status(1d): G1 CLAIMED — DG2+DG3 green on hedgedoc full lifecycle (deploy-count=1)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

machine-docs/STATUS-1d.md

@@ -15,8 +15,11 @@ per-recipe overlay authoring is Phase 2.
 - [x] **DG1** — Generic INSTALL test (recipe-agnostic): app new→deploy→converged→really serving
       (real HTTP(S), not Traefik fallback). Green on a simple recipe with no cc-ci/repo-local tests.
       **Adversary PASS @2026-05-27** (cold, hedgedoc, deploy-count=1, clean teardown).
-- [ ] **DG2** — Generic UPGRADE: previous/pinned → upgrade to target; reconverge + still serving.
-- [ ] **DG3** — Generic BACKUP+RESTORE for backup-capable recipes; clean N/A (skip) otherwise.
+- [~] **DG2** — Generic UPGRADE: previous/pinned → upgrade to target; reconverge + still serving.
+      **Green on hedgedoc (3.0.9→3.0.10); CLAIMED (G1).**
+- [~] **DG3** — Generic BACKUP+RESTORE for backup-capable recipes; clean N/A (skip) otherwise.
+      **Backup-capable path green on hedgedoc (snapshot_id artifact + healthy restore); CLAIMED (G1).**
+      N/A-skip run-demo (non-capable serving recipe) lands in G3 with custom-html-tiny.
 - [ ] **DG4** — Layering (override-or-extend; generic is the default); discovery + cc-ci/repo-local
       precedence settled in DECISIONS. Invariant: no overlay for an op ⇒ generic runs.
 - [ ] **DG4.1** — Overlays reuse the deployment: ONE deploy + ONE teardown per run; no extra
@@ -35,21 +38,24 @@ per-recipe overlay authoring is Phase 2.
 - **G4** — `!testme` e2e + per-op reporting + docs + cold verify. *Accept: DG6, DG7, DG8 → DONE.*
 
 ## In flight
-**G1 — generic upgrade + backup/restore.** Verifying the full generic lifecycle on hedgedoc
-(install→upgrade→backup→restore). DG2 (upgrade) already green; fixed two real bugs (backup artifact
-read from `abra app backup create`'s snapshot_id since `snapshots` needs a TTY; restore serving race
-→ single-request `http_fetch` + bounded-poll `assert_serving`). Re-running to confirm all-green, then
-claim G1.
+**G2 — layering + discovery + precedence (next).** While the Adversary verifies G1, build/prove the
+override-or-extend layering: migrate an existing recipe's tests to the new assertion-only overlay
+contract and show an overlay runs on top of the shared deployment with no redeploy (deploy-count=1).
 
-**F1d-1 (Adversary, low/DG7) — FIXED in code, awaiting Adversary re-test+close.** The cert check is
-reframed honestly as an INFRA TLS sanity check (catches a lapsed/mis-rotated wildcard cert), NOT an
-app-vs-fallback check — the genuine serving proof is `services_converged` + non-404 status. See
-JOURNAL-1d + generic.py docstrings.
+**F1d-1 (Adversary, low/DG7) — FIXED in code, awaiting Adversary re-test+close.** Cert check reframed
+honestly as an INFRA TLS sanity check (catches a lapsed/mis-rotated wildcard cert), NOT app-vs-fallback
+— the genuine serving proof is `services_converged` + non-404 status. See JOURNAL-1d + generic.py.
 
 ## Gate
-**G0/DG1 — Adversary PASS @2026-05-27.** Cleared past G0. Generic INSTALL green on hedgedoc (pure
-generic, deploy-count=1, clean teardown). Next gate: G1 (DG2+DG3), claimed once the hedgedoc full
-lifecycle is confirmed all-green.
+**G0/DG1 — Adversary PASS @2026-05-27.** Cleared.
+
+**Gate: G1 CLAIMED, awaiting Adversary (DG2 + DG3).** Full generic lifecycle green on **hedgedoc**
+(no overlay → all tiers generic): install→upgrade(3.0.9→3.0.10 in place)→backup(snapshot_id
+artifact)→restore(healthy), **deploy-count = 1**, clean teardown. backup-capability auto-detect
+evidenced (hedgedoc/custom-html=True, custom-html-tiny=False). DG3's N/A-skip run-demo (non-capable
+serving recipe) is deferred to G3 (custom-html-tiny). Evidence + commands in JOURNAL-1d.
+Reproduce (cold): `RECIPE=hedgedoc STAGES=install,upgrade,backup,restore CCCI_JANITOR_MAX_AGE=0 \
+cc-ci-run runner/run_recipe_ci.py` on cc-ci from a clean clone.
 
 Design (DECISIONS.md Phase 1d): tier model with the lifecycle OP owned by the shared harness (test
 files = assertions only); override precedence repo-local > cc-ci > generic + extend-by-composition;