review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

machine-docs/REVIEW-1b.md

@@ -249,9 +249,39 @@ the **byte-identical** closure that produced their Phase-1 green runs, so a re-r
 signal beyond the 2 fresh runs already done. If the operator wants strict 6/6-fresh, I can run the
 remaining 4 sequentially on request.
 
-## Status: RL1✅ · RL2✅ · RL3✅ (full D1–D10 cold, nothing weakened) · RL4✅ · RL5✅ · RL6 deferred.
-**→ Builder: RL1–RL5 are all Adversary-PASS (<24h), no open `[adversary]` findings, NO VETO.** The ONLY
-thing between here and `## DONE` is **RL6** (the coordinated `machine-docs/` move). I am **ready** for the
-RL6 lockstep cutover: flag the orchestrator to update `launch.sh` + restart the watchdog; at that signal
-the Builder `git mv`s STATUS/JOURNAL/BACKLOG/DECISIONS and I `git mv` my own REVIEW*.md — then I re-verify
-refs/watchdog and you may write `## DONE`. Until that coordinated moment I keep writing REVIEW-1b.md at root.
+## ✅ RL6 — protocol files → `machine-docs/` : **PASS** @2026-05-27 (Adversary, lockstep cutover)
+The coordinated cutover executed cleanly:
+- **Orchestrator lockstep done.** `cc-ci-plan/launch.sh` now has `resolve_state()` (lines 67-69) that
+  **prefers `machine-docs/<file>` and falls back to root** — so the watchdog survives the move and stays
+  move-agnostic. Proof it works post-move: the watchdog **pinged me for the RL6 gate from
+  `machine-docs/STATUS-1b.md`** (it read the moved file). Handoff intact.
+- **Builder moved** (commit 992d87c): `STATUS*.md`/`BACKLOG*.md`/`JOURNAL*.md` (3 each) + `DECISIONS.md`
+  → `machine-docs/`. **README.md correctly LEFT at repo root** (operator decision).
+- **Adversary moved** (this commit, single-writer rule): `REVIEW-1b.md` + `REVIEW.md` + `REVIEW-1c.md`
+  → `machine-docs/`. Root now holds only `README.md` (+ flake/nix/code); no protocol file left at root.
+- **References re-verified.** README "Loop state" section updated → "lives under **`machine-docs/`**";
+  `docs/install.md` → `machine-docs/DECISIONS.md`. **No** `.drone.yml` / `scripts/` / `flake.nix` /
+  `nix/hosts` references to protocol files (grep clean) ⇒ the **build closure is unaffected** (cc-ci
+  still `running`, byte-identical `8i3jcad9` — RL6 is a repo-doc move, touches no nix input).
+- **Trivial advisory (non-blocking):** 4 `See DECISIONS.md` **bare-name** comment refs in
+  `nix/modules/{drone,drone-runner,proxy}.nix` aren't path-qualified to `machine-docs/` — but they were
+  never path-qualified pre-move (always bare "DECISIONS.md"), the file is still findable by name, and
+  README states its location. Optional tidy (prefix `machine-docs/`), not an RL6 failure. → IDEAS.
+
+Verdict: **RL6 PASS.**
+
+## 🏁 ADVERSARY FINAL SIGN-OFF — Phase 1b : ALL RL1–RL6 Adversary-PASS @2026-05-27. **NO VETO.**
+| RL | Verdict |
+|---|---|
+| RL1 lint/format in CI + green | ✅ PASS (cold, with break-it teeth) |
+| RL2 §3 white-box checklist | ✅ PASS (no blocking findings) |
+| RL3 full cold D1–D10 re-verify | ✅ PASS (nothing weakened; byte-identical closure; 2 fresh e2e; leak-clean) |
+| RL4 docs | ✅ PASS |
+| RL5 nix/ consolidation | ✅ PASS (byte-identical rebuild) |
+| RL6 machine-docs/ move | ✅ PASS (watchdog-survived lockstep) |
+
+No open `[adversary]` findings; advisories triaged to IDEAS (old_app copy-paste; `_template` deviation;
+bare-name DECISIONS refs) + one documented RL1 advisory (flaky Gitea→Drone *push* webhook — lint stage is
+wired + proven via its exact command, auto-fire needs the operator's webhook; non-blocking). **The Builder
+is cleared to write `## DONE` to `machine-docs/STATUS-1b.md`.** Once DONE is written, the DONE handshake
+holds (every RL has a <24h Adversary PASS, no VETO) and the 1b loop terminates.