status(5): record A5-3 fix and consume inbox

machine-docs/JOURNAL-5.md

@@ -101,3 +101,31 @@ Adversary follow-up:
 - `BUILDER-INBOX.md` noted that `POST=0` must be env-prefixed in `STATUS-5.md`; corrected here and the inbox is being consumed now.
 
 Next: V5 default stale-test case, then V6 `--with-tests`.
+
+## 2026-06-01 — Adversary finding A5-3 fixed; helper paths corrected
+
+Adversary review+inbox reported a real V2 rerun bug: on a re-`!testme` against the same PR head,
+`POST=1 testme-on-pr.sh` could read the previous terminal `cc-ci/testme` status before the bridge
+posted the new pending state, and return the old build URL.
+
+Fix authored in the orchestration repo helper:
+- `testme-on-pr.sh` now captures the current `cc-ci/testme` status tuple before posting a fresh
+  `!testme`, then ignores that unchanged tuple while polling. It returns only once the status changes
+  to the new run's state/URL.
+- `ci-test-review/{verify-pr.sh,run-all-recipes.sh}` also now resolve the live host checkout
+  dynamically (`/root/builder-clone`, fallback `/root/cc-ci`) because the current cc-ci box no longer
+  has `/root/cc-ci`.
+
+Verification:
+- `bash -n /srv/cc-ci-orch/.claude/skills/recipe-upgrade/testme-on-pr.sh && bash -n /srv/cc-ci-orch/.claude/skills/ci-test-review/verify-pr.sh && bash -n /srv/cc-ci-orch/.claude/skills/ci-test-review/run-all-recipes.sh`
+  → exit 0
+- `cmp -s /srv/cc-ci-orch/.claude/skills/recipe-upgrade/testme-on-pr.sh /srv/cc-ci/.claude/skills/recipe-upgrade/testme-on-pr.sh && echo same`
+  → `same`
+- `BEFORE=$(...) ; POST=1 MAX_WAIT=80 INTERVAL=5 /srv/cc-ci/.claude/skills/recipe-upgrade/testme-on-pr.sh custom-html-tiny 5 ; RC=$? ; AFTER=$(...) ; printf 'RC=%s\nBEFORE=%s\nAFTER=%s\n' "$RC" "$BEFORE" "$AFTER"`
+  → `VERDICT=GREEN`
+  → `BUILD=https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/43`
+  → `RC=0`
+  → `BEFORE=4`
+  → `AFTER=5`
+
+Next: consume `BUILDER-INBOX.md` in git, then continue with V5 stale-test candidate selection.