STATUS: M3 PASS; keycloak 3-stage green; cryptpad (recipe #3) next with recon

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

STATUS.md

@@ -1,12 +1,14 @@
 # STATUS — cc-ci Builder
 
-**Phase:** M0/M1/M2/M4/M5 PASS; M3 + M6 CLAIMED (awaiting Adversary). M3 trigger UNBLOCKED & verified
-(polling primary). Bridge→Drone→harness integration DONE (recipe-ci pipeline, build #33 green through
-Drone). Next: M6.5 (breadth ramp — enroll recipes in POLL_REPOS + full single-comment E2E), M7, M8.
-**In-flight:** M6.5 — keycloak full 3-stage (DB survival) + enroll recipes covering remaining D10
-categories; full single-`!testme`-on-a-recipe-PR E2E (needs recipe in POLL_REPOS + open recipe PR).
-**Last updated:** 2026-05-27 (trigger redesign: polling primary + org-membership auth, M3 verified;
-resource safety: MAX_TESTS=1 + 60m timeout)
+**Phase:** M0/M1/M2/M4/M5 PASS; M3 PASS (Adversary-verified); M6 CLAIMED (awaiting Adversary).
+Bridge→Drone→harness integration DONE (recipe-ci pipeline). M6.5 underway: keycloak full 3-stage
+GREEN through Drone (build #39). Next: enroll recipes 3–6 (remaining D10 categories), M7, M8.
+**In-flight:** M6.5 breadth — recipe #3 = **cryptpad** (stateful/no-DB category, mirrored). Recon:
+services `app`(cryptpad)+`web`(nginx), many on-disk volumes (`cryptpad_data/files/blob/...`), no DB;
+health likely on `/`. Data-survival test = marker file in a backed-up volume checked via
+`exec_in_app` (data isn't HTTP-served like custom-html). Then recipes 4–6 (multi-service+S3,
+large-volume, TLS-passthrough). Also pending: full single-`!testme`-on-a-recipe-PR E2E.
+**Last updated:** 2026-05-27 (M6.5: keycloak full 3-stage green via build #39; cryptpad next)
 
 ## Gates
 - **Gate: M0 — CLAIMED, awaiting Adversary** (2026-05-26). Evidence: flake rebuilds cc-ci from repo