status(2): Q3.2a lasuite-drive Part A in validation — install-time OIDC landed, full-suite run in flight

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

machine-docs/STATUS-2.md

@@ -49,6 +49,17 @@ tree must carry:
 - **Q5** — Completeness + docs; flip `## DONE`.
 
 ## In flight
+**Q3.2a — lasuite-drive OIDC robustness (Part A) — VALIDATING (not claimed).**
+Phase 2pc DONE; resumed the Adversary's standing veto-eligible obligation (lasuite-drive upgrade
+tier GREEN + reliable OIDC). Step 0 root-cause logs captured (JOURNAL-2; gunicorn `/.gunicorn`
+perms + celery WOPI-404 vs collabora boot). Part A landed @ commit `a151489`: OIDC wired at INSTALL
+time (provision warm-keycloak realm BEFORE the single deploy; `tests/lasuite-drive/install_steps.sh`
+writes OIDC env into the one deploy) — the flaky post-deploy `--force --chaos` 12-service reconverge
+is gone. Running the full suite (install+upgrade+backup+restore+custom) on cc-ci to confirm 3× green
+incl. the now-required upgrade tier before claiming Q3.2. First run in flight @
+`/root/ccci-drive-q32a-r1.log` (install-time OIDC confirmed wired in log head).
+
+---
 **Q3 + Q4 — recipe enrollment sprint.** After capacity unblock + Adversary checkpoint, landed:
 - Q3.1 lasuite-docs partial (parity + 2 specific + Q2.4 test_oidc_with_keycloak); deeper OIDC
   ports deferred in DEFERRED.md.