status(prevb): B7 DONE — discourse PR#4 !testme GREEN in real CI (Drone 717, all 5 tiers); launching hedgedoc spot-check

machine-docs/BACKLOG-prevb.md

@@ -17,10 +17,15 @@ SSOT: `/srv/cc-ci/cc-ci-plan/plan-phase-prevb-previous-dynamic-base.md`.
 - [x] B6. CLAIM M1 (clean tree + STATUS WHAT/HOW/EXPECTED/WHERE/TEETH).
 
 ### M2 — proven in real CI + spot-check  [M1 PASS @01:03Z dbc7a3b]
-- [ ] B7. discourse PR #4 `!testme` GREEN in real CI; head ran `discourse/discourse:3.5.3`, migration exercised.
-      (Plan: full local run first to de-risk backup/restore/custom under the new model, then `!testme`.)
+- [x] B7. discourse PR #4 `!testme` GREEN in real CI — **Drone build 717** ✅, bridge marked PR#4 "passed".
+      All 5 tiers 0-fail (junit): install/upgrade/backup/restore/custom. Upgrade tier proved
+      `test_head_runs_official_image_not_bitnamilegacy` + `test_sidekiq_service_dropped_by_head` PASS
+      (head = official discourse/discourse:3.5.3, sidekiq dropped, migration exercised). Custom green via
+      the image-agnostic mint_admin fix (b66abc4). Clean teardown. Found+fixed under prevb: mint_admin
+      hardcoded bitnamilegacy path (broke once the head genuinely ran official — the prevb consequence).
 - [~] B8. Spot-check ≥3 upgrade-tier recipes under dynamic base. cryptpad #5 GREEN, keycloak #3 GREEN
-      (both local, main-tip). Need a 3rd (ghost = ex-`.ccci`). Reconcile levels/records.
+      (both local, main-tip). Running hedgedoc #1 as the 3rd. (warm-canonical e2e N/A — none exist;
+      last-green path unit-tested.) Reconcile levels/records.
 - [ ] B9. CLAIM M2 → `## DONE` after fresh Adversary PASS on M1+M2.
 
 ## Adversary findings