First, I love that you topped up your reservoir as a test. Something about this has me chuckling. I would have been dumbfounded and elated if it had reproduced the event I described.
Second, I have no interest in diverting anyone else's further attention and energy towards my particular event. Maybe I will figure it out, maybe I won't, maybe I am forgetting something, maybe yadda yadda yadda.
Third, the reason I attributed the 3 successive engine shut downs to the overfilled reservoir is because I read some Googles about it. I had to to go 3 or 4 pages deep. Several results spoke of an overfilled coolant reservoir triggering the engine shut down and/or the A/T fluid temp light. I Googled on my phone as I sat in the stalled truck with the idiot light on. I removed some coolant from the reservoir, dropping the level a couple of inches below the full line. It never ever would have occurred to me that such a thing was possible had I not read about it (from more than one source). The most frustrating part of this whole thing is no matter how I vary my search terms I cannot find these. I know they exist because I read them. They are out there, somewhere…..
Fourth, I am interested in the more general matter of what 'fail safe' means as defined by Toyota. I appreciate your explanation. It is simple and clear. I understand the limp mode. Am I also to understand there is a second mode which will completely shut down the engine ("In some cases a safe assumed value for a failing sensor cannot be used and engine shutdown can occur")?
I haven't read the whole thread, but one thing to keep in mind, is that there is a lot of misinformation posted on the 'Net. Even on this board.
Not everyone has the schooling and experience to diagnose your problem correctly. It makes it even more difficult, as a Tech, if you aren't in the physical presence of the vehicle in question. There are so many different things a Tech would want to test, but writing it all out on here trying to explain the procedures in layman's terms, would be equivalent to writing a short novel.
If your problem is still unresolved, at this point you might be best served by having a qualified Tech diagnose your truck's issue, in person.
Good luck.