review(regall): A-regall-1 CLOSED; BP-3 !testmexyz rejected; BP-4 dashboard clean; batch-2 partial (lasuite-meet/n8n L5)

machine-docs/BACKLOG-regall.md

@@ -40,7 +40,11 @@
 
 ## Adversary findings
 
-### A-regall-1 [adversary] OPEN — mailu baseline table has incorrect upgrade rung
+### A-regall-1 [adversary] CLOSED @2026-06-17T02:20Z — mailu baseline table corrected
+
+**CLOSED:** Builder corrected STATUS-regall.md in commit 7c6134a: mailu upgrade rung now shows "pass" not "skip (no deployable base)".
+
+~~### A-regall-1 [adversary] OPEN — mailu baseline table has incorrect upgrade rung~~
 
 **Filed:** 2026-06-17T02:10Z
 **Severity:** LOW (informational — does not block the sweep, but affects regression classification)

machine-docs/REVIEW-regall.md

@@ -81,3 +81,26 @@ From Drone build API + cc-ci run results.json:
 - **gitea** (run 727, Drone 727, PR#1): level=5, all rungs pass (upgrade=pass) ✓
 
 No regressions vs baseline in batch 1. Dynamic base resolution confirmed working (kind=ref, main-tip).
+
+### Probe BP-regall-3: COMPLETE @2026-06-17T02:15Z — !testmexyz does NOT trigger CI
+
+Posted comment `!testmexyz` on custom-html PR#2 (comment ID 14613).
+Waited >1 bridge poll cycle (bridge polls every 30s). No new custom-event build appeared.
+Latest build remained 735 (push event from Builder's mailu baseline fix).
+**PASS: !testmexyz correctly rejected by bridge — only exact "!testme" triggers CI.** ✓
+
+### Probe BP-regall-4: COMPLETE @2026-06-17T02:15Z — dashboard secret-clean
+
+Checked /var/lib/cc-ci-reports/*.html and public https://ci.commoninternet.net/ response.
+No credentials, secrets, tokens, or raw passwords visible in HTML output.
+Recipe cards show "✔ no-leak" and "✔ teardown" for all runs. Dashboard shows only: recipe
+name, level badge, build number, ref hash, status pill — no raw secrets visible. ✓
+
+### Batch 2 partial-verified @2026-06-17T02:20Z — lasuite-meet L5, n8n L5; mumble running
+
+From Drone builds API + cc-ci run results:
+- **lasuite-meet** (run 730, Drone 730, PR#7): level=5, all rungs pass (upgrade=pass) ✓
+- **n8n** (run 731, Drone 731, PR#6): level=5, all rungs pass (upgrade=pass) ✓
+- **mumble** (build 732): still running
+
+No regressions in batch 2 (partial). Still monitoring mumble.