backlog(2): Q5.1 partial — enroll-recipe.md Phase-2 contract pass landed

machine-docs/BACKLOG-2.md

@@ -85,9 +85,12 @@ Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase2-recipe-tests.md`
 - [ ] **Q4.11** — Q4 gate: each recipe green with parity + specific.
 
 ### Q5 — Completeness + docs
-- [ ] **Q5.1** — `docs/enroll-recipe.md` updated with the per-recipe test contract (§4.1), the
-      `functional/` and `playwright/` subdirectory layout, the PARITY.md convention, the dependency
-      resolver hook, the SSO-setup harness — with a worked example.
+- [~] **Q5.1** — `docs/enroll-recipe.md` updated with the Phase-2 contract (commit `b2151af`):
+      §2 PARITY.md / functional/ / playwright/ layout; §2.1 Phase-2 contract + custom-tier
+      discovery; §2.2 DEPS / deps_apps fixture / F2-5 verify=True; §2.3 harness.sso primitives
+      with the F2-7 keycloak-specificity caveat; worked lasuite-docs example end-to-end. **Will
+      re-pass when Q3.2/Q3.5 enroll new recipes** (immich/lasuite-drive) to confirm a new
+      engineer can follow the doc cold.
 - [ ] **Q5.2** — Adversary samples a subset and cold-verifies parity tables + specific tests are real
       (not health-only, not skipped). NO weakened test, no corners cut (P7).
 - [ ] **Q5.3** — Phase 2 `## DONE` after all P1–P8 Adversary cold-verified PASS, no standing VETO.