Release v2.2.2: bounded recovery and execution proof convergence

[BobbyAxerol]

Scoped Data Layer v2.2.2 release convergence

Preserves existing Kafka-native architecture and all tested commits. Kafka recovery, bounded projector handoff and broker-confirmed canonical hot backup; SDK2.0.7 shared proof validator and lossless MARK/INDEX component clocks/capture lineage. No TS caller/accounting change.

Parent-reviewed runtime convergence completed

• Exactly Query2 then Query1 recreated to sha256:514506122111df8992a5dfac9dc9a3db7ccae202a398424f4dd5a033d2ddf9a9 (source d6d2637).
• Environment/TLS/mounts/config/resource caps unchanged;15 other active DL roles unchanged.
• 44/44 MARK snapshot/reference usable,22 reference views preserve all six lineage fields.
• Total62/64 usable; two strict OKX TRADE stale-event refusals retained, attribution UNKNOWN without simultaneous provider witness. Not100%availability.
• Worker20/20 sampled READY/session22/22/execution18/22 over190.224s; no order/newstream/fullC2.

Verification

104 source PASS, Redis42/42, immutable package64/64, entrypoint and exact image/source hashes PASS. Rust runtime unchanged; inherited fault/recovery evidence retained. CI-only rustfmt correction and required isolated Kafka fault-controller wiring added with3 behavioral regressions. Remote native fault test now PASS; final-head checks still mandatory.

Release gates

Final metadata head42e2b70; certificate/report/notes under upgrade/evidence/releases/v2.2.2. Certificate PASS applies to bounded runtime delta; merge/tag/publication require all required remote checks and main ancestry. Do not release before final-head CI is green. Rollback only Query2/1 to sha256:3af57ddf17642e2073e09e8d92450e3aca551ebd5d855462c9ce60f148e5e85c.

No squash, no runtime source rebuild for docs/CI-only changes, no policy relaxation or synthetic prices. Same-host backup is not independent HA/zero downtime. Scope and measured latency limits remain explicit.