status(2): Q4.4 ghost + Q4.8 uptime-kuma done; F2-10 closed via DEFERRED.md route

- STATUS-2: in-flight summarizes recipes shipped this sprint (Q3.1+Q3.4 partial; Q4.1+Q4.3+
  Q4.4+Q4.8 full); harness DEPLOY_TIMEOUT plumb-through; DEFERRED.md 9 open entries.
- BACKLOG-2: Q4.4 ghost + Q4.8 uptime-kuma checked off; F2-10 closed via DEFERRED.md route 2
  per Adversary's suggested action (file with proper re-entry trigger; PARITY.md no longer
  duplicates DEFERRED.md).
- tests/uptime-kuma/PARITY.md: 'Deferred' section now points to DEFERRED.md instead of
  duplicating the deferral text.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

machine-docs/BACKLOG-2.md

@@ -89,11 +89,15 @@ Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase2-recipe-tests.md`
       functional tests (health_check, describe_server, session_auth-requires-auth). Cold green
       via `RECIPE=bluesky-pds STAGES=install,custom cc-ci-run runner/run_recipe_ci.py`
       (commit `6115d2e`). goat_account parity deferred (operational complexity).
-- [ ] **Q4.4** — ghost: enroll; specific (create-a-post round-trip).
+- [x] **Q4.4** — ghost: enrolled. PARITY.md + recipe_meta.py (DEPLOY_TIMEOUT=1200, TIMEOUT=1200
+      via EXTRA_ENV; ghost cold-start ~12-15min) + 3 functional tests (health_check, content_api,
+      admin_redirect). Cold green (commit `1bd7c7a`). Create-a-post deeper test in DEFERRED.md.
 - [ ] **Q4.5** — mattermost-lts: enroll; specific (create-a-message round-trip).
 - [ ] **Q4.6** — discourse: enroll; specific (create-a-topic round-trip).
 - [ ] **Q4.7** — plausible: enroll; specific (track a test event, query it back).
-- [ ] **Q4.8** — uptime-kuma: enroll; specific (create a monitor, list it).
+- [x] **Q4.8** — uptime-kuma: enrolled. PARITY.md + recipe_meta.py + 3 functional tests
+      (health_check, socketio_handshake, spa_branding). Cold green (commit `1aaf3bd`).
+      Create-a-monitor in DEFERRED.md (Socket.IO client primitive + --extra-tests; F2-10 closed).
 - [ ] **Q4.9** — mailu: enroll; specific (create a mailbox, send/receive verification).
 - [ ] **Q4.10** — drone: enroll; specific (create/list builds via API).
 - [ ] **Q4.11** — Q4 gate: each recipe green with parity + specific.
@@ -111,6 +115,13 @@ Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase2-recipe-tests.md`
 
 ## Adversary findings
 
+- [x] **F2-10 [adversary] — CLOSED @2026-05-28 via Builder route 2** (file in DEFERRED.md per the
+      new orchestrator-confirmed convention). The uptime-kuma create-a-monitor entry is in
+      `machine-docs/DEFERRED.md` (commit `650ab47` migrated + `44e88f3` relocated under Open
+      deferrals) with re-entry trigger "the `--extra-tests` opt-in flag (IDEAS.md) OR another
+      recipe enrollment that requires Socket.IO client primitives in the harness." Original entry
+      below for the audit trail.
+
 - [ ] **F2-10 [adversary] — uptime-kuma (Q4.8) bypasses plan §4.3 create-and-read-back floor**
       (same class as F2-4 n8n, F2-8 bluesky-pds). Plan §4.3: "create a monitor + list it."
       Builder's PARITY.md defers it:

machine-docs/STATUS-2.md

@@ -49,16 +49,25 @@ tree must carry:
 - **Q5** — Completeness + docs; flip `## DONE`.
 
 ## In flight
-**Q3 + Q4 — recipe enrollment after capacity unblock.** Operator unblocked cc-ci capacity
+**Q3 + Q4 — recipe enrollment sprint.** After capacity unblock + Adversary checkpoint, landed:
-(RAM 4→8GB, other VMs stopped). Resumed Phase 2; landed:
+- Q3.1 lasuite-docs partial (parity + 2 specific + Q2.4 test_oidc_with_keycloak); deeper OIDC
-- Q3.1 lasuite-docs partial (parity + 2 specific + Q2.4 test_oidc_with_keycloak)
+  ports deferred in DEFERRED.md.
-- Q3.4 cryptpad partial (parity + 2 specific; create-pad deeper deferred with rationale)
+- Q3.4 cryptpad partial (parity + 2 specific); create-pad deferred F2-9 conditional (must lift
-- Q4.1 matrix-synapse FULL (parity-aligned + 3 specific incl. §4.3 register-and-message)
+  before Phase-2 DONE).
-- Q4.3 bluesky-pds FULL (Phase-2 health + 3 specific incl. session-auth-required)
+- Q4.1 matrix-synapse FULL (parity-aligned + 3 specific incl. §4.3 register-and-message).
+- Q4.3 bluesky-pds FULL (4 functional incl. §4.3 account+post round-trip via goat CLI; F2-8 closed).
+- Q4.4 ghost FULL (parity + 3 specific; create-post deferred in DEFERRED.md).
+- Q4.8 uptime-kuma FULL (parity + 2 specific; create-monitor deferred in DEFERRED.md).
 
-Remaining: Q3.2 lasuite-drive (needs mirror), Q3.3 lasuite-meet (mirrored, needs enrollment +
+Harness change: `lifecycle.deploy_app` + `run_recipe_ci.py` + `deps.py` now thread
-OIDC env wire), Q3.5 immich (needs mirror), Q4.2/Q4.4-10 (mostly need mirror). Substantial work
+`recipe_meta.DEPLOY_TIMEOUT` into `abra.deploy(timeout=...)` so heavy-recipe Python subprocess
-remains; pausing for Adversary cold-verify of recent partials before continuing.
+timeout matches the recipe's internal TIMEOUT.
+
+DEFERRED.md (machine-docs/) — new orchestrator-canonical deferral registry; 9 entries open.
+
+Remaining substantial: Q3.2 lasuite-drive (needs mirror), Q3.3 lasuite-meet (mirrored), Q3.5
+immich (needs mirror), Q4.2/Q4.5-7/Q4.9-10 (mostly need mirror). The mirror-and-enroll path is
+established (recipe-create-pr skill); pausing this sprint for Adversary cold-verify.
 
 ## Gate
 **Gate: Q2 — Adversary PASS @2026-05-28** (REVIEW-2 `## Q2 — PASS @2026-05-28 (re-verify after

tests/uptime-kuma/PARITY.md

@@ -33,7 +33,7 @@ needed for this recipe.
 Not yet authored. uptime-kuma's UI is a Vue SPA; a Playwright flow would exercise the
 setup wizard + monitor creation. Q4 follow-up.
 
-## Deferred (Q4 follow-up)
+## Deferred
 
-- `create-a-monitor + list-it` via Socket.IO (plan §4.3 prescribed). Requires a Socket.IO
+See `machine-docs/DEFERRED.md` — entry "2026-05-28 — uptime-kuma create-a-monitor (§4.3
-  client + the initial-setup → login → emit-monitor flow. Tracked for follow-up.
+prescribed)" (re-entry: --extra-tests flag OR another Socket.IO-needing recipe enrollment).