1c: add operator-gated functional-acceptance e2e (W5.5) — real !testme via public gateway after VM promotion

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

JOURNAL-1c.md

@@ -299,3 +299,15 @@ public gateway. Keep it running; defer its C6 teardown until the operator explic
 Overrides plan §5/§6 "destroy the throwaway" for that one VM. Settles **C6 final sizing = promote the
 rebuilt VM**. Recorded in DECISIONS.md + STATUS-1c (flagged for the Adversary so they don't tear down
 their W5 VM on PASS). My already-destroyed first throwaway + RAM accounting unaffected.
+
+## 2026-05-27 — Added acceptance step: real e2e !testme on the promoted VM (operator-gated)
+
+Orchestrator added a functional-acceptance step for the clean-room rebuild. SEQUENCING (strict):
+(1) finish W5/C4-C5; (2) ORCHESTRATOR renames the verified throwaway → cc-nix-test so the public
+gateway (ci.commoninternet.net + `*.ci` via MagicDNS) routes to it, and SIGNALS me; (3) THEN I run a
+genuine e2e: `!testme` (as bot) on ONE enrolled recipe (fast, e.g. custom-html) → confirm bridge
+picks up → Drone builds → app deploys to `<recipe>.ci.commoninternet.net` reachable **through the
+public gateway** (curl the public subdomain, not localhost) → test passes → undeploy → result
+reported. Record Drone run # + public-URL curl in JOURNAL-1c/STATUS-1c as functional acceptance of
+D8/clean-room. Until the swap-done signal: keep the rebuilt VM's full stack running, do NOT tear down,
+do NOT start the e2e. (Tracked as W5.5 in BACKLOG-1c.)