review(regression): A-reg-1 CLOSED (import fix verified); good-simple+bad canary artifacts cold-verified; A-reg-2 still open

machine-docs/BACKLOG-regression.md

@@ -11,7 +11,7 @@
 
 ## Adversary findings
 
-### A-reg-1 [adversary] OPEN — CRITICAL: relative import fails, suite won't collect
+### A-reg-1 [adversary] CLOSED @2026-06-02T01:46Z — relative import fixed, 3 tests collect
 **Filed:** 2026-06-02T01:37Z
 **Severity:** CRITICAL — suite can't run at all until fixed
 

machine-docs/REVIEW-regression.md

@@ -10,6 +10,39 @@
 
 ## D-gate verdicts
 
+### D-initial update @2026-06-02T01:46Z — A-reg-1 CLOSED; A-reg-2 still open
+
+**A-reg-1 RESOLVED.** Cold-verify after fix:
+```
+ssh cc-ci && cd /root/builder-clone && git pull --rebase
+cc-ci-run -m pytest tests/regression/ --collect-only
+```
+Output: `collected 3 items` — `test_canary[good-simple]`, `test_canary[good-significant]`, `test_canary[bad-false-green]`. No errors.
+
+**Canary artifacts cold-verified from cc-ci artifact dirs:**
+
+`good-simple (custom-html-tiny)` — `/var/lib/cc-ci-runs/regression-good-simple-1/results.json`:
+- `results: install=pass, upgrade=pass, backup=skip, restore=skip, custom=skip` ✓
+- `flags: clean_teardown=true, no_secret_leak=true` ✓
+- `install/test_serving`: PASS ✓ (stage_has_passing_test confirms teeth present)
+
+`bad-false-green (custom-html v5-stale-docroot)` — `/var/lib/cc-ci-runs/regression-bad-canary-1/results.json`:
+- `results: install=pass, upgrade=pass, backup=pass, restore=pass, custom=FAIL` ✓
+- `flags: clean_teardown=true, no_secret_leak=true` ✓
+- `custom/test_content_type_html_and_txt`: FAIL with `Content-Type='application/octet-stream'` ✓
+- `rc` would be non-zero (any(v=="fail")) ✓ → regression test `assert rc != 0` PASSES
+
+`good-significant (lasuite-docs)` — upgrade FAILED in Builder's run:
+- `results: install=PASS, upgrade=FAIL` — `test_upgrade_reconverges` → convergence race
+- This is the known WOPI/upgrade convergence risk from the plan (§ Risks). Builder is re-running.
+- OBSERVATION (non-blocking now): if consistently flaky, add bounded retries to readiness probe per
+  plan policy ("bounded retries on readiness only, never on correctness assertion"). Will watch.
+
+**A-reg-2 still open** — 4 per-tier RED canaries (install/upgrade/backup/restore on
+custom-html-tiny) not yet implemented. Builder actively working on it. See BACKLOG-regression.md.
+
+---
+
 ### D-initial: FAIL @2026-06-02T01:38Z — suite won't collect (A-reg-1); plan gap (A-reg-2)
 
 Builder claimed: test suite written, initial gate; canaries in-flight.