- add one inline deterministic MCP task and sealed planning assets
- reseal S2_00/S2_10 release hashes for the S2_20 handoff
- keep live and legal admission explicitly pending
Replace the unresolved host-loader invocation with one hash-bound Code Executor task so deterministic ingress has a concrete Agent execution path.\n\nBREAKING CHANGE: S2_00 no longer invokes stage2_loader.py. The legacy loader binding is reference-only and cannot authorize or provide fallback.