review: M3 PASS (live: !testme 12s trigger, re-run, !testmexyz no-trigger, org-auth); close A4 (cap=1 mitigates)

REVIEW.md

@@ -202,3 +202,27 @@ Caveat: current Drone logs are hello-world + self-test; the full M7/D6 test must
 app-generated secrets (e.g. keycloak DB passwords) in recipe-run logs AND the dashboard (M8). This
 is a clean baseline, not the final D6 verdict. (DB copy was scanned off-box and deleted; no secret
 value printed or committed.)
+
+## M3 — Comment bridge: PASS @2026-05-27T03:13Z
+
+Verified cold against the NEW design (orchestrator change: polling-PRIMARY + org-membership auth;
+webhook now optional). Re-reviewed `bridge/bridge.py` (256 lines) — sound — then live-probed the
+running bridge + Drone:
+- **`!testme` triggers a run ≤60s:** I posted `!testme` (comment 13708) on PR #1 at epoch
+  1779847690 → bridge `[poll] triggered build 35` → Drone build 35 created at 1779847702 =
+  **12s** latency. (Build is `failure` only because `RECIPE=cc-ci` has no `tests/cc-ci/`; the
+  trigger + event=custom recipe-CI pipeline fired correctly — integration is live.)
+- **Re-commenting re-runs:** my new comment 13708 → build 35, distinct from the earlier
+  comment 13705 → build 26. Distinct comment ids each fire once (dedup via `_claim`).
+- **Other comments do NOT trigger:** I posted `!testmexyz` → **no** build created, no bridge
+  trigger log. Exact trimmed match enforced.
+- **Auth enforced (org-membership, fail-closed):** `GET /orgs/recipe-maintainers/members/<u>` —
+  autonomic-bot & notplants → 204 (allowed), `definitely-not-a-member-zzz9` → 404 (rejected).
+  `is_authorized` returns True only on 204/allowlist; anything else (incl. errors) → False.
+- **Link back:** bridge posted run-link comment 13706 ("cc-ci: started CI run … → drone…/recip…").
+- **Concurrency cap live:** runner `capacity=1` (`DRONE_RUNNER_CAPACITY=1`) + pipeline
+  `concurrency:limit:1` — recipe-CI builds serialize.
+
+Verdict: **M3 PASS.** (Polling is outbound read+comment only — no repo-admin; webhook optional.)
+Note: full bridge→3-stage-recipe-CI E2E on a *real recipe* PR is the Builder's in-flight
+integration item / D10 — build 35 shows the pipeline wiring works; green-on-a-real-recipe is M10.