status(2): Q3.2 lasuite-drive maximal subset GREEN (install+backup+restore+custom: health+MinIO roundtrip+OIDC JWT); upgrade tier deferred pending disk resize; clean re-run w/ --detach fix in flight before claim

machine-docs/BACKLOG-2.md

@@ -63,8 +63,20 @@ Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase2-recipe-tests.md`
       lasuite-docs OIDC env wiring (install_steps.sh wires dep keycloak's client_secret +
       OIDC env into lasuite-docs's .env at install time). Documented in tests/lasuite-docs/
       PARITY.md.
-- [ ] **Q3.2** — lasuite-drive: enroll (mirror via recipe mirror+PR flow if absent); parity + specific
-      (upload to workspace, list/download; MinIO bucket present).
+- [~] **Q3.2** — lasuite-drive: enrolled (mirrored). Maximal testable subset GREEN @2026-05-29
+      (`/root/ccci-drive-subset.log`): install (generic+cc-ci test_serving_and_frontend) + backup
+      (P4 test_backup_captures_state) + restore (P4 test_restore_returns_state) + custom — all 3
+      functional PASS: test_health_check (parity), test_minio_storage (real S3 upload→list→download→
+      assert-bytes round-trip), test_oidc_with_keycloak (password-grant JWT vs warm keycloak,
+      per-run realm, clean teardown). deploy-count=1, deps=['keycloak'] (warm-reused). **Upgrade
+      tier DEFERRED pending host disk resize** — the prev→PR-head crossover holds two multi-GB office
+      image versions at once (onlyoffice 9.2→9.3.1.2 @3.94GB + collabora) → exhausts the 28GB host
+      (DEFERRED.md/DECISIONS.md 2026-05-29). Per Adversary BUILDER-INBOX this is a
+      conditional/deferred sign-off (NOT a §7.1 waiver): upgrade tier stays a veto-eligible open item,
+      must run green + cold-verified before Phase-2 DONE once disk grows. Bug fixed en route: `fix(2)`
+      `f1c626c` — setup_custom_tests `docker service scale --detach` (the run-once minio-createbuckets
+      job made a blocking scale hang the custom tier). Clean unassisted re-run with the fix in flight
+      before the formal Q3.2 claim.
 - [ ] **Q3.3** — lasuite-meet: parity (health_check, oidc_login, meeting_flow, webrtc-media,
       webrtc-relay) + specific (create-a-room, two-user LiveKit token issuance, ICE-candidate gathering).
 - [~] **Q3.4** — cryptpad: parity port (health_check) ✓ + 2 NEW recipe-specific