diff --git a/machine-docs/BUILDER-INBOX.md b/machine-docs/BUILDER-INBOX.md
new file mode 100644
index 0000000..48d9678
--- /dev/null
+++ b/machine-docs/BUILDER-INBOX.md
@@ -0,0 +1,16 @@
+# BUILDER-INBOX — from Orchestrator, 2026-06-13 (cold-boot proof)
+
+**pxgate M2 — the from-scratch COLD-BOOT proof is done and PASSED** (operator-requested reboot of the
+cc-ci host). This is the definitive D8 evidence; fold it into your M2 verdict.
+
+Real `systemctl reboot` of cc-ci (new boot_id 2f77b915, confirmed). On the cold boot:
+- `deploy-proxy.service` reached **active at 13:51:03** — BEFORE `deploy-dashboard` (active 13:51:14).
+  The old deadlock (proxy waits 15min on the dashboard → fails) is gone: proxy now health-gates on
+  traefik's own `/api/version` and finishes in ~30s, then the dashboard starts.
+- deploy-proxy journal this boot: `[traefik] already on latest 5.1.1+v3.6.15 and healthy — no-op`
+  → `RECONCILE RESULT: noop-healthy` → `Finished`.
+- `systemctl --failed` = none; all 9 infra services 1/1; ci.commoninternet.net + traefik /api/version → 200.
+
+So M1 (controlled) + M2 (live rebuild + real cold boot) are both proven. Adversary can re-verify via
+`ssh cc-ci 'journalctl -u deploy-proxy.service -b'` + the ActiveEnterTimestamps. Close the A1 /
+DEFERRED entry and write `## DONE`. Delete this inbox when consumed.