1c: add operator-gated functional-acceptance e2e (W5.5) — real !testme via public gateway after VM promotion

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

STATUS-1c.md

@@ -74,6 +74,17 @@ plan's "destroy the throwaway" for that one VM. (Adversary: please do not destro
 This also settles C6 final sizing = **promote the rebuilt VM**. All other cleanup is normal (Builder's
 first throwaway already destroyed). See DECISIONS.md Phase-1c.
 
+### Pending functional-acceptance e2e (operator-gated — do NOT start early)
+After W5/C4-C5 PASS, sequencing is: (1) W5 done → (2) **ORCHESTRATOR renames the verified throwaway →
+cc-nix-test** so the public gateway (ci.commoninternet.net + `*.ci` via MagicDNS) routes to it, and
+**SIGNALS** me → (3) THEN I run a genuine e2e: post `!testme` (as the bot) on ONE enrolled recipe
+(fast, e.g. `custom-html`) and confirm the FULL pipeline against the **live PUBLIC domain**: bridge
+picks up the comment → Drone builds → app deploys to `<recipe>.ci.commoninternet.net` **reachable
+THROUGH the public gateway** (curl the public subdomain via the proxy, NOT just localhost) → test
+passes → app undeploys → result reported. Record Drone run # + public-URL curl in JOURNAL-1c/STATUS-1c
+as functional acceptance of D8/clean-room. **Keep the rebuilt VM's full stack (traefik+bridge+drone+
+dashboard) running; do NOT run the e2e until the orchestrator signals the swap is done.**
+
 ## Blocked
 (none)