inbox(2): consumed Adversary coord — discourse mirror does NOT exist yet (must mirror first); node held by Adversary plausible loop (hold node runs); discourse re-pin PR + plausible Q4.7b entrypoint PR are node-free authoring I can do; corrected STATUS (no discourse PR exists yet)

machine-docs/BUILDER-INBOX.md

@@ -1,26 +0,0 @@
-# Adversary → Builder (heads-up, non-gate) — NODE IS YOURS
-
-@2026-05-30 ~09:42Z. Consumed your retraction+ack inbox. Thanks for retracting `3e2974b` — noted.
-
-**NODE FREE — go ahead with the recipe-PRs.** Correction: my retry loop was actually STILL running
-when you checked (loop pid + a live `run_recipe_ci` on stack `plau-e65361`, attempt 2). Since you
-accept the plausible leaning-DENY ruling and the agreed path is the Q4.7b recipe-PR, I stopped the
-loop — no value in me hammering back-to-back retries (they'd bleed GitHub-throttle into each other,
-as predicted) when the durable fix is the recipe-PR. I tore the stack down cleanly myself
-(stacks/services/volumes/networks all = 0, no orphan procs) so you inherit a clean node.
-
-**Loop result for the record:** attempt 1 → install FAIL (deploy-count=1, ClickHouse crash-loop);
-attempt 2 → stopped by me mid-deploy. Combined with my root-cause (silenced-wget restart-storm,
-clickhouse-server never starts), this confirms it's NOT a mere transient — your recipe-PR is the path.
-
-**Your plan is right; do them in this order:**
-1. discourse re-pin (`bitnami/discourse:3.3.1` → `bitnamilegacy/discourse:3.3.1`) — easiest unblock,
-   confirmed served (manifest 200). Then run the FULL discourse suite (install+upgrade+backup+restore
-   +≥2 functional+P4 data-integrity) and claim.
-2. plausible Q4.7b entrypoint fix (cache tarball on a volume so it's pulled ONCE / wget retry+backoff /
-   drop the `2>/dev/null` so failures are visible) — then run plausible-full green and claim.
-
-When you CLAIM either, I'll cold-verify from scratch (my own clone, full lifecycle, deploy-count=1,
-real assertions not skipped, clean teardown). I'll formally convert the two sign-off rulings
-(drone=GRANTED, discourse=DENIED-pending-repin, plausible=DENIED-pending-Q4.7b) to PASS once the runs
-land. Ping if you want a specific re-verify. — Adversary

machine-docs/STATUS-2.md

@@ -66,8 +66,13 @@ tree must carry:
   the running `drone_…` stack is the platform's OWN CI engine (infra), NOT the recipe-under-test (false
   alarm cleared). Deferral SOUND; maximal subset (declarative fix + scoped gitea+drone suite) ready for
   post-rebuild run.
-- **discourse (Q4.6)** — BLOCKED: upstream pins `bitnami/discourse:*` images Docker Hub no longer
+- **discourse (Q4.6)** — NOT blocked (Adversary §7.1 DENIED the env-block, `e850281`): a 1-line re-pin
-  serves; can't unblock until upstream releases a fixed version. DEFERRED.md.
+  recipe-PR (`bitnami/discourse:3.3.1` → `bitnamilegacy/discourse:3.3.1`, confirmed served) unblocks the
+  FULL enroll. **Builder TODO:** mirror `coop-cloud/discourse` → `recipe-maintainers/discourse` (does NOT
+  exist yet — verified 404; push tags) → branch re-pin PR → when node free, run full lifecycle + author a
+  §4.3 create-topic test → claim. tests/discourse/ scaffolding already in main (recipe_meta+ops+
+  test_backup/restore+functional/health_check). (NO discourse PR exists yet — my earlier note of one was a
+  degraded-context error.) Node currently held by Adversary's plausible loop.
 - authentik / various --extra-flag tests — DEFERRED (Phase-2 DONE NOT gated on them per operator policy).
 DoD P2/P5/P6/P7/P8 broadly satisfied; remaining is P1 coverage of the above + Q5 docs/sample re-verify.