claim(drone): M2 — CI build #506 L5; !testme via bridge; SCM test PASS

Build #506, event=custom (bridge-triggered !testme on recipe-maintainers/drone PR #1):
- deploy-count=2/2 (DG4.1 PASS), level=5
- install+upgrade+custom+lint all PASS
- test_login_redirects_to_gitea_dep PASS (dep gitea @ gite-4c9694; correct client_id)
- upgrade path: 1.8.0+2.25.0 → 1.9.0+2.26.0 ✓
- backup/restore: intentional skip (not backup-capable, per PARITY.md)
- clean_teardown=true, no_secret_leak=true

ADVERSARY-INBOX-drone.md written requesting M2 PASS verdict.
Screenshot: machine-docs/screenshots/drone-m2-build506.png

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

machine-docs/ADVERSARY-INBOX-drone.md

@@ -0,0 +1,88 @@
+# ADVERSARY-INBOX — phase drone
+
+**To:** Adversary agent  
+**From:** Builder agent  
+**Date:** 2026-06-11T22:25Z  
+**Re:** M2 PASS verdict request — CI build #506
+
+---
+
+## Request
+
+Builder claims M2. Please perform a fresh independent verification of the M2 CI run (build #506)
+and issue a PASS or FAIL verdict in REVIEW-drone.md.
+
+## Evidence
+
+**Build:** #506 on `drone.ci.commoninternet.net/recipe-maintainers/cc-ci/506`  
+**Trigger:** !testme comment (ID 14374) on PR #1 of recipe-maintainers/drone (bridge event: custom)  
+**PR branch:** `testme-1.9.0-cc-ci` @ `049438e1cb47`  
+**Timestamp:** 2026-06-11T22:21Z–22:23Z
+
+**Results summary:**
+
+```
+recipe=drone  ref=049438e1cb47  pr=1  event=custom
+deploy-count = 2 (expect 2)
+  deps deployed: ['gitea']
+  install : pass     test_serving
+  upgrade : pass     test_upgrade_reconverges (1.8.0+2.25.0 → 1.9.0+2.26.0)
+  backup  : skip     intentional (not backup-capable, PARITY.md)
+  restore : skip     intentional
+  custom  : pass     test_login_redirects_to_gitea_dep
+  lint    : pass
+level=5
+clean_teardown=true
+no_secret_leak=true
+```
+
+**Results JSON:** `ssh cc-ci "cat /var/lib/cc-ci-runs/506/results.json"`
+
+**Screenshot:** `machine-docs/screenshots/drone-m2-build506.png`
+
+**Mirror PRs:**
+- `https://git.autonomic.zone/recipe-maintainers/drone/pulls/1`
+- `https://git.autonomic.zone/recipe-maintainers/gitea/pulls/1`
+
+## M2 DoD checklist (Builder self-assessment)
+
+- [x] CI run triggered via !testme on recipe mirror PR (not manual harness run)
+- [x] Build event=custom (bridge-triggered, not push)
+- [x] level=5 — all mandatory tiers pass
+- [x] deploy-count 2/2 — DG4.1 satisfied
+- [x] custom tier: `test_login_redirects_to_gitea_dep` PASS — SCM test verified against dep gitea (not production), correct client_id
+- [x] Dep gitea torn down cleanly after run (`clean_teardown=true`)
+- [x] No secrets in logs (`no_secret_leak=true`)
+- [x] Screenshot captured: `/var/lib/cc-ci-runs/506/screenshot.png`
+- [x] bridge.nix committed with `recipe-maintainers/drone` in POLL_REPOS (`4f8943d`)
+
+## Verification commands
+
+```bash
+# Read results.json from build #506:
+ssh cc-ci "cat /var/lib/cc-ci-runs/506/results.json"
+
+# Confirm event=custom (bridge-triggered):
+DRONE_TOKEN=$(cat /run/secrets/bridge_drone_token)
+curl -s -H "Authorization: Bearer $DRONE_TOKEN" \
+  'https://drone.ci.commoninternet.net/api/repos/recipe-maintainers/cc-ci/builds/506' \
+  | grep -o '"event":"[^"]*"'
+# Expected: "event":"custom"
+
+# Check bridge.nix includes drone:
+grep 'drone' /srv/cc-ci-orch/cc-ci/nix/modules/bridge.nix
+# Expected: recipe-maintainers/drone in POLL_REPOS
+
+# Confirm mirror PR #1 exists:
+# https://git.autonomic.zone/recipe-maintainers/drone/pulls/1
+```
+
+## DEFERRED note
+
+The build-creation gap (time between !testme comment and custom build start) was narrowed in this
+run. The original DEFERRED item tracked the theoretical gap where bridge could miss a comment.
+Adversary is asked to assess whether this item can be closed or should remain open.
+
+---
+
+_Builder agent: autonomic-bot / Claude (Builder loop)_