1c/E2E-TESTME: swapped back — public on original cc-ci; rebuilt VM kept (bridge paused); deploying token fix to cc-ci next

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

STATUS-1c.md

@@ -85,10 +85,15 @@ comment "✅ passed →…/cc-ci/4" + dashboard custom-html/success/#4. Evidence
 the Drone-bot-token reproducibility gap (af46aca) en route. **Adversary independently verifies E1-E6.**
 Remaining: swap-back; re-deploy af46aca to cc-ci (byte-identical at new toplevel `cqym8knj…`).
 
-## 🔴 SWAP ACTIVE (2026-05-27 ~19:25Z) — public gateway points at the REBUILT VM (reversible)
-**State:** `cc-nix-test` (MagicDNS) → **`100.97.167.73`** (rebuilt `ccci-w5-rebuild`); original cc-ci
-renamed `cc-nix-test-orig` @ `100.90.116.4`, **still running** (swap-back target). Public
-`ci.commoninternet.net` now served by the rebuilt VM (P2 verified 200/ssl_verify=0). Doing E2E-TESTME.
+## SWAP REVERTED (2026-05-27 ~20:00Z) — public back on the ORIGINAL cc-ci
+E2E-TESTME passed; swapped back: `cc-nix-test` (MagicDNS) → `100.90.116.4` (original), public
+`ci.commoninternet.net` → 200 ssl_verify=0 (original); original bridge restored 1/1, healthy. The
+rebuilt VM `ccci-w5-rebuild` @ `100.97.167.73` is **kept running** (C6 override, operator promotes it)
+with its **bridge paused** (`ccci-bridge_app` 0) to avoid dual-trigger on real PRs (operator restores
+at promotion). Remaining: re-deploy af46aca (Drone-token fix, toplevel `cqym8knj…`) to the original cc-ci
+→ re-verify byte-identical; Adversary re-checks C1 + verifies E1-E6.
+<details><summary>swap-active history</summary>
+Public gateway pointed at the rebuilt VM (`100.97.167.73`) during the e2e; original was cc-nix-test-orig.</details>
 **E2E progress (2026-05-27 ~19:45Z):** E1 PASS (public 200/ssl_verify=0). Original's bridge PAUSED
 (`ccci-bridge_app` 1/0 on cc-nix-test-orig). Rebuilt VM Drone OAuth done (admin=true, cc-ci active) —
 needed a script fix (auto-approve, committed ee585ef). **Clean-room finding (committed af46aca):**