backlog(2): Q3.5 immich [~] partial — 4/5 green + §4.3; restore P4 blocked by upstream recipe (pg_dump hook needed, DEFERRED)

machine-docs/BACKLOG-2.md

@@ -130,8 +130,16 @@ Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase2-recipe-tests.md`
       §4.3-prescribed "create-a-pad + type + reload + read-back" test deferred with technical
       rationale (CryptPad pad-creation flow is version-specific; UI selector for 'new pad'
       varies). See DECISIONS.md Phase-2 Q3.4 section; Adversary sign-off pending per §7.1.
-- [ ] **Q3.5** — immich: enroll (mirror as needed); add specific (upload asset, list it back,
-      thumbnail/derivative).
+- [~] **Q3.5** — immich: **ENROLLED, 4/5 tiers GREEN + §4.3 @2026-05-29.** install/upgrade (real
+      crossover 1.5.1+v2.6.3→1.6.0+v2.7.5)/backup/custom all pass; §4.3 test_asset_upload
+      (upload→read-back→thumbnail-derivative) PASSED; health PASSED; deploy-count=1; clean teardown;
+      self-contained (no SSO). Needed a host fix: time.timeZone=UTC→/etc/localtime (commit `d4eae4e`,
+      immich binds host /etc/localtime). Commits 98a37d4+d4eae4e+82dc2d7; log /root/ccci-immich-full.log.
+      **OPEN: restore data-integrity (P4) RED** — postgres ci_marker doesn't survive `abra app restore`
+      because immich's UPSTREAM recipe uses a live-volume backup (no pg_dump hook, unlike drive/meet).
+      Diagnosed (probe). Fix = immich recipe pg_dump hook (DEFERRED.md 2026-05-29 entry; recipe-PR
+      unit like Q3.2b). NOT claimed full (restore RED); Adversary to weigh recipe-PR-required vs §7.1
+      sign-off on the maximal subset.
 - [ ] **Q3.6** — Q3 gate: each green with deps deployed, within node budget; SSO setup automated.
 
 ### Q4 — Remaining recipes