Why safe AGI requires an enactive floor and state-space reversibility — Blankdot