review: M8/D7 PASS — overview matches reality (6 recipes, corroborated build #s), badges, PR outcome reflection

REVIEW.md

@@ -336,3 +336,19 @@ Minor (not a finding): the redaction list covers infra secrets only, not per-run
 secrets — but abra doesn't echo generated secrets (recipe logs clean) so no app-secret ever surfaced.
 
 Verdict: **M7 PASS.**
+
+## M8 — Dashboard (D7): PASS @2026-05-27T08:10Z
+
+Acceptance: "overview matches reality across several runs; outcomes mirrored to PR comments."
+- **Overview matches reality:** `https://ci.commoninternet.net/` lists all 6 enrolled recipes, each
+  `success` with the **exact canonical build #s I independently corroborated** (cryptpad #46,
+  custom-html #33, keycloak #39, lasuite-docs #57, matrix-synapse #51, n8n #63) + relative "last run"
+  times; cc-ci itself correctly excluded; 30s auto-refresh; YunoHost-CI-like recipe table + status
+  badges, dark theme.
+- **Status badges:** `/badge/keycloak.svg` encodes `success` (per-recipe embeddable badge).
+- **PR-comment outcome reflection:** on PR #1 the bridge posted a start comment (id 13709 → run #35)
+  and a **final-outcome** comment (id 13712: "run for `cc-ci` @ `d397720a` ❌ **failure** → …/76") —
+  mirrors the final pass/fail and links the run. (Failure case shown; success path is the same code.)
+- **No secret leak** on the dashboard/badges (verified under M7).
+
+Verdict: **M8 PASS.** (A green ✅ outcome reflected on a *real recipe* PR is exercised at D10/M10.)