Autonomous recovery run

One follow-up, timed by the events themselves. Every step is a real handler result — the model never produced one. ~4 minute judge flow, demo identities only.