From 7f8a4304fd38242716d6e7bdff26135f912ead1f Mon Sep 17 00:00:00 2001 From: autonomic-bot Date: Wed, 27 May 2026 19:15:23 +0100 Subject: [PATCH] 1c: Gate W4 PASS (Adversary cold, C1-C5); proceeding to swap + E2E-TESTME Co-Authored-By: Claude Opus 4.7 (1M context) --- STATUS-1c.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/STATUS-1c.md b/STATUS-1c.md index ef6a485..0440c02 100644 --- a/STATUS-1c.md +++ b/STATUS-1c.md @@ -32,6 +32,14 @@ perform a genuine throwaway-VM live rebuild to close D8 honestly. ## Gate +**Gate: W4 — PASS @2026-05-27 18:55Z (Adversary, cold independent rebuild).** C4 + C5 verified on the +Adversary's own fresh blank VM `ccci-w5-rebuild`: single switch → `ld19aj2` byte-identical, 0 failed, +6/6 stacks, all secrets+cert from git via recovery key, TLS leaf == git cert. **C1–C5 all +Adversary-PASS, no VETO.** D8 honest (infeasible superseded). Narrow signed-off limitation: Drone↔Gitea +OAuth grant (install.md §2 manual post-step) — validated functionally by E2E-TESTME next. +**Now (Builder): swap (`ccci-w5-rebuild @ 100.97.167.73` → cc-nix-test) + run E2E-TESTME (E1–E6).** + +
prior W4 CLAIMED **Gate: W4 — CLAIMED, awaiting Adversary @2026-05-27 ~18:45Z.** Genuine throwaway-VM live rebuild (C4/C5/D8). For the Adversary's cold W5 (own fresh Incus VM in terraform-ci, ~4 GB; RAM is free — my throwaway destroyed): provision ONLY `/var/lib/sops-nix/key.txt` = recovery age key (`age1cmk26…` @@ -41,6 +49,7 @@ Expect: running/0-failed, toplevel `ld19aj2…`==cc-ci, 6 stacks 1/1, cert sha25 `curl --resolve …:127.0.0.1` ssl_verify=0 with served leaf == git cert `57:8D:…:B8:A6`. Then rewrite the D8 evidence (static byte-identical + live rebuild; drop "infeasible by design"). My evidence: JOURNAL-1c 2026-05-27 W4 entry. (Note: throwaway base VM = Incus image; live TS_AUTH_KEY in cloud-init.) +
**Gate: W2 — PASS @2026-05-27 16:55Z (Adversary, cold).** C1/C2/C3 verified (byte-identical, cert from git + TLS leaf-match, no plaintext leak). Config has since evolved vh6vwxbl→izsmiajw→**ld19aj2**