1c/E2E-TESTME: PASS (E1-E6) — clean-room VM serves a real !testme run end-to-end over the public domain

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-27 19:43:08 +01:00
parent 0864673eed
commit 3d86e31730
2 changed files with 32 additions and 0 deletions
--- a/JOURNAL-1c.md
+++ b/JOURNAL-1c.md
@ -383,3 +383,25 @@ Posted `!testme` (comment 13740, autonomic-bot) on custom-html#2 (head db9a9502)
  app) → **HTTP/2 200, ssl_verify=0**, `server: nginx/1.31.1`, body `<!DOCTYPE html>…Welcome to nginx!`
  (real app content, NOT a Traefik 404), cert `CN=*.ci.commoninternet.net` (LE E8). Crux proven.
 - E4 (build #4 success), E5 (teardown), E6 (reported+dashboard): monitor tracking to build terminal.
+
+## 2026-05-27 — E2E-TESTME: ALL E1–E6 PASS (functional acceptance of D8/clean-room)
+
+Real `!testme` on the rebuilt-from-git VM (swapped in as cc-nix-test), full pipeline against the
+PUBLIC domain:
+- **E1 PASS** — `https://ci.commoninternet.net/` (public gateway → rebuilt VM) → 200 ssl_verify=0.
+- **E2 PASS** — `!testme` (bot, comment 13740) on custom-html#2 → bridge poll → **new Drone build #4**
+  (event=custom, > baseline #3), via the bridge (not manual).
+- **E3 PASS** — app `cust-bdddd9.ci.commoninternet.net` answered an EXTERNAL request through the public
+  gateway → HTTP/2 200, ssl_verify=0, nginx/1.31.1, real body `…Welcome to nginx!`, cert
+  `CN=*.ci.commoninternet.net` (LE E8). Routing public-DNS→gateway→MagicDNS→rebuilt VM→Traefik→app proven.
+- **E4 PASS** — build #4 success; build log shows the REAL 3 stages all passing (no softening):
+  install (`test_http_reachable`, `test_playwright_page` — Playwright), upgrade
+  (`test_upgrade_preserves_data`), backup (`test_backup_mutate_restore`). 2+1+1 assertions passed.
+- **E5 PASS** — app undeployed cleanly afterward (0 residual `<tag>-<6hex>` app .envs/stacks).
+- **E6 PASS** — bridge posted to custom-html#2: "custom-html @ db9a9502 ✅ **passed** →
+  …/cc-ci/4"; public dashboard row = custom-html / success / #4.
+
+→ **E2E-TESTME PASS.** The clean-room-rebuilt VM is operationally a working CI server end-to-end over
+the real public domain. Caught+fixed the Drone-bot-token reproducibility gap en route (af46aca).
+Next: swap-back; re-deploy the token fix to cc-ci (byte-identical at new toplevel cqym8knj); Adversary
+independently verifies E1-E6.
--- a/STATUS-1c.md
+++ b/STATUS-1c.md
@ -75,6 +75,16 @@ See JOURNAL-1c 2026-05-27 W2a entry for full evidence.
 - [ ] C6 — Resource fit + cleanup (cc-nix-test 6→4 GB, throwaway 4 GB, destroyed after; final sizing decided)
 - [ ] C7 — Docs (install.md/secrets.md/architecture.md + main plan refs updated to new model)

+## ✅ E2E-TESTME — PASS @2026-05-27 (functional acceptance of D8/clean-room)
+Real `!testme` on the rebuilt-from-git VM (swapped in as cc-nix-test) over the PUBLIC domain:
+**E1** public 200/ssl_verify=0; **E2** bridge→new Drone build #4 (>baseline #3, not manual); **E3**
+app `cust-bdddd9.ci.commoninternet.net` EXTERNAL via gateway → HTTP/2 200, ssl_verify=0, real nginx
+body, `CN=*.ci.commoninternet.net` cert; **E4** build #4 success, log shows real install/upgrade/backup
+(Playwright incl.) all passed, no softening; **E5** clean undeploy (0 residual); **E6** bridge PR
+comment "✅ passed →…/cc-ci/4" + dashboard custom-html/success/#4. Evidence: JOURNAL-1c. Caught+fixed
+the Drone-bot-token reproducibility gap (af46aca) en route. **Adversary independently verifies E1-E6.**
+Remaining: swap-back; re-deploy af46aca to cc-ci (byte-identical at new toplevel `cqym8knj…`).
+
 ## 🔴 SWAP ACTIVE (2026-05-27 ~19:25Z) — public gateway points at the REBUILT VM (reversible)
 **State:** `cc-nix-test` (MagicDNS) → **`100.97.167.73`** (rebuilt `ccci-w5-rebuild`); original cc-ci
 renamed `cc-nix-test-orig` @ `100.90.116.4`, **still running** (swap-back target). Public