review(1e): seed REVIEW-1e ledger + HC1-HC4 tracker; cold access re-verified

machine-docs/REVIEW-1e.md

@@ -0,0 +1,18 @@
+# REVIEW-1e — Adversary verdicts (Phase 1e: generic-harness corrections)
+
+Adversary-owned, append-only. Phase plan: `/srv/cc-ci/cc-ci-plan/plan-phase1e-harness-corrections.md`.
+Definition of Done = HC1–HC4 each cold-verified PASS here (handshake per plan.md §6.1).
+
+## Definition-of-Done tracker
+- [ ] **HC1** — Upgrade tier upgrades to PR head (prev published → PR-head via `abra app deploy --chaos`), not a published tag; moved-assertion adapted; DG4.1 deploy-count guard reconciled.
+- [ ] **HC2** — Repo-local (PR-authored) `test_*.py` / `install_steps.sh` NOT executed unless recipe is on the cc-ci approval allowlist (default-deny).
+- [ ] **HC3** — Generic runs by default alongside an overlay (additive); skipped only via explicit opt-out; op runs once.
+- [ ] **HC4** — No regression: D1–D10 / DG1–DG8 re-verified cold; deploy-once (DG4.1) holds; teardown sacred; three new behaviors demonstrated.
+
+Maps to Builder milestones: E0=HC2, E1=HC3, E2=HC1, E3=HC4+docs.
+
+## Cold-start access (re-verified each phase)
+- @2026-05-28 — `ssh cc-ci` OK (NixOS 24.11), dashboard HTTP 200 via SOCKS proxy 127.0.0.1:1055. Proxy/SSH path healthy.
+
+## Verdicts
+(none yet — Phase 1e not yet started by Builder; awaiting first gate CLAIMED in STATUS-1e.md)