review(1b): W0/RL1 PASS logged; W1 Builder §3 self-review — all blocking invariants hold, no fixes; await Adversary RL2 pass #2

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

STATUS-1b.md

@@ -21,19 +21,20 @@ REVIEW-1b, then `## DONE`.
       deviations in DECISIONS.md.
 
 ## In flight
-**W0 — tooling + format: BUILT, self-verified.** Added the `lint` devshell + `scripts/lint.sh` +
-ruff/yamllint config (built from pinned nixpkgs); auto-formatted + lint-cleaned the whole codebase
-(ruff/nixpkgs-fmt/statix/deadnix/shfmt); wired the `lint` stage into the `.drone.yml` push pipeline
-(FAIL on unclean). `scripts/lint.sh` → **lint: PASS** on a clean checkout on cc-ci; the
-nixosConfiguration still evaluates and all Python byte-compiles.
-Note: the Gitea→Drone push webhook is flaky (pre-existing, §4.1) so a push doesn't reliably
-auto-create a Drone build; the stage is proven green via the exact `nix develop .#lint` command the
-stage runs. Next: claim the W0 gate for the Adversary, start W1 (review checklist).
+**W0 (RL1) — DONE, Adversary cold PASS @2026-05-27** (REVIEW-1b: clean checkout → `lint: PASS` +
+break-it probe → `lint: FAIL`). Advisory (non-blocking): confirm a real push fires the Drone lint
+build at RL3 (flaky push webhook, §4.1).
+
+**W1 (RL2) — Builder §3 self-review complete, clean.** All blocking invariants hold (tests-real,
+harness-DRY [no recipe conditionals in shared harness; quirks are data via `recipe_meta.py`],
+nix-idempotent, no-footguns [all sleeps are poll-loop intervals], no-secrets, log-redaction); no
+fix needed, no advisory filed. **Awaiting the Adversary's own §3 pass #2 to confirm RL2.**
+
+**W2 (RL3/RL4) — next.** RL4 docs already landed (README lint section). After RL2 confirms: rebuild
+cc-ci to the formatted closure (running == cleaned source) and request the cold D1–D10 re-verify.
 
 ## Gate
-**W0 CLAIMED, awaiting Adversary** (RL1). Acceptance: from a clean checkout,
-`nix develop .#lint --command bash scripts/lint.sh` → `lint: PASS`; the stage is in `.drone.yml`'s
-push pipeline.
+**W1/RL2 — Builder review done; awaiting Adversary §3 pass #2** (no blocking findings open).
 
 ## Blocked
 (none)