1c/E2E-TESTME: Builder owns the tailnet swap end-to-end (no signal); record swap steps + execution watch-outs

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

JOURNAL-1c.md

@@ -324,3 +324,22 @@ localhost); E4 real assertions pass / build success; E5 clean undeploy; E6 repor
 updated. Evidence→JOURNAL-1c, verdict→STATUS/REVIEW-1c as E2E-TESTME PASS. On fail: clean-room finding
 → fix in GIT SOURCE (base/cc-ci-secrets), not the live VM → re-run. Bound: one recipe, one green run.
 Not started — awaiting orchestrator signal; rebuilt VM stack kept up.
+
+## 2026-05-27 — E2E-TESTME: Builder now owns the tailnet swap (no orchestrator signal)
+
+Spec §1 updated (re-read): the Builder performs the swap end-to-end after C4/C5 PASS + rebuilt stack
+up — NO orchestrator signal. Two reversible `tailscale set --hostname` (ORDER MATTERS):
+(1) `ssh cc-ci 'tailscale set --hostname=cc-nix-test-orig'` (original aside, KEEP running for swap-back;
+ssh cc-ci pinned to 100.90.116.4 still hits original); (2) rebuilt throwaway → cc-nix-test (re-derive
+its current online IP from `tailscale --socket=$HOME/.cc-ci-ts/tailscaled.sock status | grep -i
+throwaway`). Then cc-nix-test.taila4a0bf.ts.net → rebuilt VM tailnet-wide; gateway auto-follows ~10s.
+Verify P1+P2 (status shows cc-nix-test→throwaway IP; `curl https://ci.commoninternet.net/` 200
+ssl_verify=0) → run E2E-TESTME (E1-E6) → swap-back (rebuilt→old name, `ssh cc-ci 'tailscale set
+--hostname=cc-nix-test'`). Orchestrator just monitors / safety-net.
+
+**Two execution watch-outs I'll handle at run time** (reasoned, not yet done): (a) the original
+(cc-nix-test-orig) keeps its bridge polling Gitea with the same token → would duplicate builds/PR
+comments; pause it during the e2e (`docker service scale ccci-bridge_app=0` on the original, restore
+after). (b) the rebuilt VM's Drone needs the one-time OAuth bootstrap (install.md §2,
+scripts/bootstrap-drone-oauth.sh) before it can clone/build — a documented post-step, run it on the
+rebuilt VM as part of e2e setup. Still gated on C4/C5 PASS (W5) — not started.