status(prevb): B7 DONE — discourse PR#4 !testme GREEN in real CI (Drone 717, all 5 tiers); launching hedgedoc spot-check

machine-docs/BACKLOG-prevb.md

@@ -17,10 +17,15 @@ SSOT: `/srv/cc-ci/cc-ci-plan/plan-phase-prevb-previous-dynamic-base.md`.
 - [x] B6. CLAIM M1 (clean tree + STATUS WHAT/HOW/EXPECTED/WHERE/TEETH).
 
 ### M2 — proven in real CI + spot-check  [M1 PASS @01:03Z dbc7a3b]
-- [ ] B7. discourse PR #4 `!testme` GREEN in real CI; head ran `discourse/discourse:3.5.3`, migration exercised.
+- [x] B7. discourse PR #4 `!testme` GREEN in real CI — **Drone build 717** ✅, bridge marked PR#4 "passed".
-      (Plan: full local run first to de-risk backup/restore/custom under the new model, then `!testme`.)
+      All 5 tiers 0-fail (junit): install/upgrade/backup/restore/custom. Upgrade tier proved
+      `test_head_runs_official_image_not_bitnamilegacy` + `test_sidekiq_service_dropped_by_head` PASS
+      (head = official discourse/discourse:3.5.3, sidekiq dropped, migration exercised). Custom green via
+      the image-agnostic mint_admin fix (b66abc4). Clean teardown. Found+fixed under prevb: mint_admin
+      hardcoded bitnamilegacy path (broke once the head genuinely ran official — the prevb consequence).
 - [~] B8. Spot-check ≥3 upgrade-tier recipes under dynamic base. cryptpad #5 GREEN, keycloak #3 GREEN
-      (both local, main-tip). Need a 3rd (ghost = ex-`.ccci`). Reconcile levels/records.
+      (both local, main-tip). Running hedgedoc #1 as the 3rd. (warm-canonical e2e N/A — none exist;
+      last-green path unit-tested.) Reconcile levels/records.
 - [ ] B9. CLAIM M2 → `## DONE` after fresh Adversary PASS on M1+M2.
 
 ## Adversary findings

machine-docs/JOURNAL-prevb.md

@@ -121,3 +121,14 @@ verified it works). Re-run (install,upgrade,custom) → custom PASS (all 3 custo
 Tier status (across run-prevb-disc-full + run-prevb-disc-custom): install✓ upgrade✓ backup✓ restore✓ custom✓.
 So the real-CI !testme full pipeline should be green. Posting !testme on discourse PR#4 as autonomic-bot
 (authorized org member) → bridge (polls every 30s) triggers a Drone build of cc-ci@main (= prevb code).
+
+## 2026-06-17T01:33Z — B7 DONE: discourse PR#4 !testme GREEN in real CI (Drone 717)
+
+Posted !testme as autonomic-bot (comment 14597); bridge replied in ~16s (build 717), bridge final
+comment "✅ passed" @01:32:55Z. Run 717 junit (cold-readable at /var/lib/cc-ci-runs/717/junit/): ALL
+10 suites failures=0 errors=0 — install / upgrade(generic+cc-ci) / backup(generic+cc-ci) /
+restore(generic+cc-ci) / custom(create_topic+health_check+site_basic). upgrade__cc-ci proves
+test_head_runs_official_image_not_bitnamilegacy + test_sidekiq_service_dropped_by_head PASS. Clean
+teardown (no discourse stacks). This is the M2 headline: the migration is REALLY tested in real CI.
+
+Launching hedgedoc #1 as the 3rd spot-check (cryptpad #5 + keycloak #3 already green). Then reconcile + claim M2.