
+      status: completed
+    - id: task-53
+      title: Reproduce final reviewer findings and repair warranted core and private-fixture gaps offline while preserving rejection
+      status: completed
+    - id: task-54
+      title: Execute newly authorized bounded independent acceptance review of repaired RC2; preserve all prior receipts and stop on acceptance
+      status: completed
+    - id: task-55
+      title: Deliver accepted RC2 PR fast-forward with byte-identical runtime, portable audit lineage and current bounded-acceptance prose; validate exact final SHA
+      status: completed