status(5): record lasuite-meet enrollment success

machine-docs/STATUS-5.md

@@ -6,10 +6,9 @@
 
 ## Current focus
 
-Minimal enrollment fix for `lasuite-meet` is committed (`f28a2a3`). Current work is verifying the live
-bridge rollout so Phase-5 V5/V6 can continue on `lasuite-meet` PR #2. Verification is currently paused
-on host reachability: after `nixos-rebuild test --flake path:/root/builder-clone#cc-ci`, `cc-ci`
-stopped answering Tailscale SSH.
+V5 next: continue searching for a genuine stale-test case on an enrolled sandbox recipe. `lasuite-meet`
+is now enrolled and its upgrade PR is GREEN after a minimal harness fix, so it does not provide the V5
+stale-test branch either.
 
 ## Fixes applied (A5-1, A5-2, related)
 
@@ -104,11 +103,18 @@ preferred, `/root/cc-ci` fallback) instead of hard-coding `/root/cc-ci`.
   enrolled poll list. That makes it unusable for V5/V6 until explicitly enrolled.
 - Enrollment fix authored and pushed: `f28a2a3 fix(bridge): enroll lasuite-meet for !testme` adds
   `recipe-maintainers/lasuite-meet` to `nix/modules/bridge.nix` `POLL_REPOS`.
+- Live enrollment verification: bridge poller now logs
+  `recipe-maintainers/lasuite-meet` in `POLL_REPOS`; re-`!testme` on PR #2 triggered build `#55`.
+- Harness follow-up fix: `7225138 fix(tests): keep La Suite OIDC secret inserts offline` adds `-C -o`
+  to the La Suite OIDC `abra app secret insert` hooks (`lasuite-meet`, `lasuite-drive`,
+  `lasuite-docs`) so install-time OIDC wiring uses the checked-out recipe without private-origin fetches.
+- Result: `POST=1 ... testme-on-pr.sh lasuite-meet 2` now returns `VERDICT=GREEN`
+  `BUILD=https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/58`.
 
 ## Verification next step
 
-- When `ssh cc-ci` returns, verify the live bridge poller logs include `recipe-maintainers/lasuite-meet`,
-  then re-run `POST=1/POST=0 /srv/cc-ci/.claude/skills/recipe-upgrade/testme-on-pr.sh lasuite-meet 2`.
+- Continue the V5/V6 search on another enrolled recipe with a real upgrade path and more version-shaped
+  assertions; `n8n`, `cryptpad`, and `lasuite-meet` all stayed GREEN on real upgrade PRs.
 
 ## Phase 5 gates
 
@@ -116,10 +122,4 @@ preferred, `/root/cc-ci` fallback) instead of hard-coding `/root/cc-ci`.
 
 ## Blocked
 
-- `cc-ci` host is currently unreachable over Tailscale after `nixos-rebuild test --flake
-  path:/root/builder-clone#cc-ci` (used to activate the `lasuite-meet` bridge enrollment without touching
-  the bootloader). Current probes from the orchestrator:
-  - `ssh cc-ci ...` -> `connect to host 100.95.31.88 port 22: Connection timed out`
-  - `tailscale status` shows `100.95.31.88 cc-ci ... active; relay "nue"; offline`
-  - `tailscale ping -c 3 cc-ci` -> `no reply`
-  The code change is pushed; live verification is blocked until host reachability returns.
+(none)