BACKLOG: M9 docs complete (D9); M10 5/6 real-!testme green, lasuite gated on registry creds

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

BACKLOG.md

@@ -126,11 +126,19 @@ Two single-writer sections (§6.1): Builder edits only `## Build backlog`; Adver
       back AND reflect final pass/fail. Awaiting Adversary.
 
 ### M9 — Reproducibility + docs (D8/D9)
-- [ ] docs/install.md from-scratch rebuild; all docs complete
-- [ ] Gate: M9 — Adversary rebuilds from docs on throwaway host
+- [x] D9 docs complete: README + docs/{install,enroll-recipe,secrets,architecture,runbook,baseline}.
+      Covers architecture, enroll a recipe, add/run tests locally, operate/rotate secrets, debug a
+      failed run. install.md = from-scratch path (clone + nixos-rebuild + operator preconditions).
+- [ ] Gate: M9 — Adversary rebuilds from docs on throwaway host (D8) — Adversary action; install.md
+      ready. (Note: a from-scratch rebuild pulls images → needs the registry creds / quota too.)
 
 ### M10 — Proof (D10)
-- [ ] All six recipes green via real !testme PRs; flip STATUS to DONE
+- [x] 5/6 recipes green via REAL !testme PRs (full 3-stage, comment-reflected): custom-html #84,
+      keycloak #86, matrix-synapse #87, n8n #89, cryptpad #90.
+- [ ] lasuite-docs (6th, object-storage/S3) — install+backup green via !testme; upgrade BLOCKED on
+      Docker Hub rate limit (A1 registry creds, operator; STATUS ## Blocked). Retries halted pending
+      creds (3× confirmed).
+- [ ] Flip STATUS to DONE once lasuite green (creds) + REVIEW shows <24h PASS for all D1–D10.
 
 ## Adversary findings
 <!-- Adversary-only section. Builder must not edit below this line. -->