diff --git a/machine-docs/STATUS-drone.md b/machine-docs/STATUS-drone.md
index 95f6abb..517de53 100644
--- a/machine-docs/STATUS-drone.md
+++ b/machine-docs/STATUS-drone.md
@@ -10,22 +10,30 @@
 
 **P0 prerequisite:** VERIFIED — `/etc/timezone` exists (content `UTC`) on cc-ci host.
 
-**Gate M1:** IN PROGRESS (Builder implementing)
+**Gate M1:** IN PROGRESS — harness run 5 in flight (PID 2109869, log /tmp/drone-m1-run5.log on cc-ci)
 
 ---
 
 ## DoD tracker (M1)
 
-- [ ] P0 verified on host (DONE — `/etc/timezone` = `UTC`)
-- [ ] `tests/gitea/recipe_meta.py` — gitea enrolled as dep provider (health + sqlite3 EXTRA_ENV)
-- [ ] `runner/harness/sso.py` — `setup_gitea_oauth()` function (admin user + OAuth2 app)
-- [ ] `runner/run_recipe_ci.py` — `_enrich_deps_with_sso` extended for gitea
-- [ ] `tests/drone/recipe_meta.py` — drone with `DEPS=["gitea"]`, health/timeouts
-- [ ] `tests/drone/install_steps.sh` — wires gitea OAuth into drone deploy
-- [ ] `tests/drone/functional/test_scm_configured.py` — Playwright OAuth flow (SCM has teeth)
-- [ ] `tests/drone/PARITY.md` — backup structural-skip justification documented
-- [ ] Unit tests for new harness surface (gitea dep provisioning path)
-- [ ] No gate weakening; declared skips justified
+- [x] P0 verified on host — `/etc/timezone` = `UTC`
+- [x] `tests/gitea/recipe_meta.py` — gitea enrolled as dep provider (health + sqlite3 EXTRA_ENV)
+- [x] `runner/harness/sso.py` — `setup_gitea_oauth()` function (admin user + OAuth2 app)
+- [x] `runner/run_recipe_ci.py` — `_enrich_deps_with_sso` extended for gitea
+- [x] `tests/drone/recipe_meta.py` — drone with `DEPS=["gitea"]`, health/timeouts
+- [x] `tests/drone/install_steps.sh` — wires gitea OAuth into drone deploy
+- [x] `tests/drone/functional/test_scm_configured.py` — no-follow redirect; ADV-drone-01 fixed `7e7e84d`
+- [x] `tests/drone/PARITY.md` — backup structural-skip justification documented
+- [x] Unit tests — 10/10 PASS cold (test_gitea_dep.py)
+- [x] No gate weakening; declared skips justified (backup structural skip per PARITY.md)
+- [ ] Harness run green — run 5 in flight (DG4.1 fix `5384f5c`)
+
+---
+
+## Fixes applied (M1 path)
+
+- **ADV-drone-01** (CLOSED `7e7e84d`): `_CaptureOneRedirect` no-follow pattern; captures Location header from drone's first 303 instead of following gitea's chain to /user/login
+- **DG4.1 deploy-count** (`5384f5c`): reverted `_count_deploy=False`; dep deploys must count since DG4.1 formula is `expected = 1 + deps_count`
 
 ---