status(drone): ## DONE — M1+M2 PASS; build #506 L5; Adversary M2 PASS @2026-06-11T22:30Z

Adversary M2 PASS (commit 7b4081c): all 6 verification steps passed, §7.1 signed off.
Phase drone DONE. PR recipe-maintainers/drone#1 open for operator merge.

- install+upgrade+custom+lint PASS, backup/restore intentional skip (PARITY.md)
- DG4.1: deploy-count=2/2; clean_teardown=true; no_secret_leak=true
- SCM test verified against per-run dep gitea (not production git.autonomic.zone)
- Build-creation gap accepted as proportionate deferral (Adversary §7.1 sign-off)
- DEFERRED.md updated by Adversary with MAXIMAL SUBSET COMPLETE

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

machine-docs/BACKLOG-drone.md

@@ -30,9 +30,9 @@ _(Builder's section — Adversary read-only)_
 - [x] CI run via !testme on drone PR — build #506, event=custom, level=5, all tiers PASS
 - [x] Screenshot real + visually verified — `machine-docs/screenshots/drone-m2-build506.png`
 - [x] Level recorded — level=5
-- [ ] DEFERRED updated (build-creation gap narrowed + signed off by Adversary)
-- [x] Operator summary written — see STATUS-drone.md ## M2 CLAIMED
-- [ ] Claim M2 (Adversary to verify CI build #506 + M2 evidence)
+- [x] DEFERRED updated — Adversary §7.1 signed off in commit `7b4081c`; MAXIMAL SUBSET COMPLETE entry in DEFERRED.md
+- [x] Operator summary written — see STATUS-drone.md ## DONE
+- [x] Claim M2 — Adversary M2 PASS @2026-06-11T22:30Z (commit `7b4081c`). Phase drone DONE.
 
 ---
 

machine-docs/STATUS-drone.md

@@ -6,7 +6,40 @@
 
 ---
 
-## M2 CLAIMED
+## DONE
+
+**Adversary M2 PASS @2026-06-11T22:30Z** (commit `7b4081c`)
+
+All phase DoD satisfied. Phase drone complete. PR open for operator merge.
+
+**Operator summary:**
+- Drone 1.9.0 enrolled with gitea 3.5.3 as SCM dep; full lifecycle proven via real `!testme` CI
+- Gitea dep provisioned per-run (admin user + OAuth2 app); wired to drone at install time via `install_steps.sh`
+- SCM-configured functional test (`test_login_redirects_to_gitea_dep`) verifies per-run dep, not production gitea
+- Upgrade tier: 1.8.0+2.25.0 → 1.9.0+2.26.0 reconverges cleanly
+- Backup structural skip: drone is not backup-capable (no backupbot labels); documented in PARITY.md
+- Build-creation API gap accepted as proportionate deferral (Adversary §7.1 sign-off); remaining DEFERRED item
+
+**Build #506 evidence (M2 CI run):**
+
+```
+recipe=drone  ref=049438e1cb47  pr=1  event=custom (!testme via bridge)
+deploy-count = 2 (expect 2)     # DG4.1 PASS
+  deps deployed: ['gitea']
+  install : pass                 # test_serving PASSED
+  upgrade : pass                 # test_upgrade_reconverges PASSED (1.8.0+2.25.0 → 1.9.0+2.26.0)
+  backup  : skip                 # intentional: not backup-capable
+  restore : skip                 # intentional: not backup-capable
+  custom  : pass                 # test_login_redirects_to_gitea_dep PASSED
+  lint    : pass
+level=5, clean_teardown=true, no_secret_leak=true
+```
+
+Screenshot: `machine-docs/screenshots/drone-m2-build506.png`
+
+---
+
+## M2 CLAIMED (superseded by DONE above)
 
 **Evidence:** CI build #506, 2026-06-11T22:21Z — event: custom (!testme on PR #1, recipe-maintainers/drone)
 
@@ -68,7 +101,7 @@ Results: `/var/lib/cc-ci-runs/manual/results.json`
 **P0 prerequisite:** VERIFIED — `/etc/timezone` exists (content `UTC`) on cc-ci host.
 
 **Gate M1:** PASS — Adversary PASS @2026-06-11T22:22Z (commit `3de5925`)  
-**Gate M2:** CLAIMED — awaiting Adversary fresh verification of CI build #506
+**Gate M2:** PASS — Adversary PASS @2026-06-11T22:30Z (commit `7b4081c`) — **DONE**
 
 ---