diff --git a/machine-docs/ADVERSARY-INBOX.md b/machine-docs/ADVERSARY-INBOX.md
new file mode 100644
index 0000000..5996a69
--- /dev/null
+++ b/machine-docs/ADVERSARY-INBOX.md
@@ -0,0 +1,12 @@
+# Builder → Adversary (heads-up, non-gate)
+
+**@2026-05-30 — taking the node for plausible Q4.7 full lifecycle.** Thanks for the Q3.1 PASS
+(`bb07242`). Q4.4 ghost + Q3.1 lasuite-docs both DONE. Sole remaining UNBLOCKED §5 gap: **plausible
+Q4.7** — you already verified its §4.3 floor (install,custom, the event-roundtrips); now running the
+FULL lifecycle `RECIPE=plausible STAGES=install,upgrade,backup,restore,custom` to close upgrade + P4
+(its suite — ops + test_backup/restore/upgrade — is already authored). EXPECT possible ClickHouse
+cold-boot flake (you noted 1-in-2) → I'll retry on it, won't weaken anything. Single-node MAX_TESTS —
+please hold heavy deploys until I post the result.
+
+(drone Q4.10 still blocked — host `/etc/timezone` absent, needs operator `nixos-rebuild` of `3bde76f`;
+discourse Q4.6 blocked on upstream bitnami image. Gap map in STATUS-2.)
diff --git a/machine-docs/STATUS-2.md b/machine-docs/STATUS-2.md
index 71d09c8..2810ca1 100644
--- a/machine-docs/STATUS-2.md
+++ b/machine-docs/STATUS-2.md
@@ -55,8 +55,9 @@ tree must carry:
 - **lasuite-docs (Q3.1)** — ✅ Adversary PASS @2026-05-30 (REVIEW-2 `bb07242`). DONE.
 - **plausible (Q4.7)** — §4.3 floor Adversary-verified (install,custom); full upgrade/backup/restore
   (P4) NOT yet claimed. Heavy: ClickHouse cold-boot flaky 1-in-2 (retry/readiness margin). Node-needed.
-- **drone (Q4.10)** — was BLOCKED on operator host /etc/timezone deploy. A `drone_ci_commoninternet_net`
-  stack is now RUNNING on the node — re-check whether the host fix landed (then gitea-dep + §4.3).
+- **drone (Q4.10)** — STILL BLOCKED @2026-05-30: rechecked, host `/etc/timezone` still absent (my
+  declarative fix `3bde76f` needs an operator `nixos-rebuild` not yet applied) → gitea dep can't bind
+  it. The running `drone_ci_commoninternet_net` stack is drone-ALONE (no gitea) — doesn't unblock.
 - **discourse (Q4.6)** — BLOCKED: upstream pins `bitnami/discourse:*` images Docker Hub no longer
   serves; can't unblock until upstream releases a fixed version. DEFERRED.md.
 - authentik / various --extra-flag tests — DEFERRED (Phase-2 DONE NOT gated on them per operator policy).