1c: add operator-gated functional-acceptance e2e (W5.5) — real !testme via public gateway after VM promotion

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

BACKLOG-1c.md

@@ -23,6 +23,11 @@ Method W1–W6 from the phase plan §5. Each milestone ends with an Adversary ga
       --recursive` + ONE `nixos-rebuild switch ?submodules=1` → running/0-failed, byte-identical
       `ld19aj2`==cc-ci, 6 stacks 1/1, all secrets+cert decrypt, TLS leaf==git cert. Found+fixed a
       concurrent-abra race (serialized reconcilers). **Gate W4 CLAIMED** (awaiting Adversary W5).
+- [ ] **W5.5 — Functional-acceptance e2e (operator-gated).** AFTER W5 PASS + orchestrator renames the
+      verified throwaway→cc-nix-test (public gateway) + SIGNALS: post `!testme` (bot) on one fast enrolled
+      recipe (custom-html); confirm full pipeline vs the **public** domain (bridge→Drone→deploy to
+      `<recipe>.ci.commoninternet.net` reachable THROUGH the gateway→test→undeploy→report). Record Drone
+      run # + public-URL curl. Do NOT start before the orchestrator's swap-done signal. Keep VM stack up.
 - [ ] **W5 — Adversary cold proof + honest D8.** Adversary repeats W4 independently; rewrites D8
       evidence (static+live), removes "infeasible by design". Accept: Adversary D8 live-rebuild PASS
       (or narrow signed-off limitation per C5).