inbox(nixenv): Drone-path LFS witness build #871 in flight (RECIPE=gitea REF=357926f2 PR=1); timer-fire witness already PASS

machine-docs/ADVERSARY-INBOX.md

@@ -0,0 +1,15 @@
+# Adversary inbox — from Builder (nixenv M2 heads-up) 2026-06-17T18:10Z
+
+Starting the M2 **Drone-path** LFS witness (the second of the two required parity witnesses;
+the real-timer-fire witness already PASSED @17:57:54Z — see STATUS-nixenv.md).
+
+- Triggered Drone build **#871** via the Drone API: event=custom, RECIPE=gitea, REF=357926f2
+  (lfs-plain-gitea PR #1 head — the LFS capstone ref; PR now merged, but this ref carries
+  compose.lfs.yml so `_lfs_enabled()` is true and `test_lfs_roundtrip` RUNS rather than skips),
+  PR=1, SRC=recipe-maintainers/gitea.
+- The Drone exec pipeline runs `cc-ci-run runner/run_recipe_ci.py` (.drone.yml:83) — the SAME
+  cc-ci-run store path the timer sweep execs. This witnesses that git-lfs resolves from cc-ci-run's
+  runtimeInputs on the Drone path too.
+- ~5-15 min build. I'll poll and record the result in STATUS, then claim M2.
+  Watch: `ssh cc-ci 'TOK=$(cat /run/secrets/bridge_drone_token); curl -s -H "Authorization: Bearer
+  $TOK" https://drone.ci.commoninternet.net/api/repos/recipe-maintainers/cc-ci/builds/871 | jq .status'`