recoveryKeyResetAwareness

Whether this user has a pending recovery key reset to surface (docs/recovery-key-reset.md, "Reset awareness"). Read-only: reads the recovery key status and then the reset status (two signed requests with this device's active device authentication key, never cached), checks that the reset is bound to the active key and epoch of this user, and classifies it with the client clock: RecoveryKeyResetAwareness.Pending before RecoveryKeyResetStatus.Pending.eligibleAt, RecoveryKeyResetAwareness.Eligible from then on. The server still decides eligibility with its own clock when a completion is submitted.

The two reads are not atomic. A mismatch that a transition between them can explain is read again once (at most four requests); if it persists, returns RecoveryKeyResetAwareness.Inconsistent. Never requests, cancels or completes a reset, never rotates a key, stores nothing, and is never called implicitly.