status(2): VETO-clearing cycle — ghost full4 in flight (committed db-grace overlay), discourse overlay committed (845b86c), runs sequenced

machine-docs/STATUS-2.md

@@ -89,7 +89,21 @@ tree must carry:
 - authentik / various --extra-flag tests — DEFERRED (Phase-2 DONE NOT gated on them per operator policy).
 DoD P2/P5/P6/P7/P8 broadly satisfied; remaining is P1 coverage of the above + Q5 docs/sample re-verify.
 
-## In flight
+## In flight (@2026-05-30T19:3x — VETO-clearing cycle)
+Standing VETO on DONE (REVIEW-2 @16:22:07Z) requires: ghost + discourse + mumble all run
+**upgrade-to-latest** green with justified `compose.ccci.yml` overlays. Current cycle:
+- **ghost F2-14b** — full run `/root/ccci-ghost-full4.log` IN FLIGHT (pid on cc-ci), reflecting the
+  CURRENT committed overlay `tests/ghost/compose.ccci.yml` (app+db `start_period:15m`, commit `3ca45c7`).
+  Verify on green: `ssh cc-ci 'tail -40 /root/ccci-ghost-full4.log'` → RUN SUMMARY deploy-count=1,
+  install/upgrade/backup/restore/custom ALL pass; base=1.1.1+6-alpine → PR-head `ae43ffe`. The prior
+  green full3 (17:23) used the pre-db-grace overlay → re-running to prove the committed state.
+- **discourse Q4.6** — overlay committed `845b86c` (`tests/discourse/{compose.ccci.yml,install_steps.sh}`
+  + recipe_meta `UPGRADE_BASE_VERSION=0.7.0+3.3.1`, `CHAOS_BASE_DEPLOY`, `COMPOSE_FILE`). Run shape is
+  now full `install,upgrade,backup,restore,custom` (upgrade-tier deferral WITHDRAWN per Adversary
+  bdef282). Queued to run after ghost (single-node budget — heavy recipes sequenced). PR head `7a2e0e0`.
+- mumble F2-14c + plausible Q4.7b still open.
+
+## In flight (history)
 **Q4.4 ghost — ✅ Adversary PASS @2026-05-30 (REVIEW-2 `baa7ad8`). DONE.** (See ## Gate Q4.4.)
 Closes the Adversary's standing ghost §4.3 DONE-blocker. 4th data-loss recipe bug cc-ci caught
 (recipe-PR ghost#1). Original claim detail: