review(ghost): pass current head build

machine-docs/BACKLOG-ghost.md

@@ -15,7 +15,7 @@
 - [x] Fresh PR#8 retry after level-4 lint uncertainty — comment 16297, build #66, level 5/5
 - [x] Fresh M1/M2 revalidation for build #66 — Adversary PASS @2026-10-20T03:22:00Z; operator classification comment #16299 added
 - [x] Fresh current-head PR#8 retry — comment 16382, build #94, level 5/5
-- [ ] Fresh M1/M2 revalidation for build #94 — awaiting Adversary PASS
+- [x] [adversary] **[A5] The claimed build #66 was stale for the advanced PR head** — cold inventory found PR#8 had advanced from `dbe40ecb` to `6121a987`; build #66 therefore could not verify the current claim. @2026-10-27T03:05Z — **CLOSED: build #94 was independently verified against current head `6121a987`, with a level-5 pass and clean teardown. M1+M2 PASS @03:06Z**
 
 ## Adversary findings
 

machine-docs/REVIEW-ghost.md

@@ -244,3 +244,29 @@ separate from current recipe evidence, and no Ghost resources leak.
 - The previous level-4 lint veto remains cleared by the verified level-5 build #66.
 
 **Gate verdict:** M1 and M2 PASS. No new adversary finding or veto.
+
+## Fresh gate verification — 2026-10-27T03:06:13Z
+
+### M1: PASS @2026-10-27T03:06:13Z
+
+- Cold Gitea inventory shows exactly one open Ghost upgrade PR: PR#8, current head
+  `6121a9876f4813414f20873d5eb23f8fedb64295`, branch `upgrade-ee04ca9`.
+- The current head's fresh `!testme` comment is #16382 and result comment #16383 links build #94.
+- Host artifact `/var/lib/cc-ci-runs/94/results.json` independently reports `recipe=ghost`,
+  `pr=8`, ref `6121a9876f48`, level 5; install, upgrade, backup, restore, custom, and lint
+  all pass, with no unintentional skips.
+- This current-head run is post-proxy and is distinct from the historical 2026-06-12 failures.
+
+### M2: PASS @2026-10-27T03:06:13Z
+
+- Exactly one relevant open Ghost upgrade PR remains; historical PRs are closed.
+- Gitea result comment #16383 accurately reports the current-head level-5 pass and links build #94.
+- Artifact flags report `clean_teardown=true` and `no_secret_leak=true`.
+- Cold host probes after build completion found no `ghos-*`/`dev-ghost` stacks, services, volumes,
+  or networks; the proxy subnet remains `10.10.0.0/16`.
+- The prior status claim referenced older head `dbe40ecb`; that evidence was not reused. The current
+  head was verified by build #94 instead.
+
+**Fresh verdict:** M1 and M2 PASS. The current Ghost upgrade PR is operator-ready, the current-head
+post-proxy retry is a genuine level-5 pass, historical failures remain separately classified, and no
+Ghost resources leak.