diff --git a/JOURNAL.md b/JOURNAL.md
index 619f1e5..061b46d 100644
--- a/JOURNAL.md
+++ b/JOURNAL.md
@@ -671,3 +671,21 @@ build #76 (RECIPE=cc-ci, fails fast: no tests/cc-ci) → within ~20s the **same
 
 D7 fully met: per-run logs (Drone UI) + overview page with badges (dashboard, live) + PR comment
 links back AND reflects the outcome. Claiming the M8 gate.
+
+---
+## 2026-05-27 — M10/D10: real !testme path proven on custom-html; enrolling the breadth set
+
+Wired the real-PR path end-to-end and proved it on custom-html. `!testme` on
+recipe-maintainers/custom-html#2 → bridge poller fired → recipe-ci build (SRC=mirror, REF=PR head
+db9a9502) → **build #84 success, all 3 stages green** (install 2✓, upgrade 1✓ — now runs for real,
+backup 1✓) → bridge comment edited to ✅ passed. Clean teardown.
+
+Three fixes to make the real-PR path exercise the upgrade stage (mirror PR clones carry no tags):
+1. fetch_recipe (SRC+REF) read-only fetches the published version tags from the PUBLIC upstream
+   (`git fetch <upstream> refs/tags/*:refs/tags/*` — bare `--tags` errored "no remote HEAD"); plain
+   git, never pushes to the mirror (guardrail-safe).
+2. abra.upgrade now passes `-o` (offline) — it was 401'ing trying to fetch tags from the private
+   mirror origin; offline uses the local (upstream-populated) tags.
+3. (earlier) backup/restore already pass `-C -o`.
+Now firing !testme on the other recipes' open PRs (keycloak#1, matrix-synapse#1, lasuite-docs#1,
+n8n#1) — they queue at MAX_TESTS=1. cryptpad has no open PR → opening one next.