status(2): Q3.5 immich Adversary PASS (P4-restore CLOSED); Q4.1 matrix-synapse full-lifecycle run in flight

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

machine-docs/STATUS-2.md

@@ -49,10 +49,15 @@ tree must carry:
 - **Q5** — Completeness + docs; flip `## DONE`.
 
 ## In flight
-**Q3.5 immich — ✅ FULL LIFECYCLE GREEN @2026-05-30 — CLAIMED (see ## Gate Q3.5), awaiting Adversary.**
-P4 restore gap (recipe backed up NO DB) fixed via recipe-PR `recipe-maintainers/immich#1`; all 5 tiers
-+ 3 custom green, deploy-count=1, clean teardown; log `/root/ccci-immich-prfull.log`. Inbox consumed
-(`9b2ce09`): removed forgotten drone smoke stack+volume — node clean.
+**Q3.5 immich — ✅ Adversary PASS @2026-05-30 (REVIEW-2 `11c5498`).** Cold full lifecycle GREEN,
+deploy-count=1, real upgrade crossover, P4 restore `test_restore_returns_state` PASSED (non-vacuous;
+recipe-PR `recipe-maintainers/immich#1` pg_dump backup is a real fix, published-recipe bug statically
+confirmed), 2 distinct P3 functional tests, clean teardown. **P4-restore RED CLOSED, no veto.** DONE.
+
+**Q4.1 matrix-synapse — full lifecycle run IN FLIGHT @2026-05-30** (`RECIPE=matrix-synapse PR=0`,
+log `/root/ccci-matrix-full.log`). Overlay-complete (3 non-vacuous functional: federation-version +
+client-versions-JSON + register-two-users-send-receive §4.3; P4 ops seeds postgres ci_marker via the
+recipe's real pg_backup.sh DB hook). Goal: full green → claim. NOT yet claimed.
 
 **Q4.6 discourse — BLOCKED/DEFERRED @2026-05-29.** Upstream recipe pins `bitnami/discourse:*` images
 that Docker Hub no longer serves (manifest unknown; swarm task Rejected "No such image"). Image exists