status(cfold): seed phase state and consume inbox

machine-docs/BACKLOG-cfold.md

@@ -3,6 +3,18 @@
 ## Build backlog
 (Builder-only section — read-only to Adversary)
 
+- [x] Seed `STATUS-cfold.md` + `JOURNAL-cfold.md`; consume Adversary inbox
+- [ ] Record deprecated-folder policy in `DECISIONS.md`
+- [ ] Update discovery + manifest to make `custom/` canonical without silent coverage loss
+- [ ] Update unit tests for discovery/manifest behavior and ordering
+- [ ] Migrate all cc-ci custom tests/helper modules into `tests/<recipe>/custom/`
+- [ ] Update docs (`docs/recipe-customization.md`, `docs/testing.md`, `docs/enroll-recipe.md`)
+- [ ] Produce M1 coverage-diff proof: discovered custom-test set identical before/after
+- [ ] Claim M1 with WHAT/HOW/EXPECTED/WHERE in `STATUS-cfold.md`
+- [ ] Build the pre-sweep recipe baseline matrix for M2
+- [ ] Run the full real-CI `!testme` sweep and capture recipe-by-recipe evidence
+- [ ] Claim M2 only after the sweep is green and zero leaks are confirmed
+
 ## Adversary findings
 
 No findings yet. Pre-migration baseline recorded below for reference during M1 verification.

machine-docs/BUILDER-INBOX.md

@@ -1,14 +0,0 @@
-## 2026-06-12T00:00Z
-
-`machine-docs/STATUS-cfold.md` is missing from origin/main in my cold pull, so there is no formal
-cfold gate state for Adversary verification yet. Please seed/update that phase status file with the
-claim payload required by `plan.md` §6.1 (WHAT/HOW/EXPECTED/WHERE) when you are ready for M1 or M2
-review.
-
-## 2026-06-12T16:00Z
-
-Cold re-check: `STATUS-cfold.md` is still absent on `origin/main`, and the repo remains in the
-pre-migration layout (`tests/*/functional/`, `tests/*/playwright/`, matching docs/discovery/unit-test
-literals still present). No formal cfold claim is visible for me to verify yet. When you are ready,
-please publish `STATUS-cfold.md` and the M1/M2 claim payload there so I can cold-run the acceptance
-check immediately.

machine-docs/JOURNAL-cfold.md

@@ -0,0 +1,44 @@
+# JOURNAL — phase `cfold` (Builder)
+
+Design rationale, investigations, and dead-ends. Adversary does NOT read this before
+forming its verdict (anti-anchoring per plan §6.1). See STATUS-cfold.md for claim context.
+
+---
+
+## 2026-06-12 — bootstrap + initial orient
+
+Read in full:
+- `/srv/cc-ci/cc-ci-plan/plan-phase-cfold-custom-folder.md`
+- `/srv/cc-ci/cc-ci-plan/plan.md` bootstrap plus §§6.1, 7, 9
+
+Initial repo/phase state after `git pull --rebase`:
+- pulled Adversary updates `574306e -> 87566b1`
+- `machine-docs/BACKLOG-cfold.md` and `machine-docs/REVIEW-cfold.md` existed already
+- `machine-docs/STATUS-cfold.md` and `machine-docs/JOURNAL-cfold.md` were missing
+
+Bootstrap checks run from this clone:
+```bash
+ssh cc-ci 'hostname && whoami && nixos-version'
+# nixos
+# root
+# 24.11.20250630.50ab793 (Vicuna)
+
+set -a && . /srv/cc-ci/.testenv && set +a && curl -s "https://$GITEA_URL/api/v1/version"
+# {"version":"1.24.2"}
+
+getent hosts "probe-$RANDOM.ci.commoninternet.net"
+# 91.98.47.73 probe-22588.ci.commoninternet.net
+```
+
+Initial cfold code scan confirms the planned touch points are still unmigrated:
+- `runner/harness/discovery.py` still globs `("functional", "playwright")`
+- `runner/harness/manifest.py` still reports subdir names verbatim
+- unit tests still build fixtures under `functional/` and `playwright/`
+- repo grep still finds many folder-name references in docs/tests and the recipe trees themselves
+
+Adversary inbox/review updates at 2026-06-12T00:00Z and 2026-06-12T16:00Z were procedural only:
+no claim pending, phase status file missing on `origin/main`. Consuming
+`machine-docs/BUILDER-INBOX.md` in the same commit that seeds cfold state.
+
+Next: implement the smallest M1 slice first: discovery + alias policy + unit/manifest updates,
+then migrate the recipe trees and docs, then assemble the before/after coverage proof.

machine-docs/STATUS-cfold.md

@@ -0,0 +1,25 @@
+# STATUS — phase `cfold` (collapse custom-test folders)
+
+SSOT: `/srv/cc-ci/cc-ci-plan/plan-phase-cfold-custom-folder.md`
+
+## Current state
+
+- Phase bootstrapped on `main` after reading the phase plan and `plan.md` §§1, 6.1, 7, 9.
+- Access/bootstrap checks passed from this clone:
+  - `ssh cc-ci 'hostname && whoami && nixos-version'` -> `nixos`, `root`, `24.11.20250630.50ab793 (Vicuna)`
+  - `curl -s "https://$GITEA_URL/api/v1/version"` -> `{"version":"1.24.2"}`
+  - `getent hosts "probe-$RANDOM.ci.commoninternet.net"` -> wildcard DNS resolves (`91.98.47.73` in the bootstrap probe)
+- Adversary notes at `REVIEW-cfold.md` 2026-06-12T00:00Z and 2026-06-12T16:00Z processed: both were procedural only (`STATUS-cfold.md` missing on `origin/main`); this file now exists and will land with the inbox-consumption commit.
+- Current work item: M1 implementation start
+  - decide and record deprecated-folder behavior (`custom/` canonical, no silent coverage loss)
+  - update discovery/manifest/unit tests/docs for `custom/`
+  - migrate cc-ci custom tests and helper modules from `functional/` + `playwright/` into `custom/`
+  - produce coverage-diff proof for the Adversary before any M1 claim
+
+## Gate
+
+No gate claimed yet.
+
+## Blocked
+
+(nothing)