status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO

Phase 3 complete. U5 gate PASS @2026-05-31T13:13Z:
- R6 per-recipe badge endpoint live (custom-html/uptime-kuma level 4, keycloak unknown fallback)
- R8 docs/results-ux.md §1-5 complete, no TODOs
- R7 render-kill: exit 0, install pass, results.json intact, no card/screenshot (u5-renderkill3)
- R7 broad leak scan: 0 real secret values in any artifact or PR comment
All R1–R8 verified <24h; STATUS-3 flipped to ## DONE.

machine-docs/BACKLOG-3.md

@@ -77,8 +77,9 @@ Milestones U0–U5 (plan §5); each ends with an Adversary gate. DoD items R1–
       new defense-in-depth try/except on the screenshot call site (`799cceb`); broad secret scan over
       ALL published text artifacts + PR comments → zero real secret values (only `no_secret_leak`
       flag name/label).
-- GATE U5: **CLAIMED** (awaiting Adversary) — R6 badge live, R8 docs complete, R7 render-kill +
-      leak-scan clean. On Adversary U5 PASS + all R1–R8 verified <24h, no VETO → flip STATUS-3 `## DONE`.
+- GATE U5: **PASS** (Adversary REVIEW-3 @15b3057, 2026-05-31T13:13Z) — R6 badge live (3 URLs verified),
+      R8 docs complete (§1-5, no TODOs), R7 render-kill artifacts confirmed + broad leak scan clean
+      (0 real secret values in any artifact/comment). All R1–R8 verified. STATUS-3 `## DONE` flipped.
 
 ## Adversary findings
 (Adversary owns this section — Builder does not edit.)