journal(samever): M2 prep notes while parked at M1 gate

machine-docs/JOURNAL-samever.md

@@ -41,3 +41,19 @@ preserves prevb behavior exactly (canonical is primary). No regression for any c
 so NOT introduced here): `tests/unit/test_meta.py::test_generated_doc_table_in_sync` and
 `tests/unit/test_warm_reconcile.py::test_traefik_spec_is_stateless_with_setup` (KeyError
 'health_domain'). Out of scope for samever.
+
+## 2026-06-17T04:25Z — M1 claimed; M2 prep (no gate runs until M1 PASS)
+
+M1 claimed (c5a0d20). Parked at gate; doing read-only M2 prep:
+- Trigger mechanism (from prevb M2): `!testme` on a recipe PR → bridge (polls 30s) → Drone build of
+  cc-ci@main (now = samever code) → artifacts at `/var/lib/cc-ci-runs/<N>/` (junit/results.json,
+  Adversary-readable). Local full-pipeline runs on cc-ci de-risk before posting.
+- Enrolled (WARM_CANONICAL=True) recipes: only **custom-html** currently. No canonical registries on
+  cc-ci right now (`/var/lib/cc-ci-canonical/` empty).
+- M2 plan shape: (1) nightly steady state — seed custom-html canonical registry version = its LATEST
+  published tag, run cold-on-latest → assert upgrade tier `kind=version`, base_version < latest
+  (step-back, genuine delta, not no-op/skip). (2) PR form — non-version-bump PR, head==canonical, same
+  step-back. (3) discourse #4 version-bump → UNAFFECTED (canonical→head). (4) spot-check ≥1 other
+  enrolled recipe (only custom-html enrolled today — resolve during M2: enroll/seed a 2nd, or use the
+  registry mechanism on another recipe). Need ≥2 published tags on the step-back recipe for an older
+  target to exist — verify custom-html tag count before run.