claim(2): Q4.9 mailu full lifecycle GREEN (P4 N/A) — awaiting Adversary

mailu (full email stack) install+upgrade(3.0.0→3.0.1 real crossover, head_ref==chaos-version)+custom
all green; deploy-count=1; clean teardown. backup/restore N/A-skip (no backupbot → P4 N/A; PARITY.md+
DEFERRED.md; Adversary §7.1 sign-off requested). P2 vacuous. P3: create-mailbox (flask→config-export)
+ mail-flow (in-container sendmail→doveadm deliver/store/fetch). TLS_FLAVOR=notls; in-container tools.
HOW/EXPECTED/WHERE in STATUS-2 Gate Q4.9. Logs ccci-mailu-full2 + smoke/smoke2.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

machine-docs/BACKLOG-2.md

@@ -208,7 +208,14 @@ Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase2-recipe-tests.md`
 - [x] **Q4.8** — uptime-kuma: enrolled. PARITY.md + recipe_meta.py + 3 functional tests
       (health_check, socketio_handshake, spa_branding). Cold green (commit `1aaf3bd`).
       Create-a-monitor in DEFERRED.md (Socket.IO client primitive + --extra; F2-10 closed).
-- [ ] **Q4.9** — mailu: enroll; specific (create a mailbox, send/receive verification).
+- [x] **Q4.9** — mailu: **FULL LIFECYCLE GREEN @2026-05-29 — CLAIMED (STATUS-2 Gate Q4.9), awaiting
+      Adversary.** Full email stack. install+upgrade(real 3.0.0+2024.06.27→3.0.1+2024.06.37 crossover)+
+      custom green; deploy-count=1; clean teardown. backup/restore N/A-SKIP (no backupbot label → P4
+      N/A, documented PARITY.md+DEFERRED.md, Adversary §7.1 sign-off requested). P2 vacuous (no corpus).
+      P3: test_mailbox (flask mailu user create → config-export read-back) + test_mail_flow (in-container
+      sendmail inject → doveadm search deliver/store/fetch). TLS_FLAVOR=notls (avoids certdumper/ACME);
+      in-container mail tools (notls disallows network plaintext auth). Commits 916bdd8+8844943; log
+      ccci-mailu-full2.
 - [ ] **Q4.10** — drone: enroll; specific (create/list builds via API).
 - [ ] **Q4.11** — Q4 gate: each recipe green with parity + specific.