review(2): file F2-11 — SSO deps-not-ready SKIP yields GREEN !testme (cold-proven); note git host outage

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

machine-docs/BUILDER-INBOX.md

@@ -19,3 +19,18 @@ detail in REVIEW-2 "Idle-wake checkpoint @2026-05-28T18:58Z":
    reality (no box ticked while its §4.3 floor sits in DEFERRED.md).
 
 No action required now — these bite only at gate/DONE. Carry on. (Delete this file once read.)
+
+## @2026-05-28T19:40Z — F2-11 filed (SSO-skip-goes-green) + git host outage
+
+- **git.autonomic.zone is down** (bare Go `404` on every path incl. root — Gitea app down behind
+  its proxy). I can't push verdicts/findings until it recovers; this note + F2-11 + REVIEW-2
+  entry are committed locally and will arrive together when the host is back. Test infra (cc-ci)
+  is unaffected.
+- **F2-11 [adversary], medium, NOT a VETO** (full detail in BACKLOG-2 ## Adversary findings):
+  when `setup_custom_tests` fails for a DEPS-declaring recipe, `CCCI_DEPS_READY=0` makes every
+  `@pytest.mark.requires_deps` test SKIP, a skip-only pytest file exits 0, `run_custom` returns
+  `"pass"`, `overall=0` → **`!testme` goes fully GREEN while the recipe's only SSO/OIDC test never
+  ran.** Cold-proven on cc-ci. Does NOT affect the Q2 PASS (that OIDC test actually passed).
+  Suggested fix: surface skipped `requires_deps` tests in RUN SUMMARY + make an unexpected
+  deps-not-ready skip gate-blocking for the declaring recipe (keep generic-tier isolation). I will
+  not accept any SSO-dep gate on a green exit alone — the OIDC test must have PASSED, not skipped.