1c: Builder work COMPLETE (C1-C7 + E2E-TESTME); C7 docs done; awaiting Adversary final DONE-verification

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-05-27 19:53:58 +01:00
parent b700cd2fda
commit 3bfb48b83a
2 changed files with 18 additions and 4 deletions

View File

@ -405,3 +405,14 @@ PUBLIC domain:
the real public domain. Caught+fixed the Drone-bot-token reproducibility gap en route (af46aca).
Next: swap-back; re-deploy the token fix to cc-ci (byte-identical at new toplevel cqym8knj); Adversary
independently verifies E1-E6.
## 2026-05-27 — Builder work COMPLETE (C1C7 + E2E-TESTME); awaiting Adversary final verification
cc-ci on final config `cqym8knj` (byte-identical, 0 failed, bridge→Drone OK). C7 docs done:
install.md/secrets.md/architecture.md updated to the 1c model; plan.md §1.5 carries a Phase-1c
supersession note (cert now sops-from-git; bootstrap age key the one out-of-band secret; supersedes
§1.5/§4.0/§4.4 cert refs; points to docs/secrets.md). C6 settled (promote rebuilt VM, kept running;
first throwaway destroyed; cc-nix-test 4 GB). All C1C7 + E2E-TESTME implemented & Builder-verified.
**Remaining = Adversary's final DONE-verification:** re-confirm C1 byte-identical at `cqym8knj` +
independently verify E1E6. I'll write `## DONE` when REVIEW-1c shows <24h PASS for C1C7 + E2E-TESTME
and no VETO. (plan.md is in cc-ci-plan/, not this repo edited in place, not committed here.)