1c/W5.5: point to authoritative E2E-TESTME spec (E1-E6); orchestrator-signal-gated

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

BACKLOG-1c.md

@@ -23,11 +23,13 @@ Method W1–W6 from the phase plan §5. Each milestone ends with an Adversary ga
       --recursive` + ONE `nixos-rebuild switch ?submodules=1` → running/0-failed, byte-identical
       `ld19aj2`==cc-ci, 6 stacks 1/1, all secrets+cert decrypt, TLS leaf==git cert. Found+fixed a
       concurrent-abra race (serialized reconcilers). **Gate W4 CLAIMED** (awaiting Adversary W5).
-- [ ] **W5.5 — Functional-acceptance e2e (operator-gated).** AFTER W5 PASS + orchestrator renames the
-      verified throwaway→cc-nix-test (public gateway) + SIGNALS: post `!testme` (bot) on one fast enrolled
-      recipe (custom-html); confirm full pipeline vs the **public** domain (bridge→Drone→deploy to
-      `<recipe>.ci.commoninternet.net` reachable THROUGH the gateway→test→undeploy→report). Record Drone
-      run # + public-URL curl. Do NOT start before the orchestrator's swap-done signal. Keep VM stack up.
+- [ ] **W5.5 — Functional-acceptance e2e (E2E-TESTME, operator-gated).** Authority:
+      `cc-ci-plan/test-e2e-testme-acceptance.md`. After C4/C5 PASS + orchestrator renames rebuilt VM→
+      cc-nix-test + confirms public gateway + SIGNALS: `!testme` (bot) on a fast enrolled recipe
+      (custom-html); verify E1–E6 (self-check 200/cert → new Drone build via bridge → app reachable
+      EXTERNALLY at `<app>.ci.commoninternet.net` w/ valid cert+content → real assertions pass → clean
+      undeploy → reported). Evidence→JOURNAL-1c, verdict→STATUS/REVIEW-1c. Fail⇒fix in git, re-run.
+      Do NOT start before the signal; keep VM stack up. Adversary independently verifies.
 - [ ] **W5 — Adversary cold proof + honest D8.** Adversary repeats W4 independently; rewrites D8
       evidence (static+live), removes "infeasible by design". Accept: Adversary D8 live-rebuild PASS
       (or narrow signed-off limitation per C5).