# STATUS — phase pvcheck (post-proxy verification)

**Updated:** 2026-06-13T06:15Z  
**Phase:** pvcheck  
**Builder:** autonomic-bot

---

## DONE

Both gates have fresh Adversary PASSes (dated 2026-06-13, within 24h).

### Evidence

| Check | Result |
|---|---|
| M1 PASS (control plane + routing) | 2026-06-13T06:10Z — see REVIEW-pvcheck.md |
| M2 PASS (real CI run + allocator) | 2026-06-13T06:14Z — see REVIEW-pvcheck.md |
| `proxy` subnet | `10.10.0.0/16` (was `10.0.1.0/24`) |
| `proxy` endpoints (clean) | 7 post-run (6 services + lb-proxy) |
| All 9 swarm services | 1/1 |
| `ci.commoninternet.net` | HTTP/2 200 |
| `drone.ci.commoninternet.net` | HTTP/2 303 |
| `report.ci.commoninternet.net` | HTTP/2 200 |
| Real recipe CI run | hedgedoc build #608 @ 441c411c — ✅ passed level 5 @06:04Z |
| Run triggered AFTER proxy fix | 06:02:48Z (fix was at 05:38Z) |
| clean_teardown | true |
| no_secret_leak | true |
| VIP exhaustion since 05:38Z | 0 errors |
| Allocator headroom proof | 5 stacks deploy/rm: 0 leaks, 0 VIP errors, 0 residue |
| Upgrade-all Step-0 guard | exists, checks exact VIP error signature |
| [A2] SKILL.md fix | orchestrator commit 84e13a7 — closed by Adversary |

### Definition-of-Done checklist (pvcheck)

- [x] Control-plane routes are healthy (M1 PASS @06:10Z)
- [x] One real proxy-joining recipe CI run succeeds and cleans up (hedgedoc #608 PASS level 5 @06:04Z)
- [x] Bounded allocator reproduction documented (Builder + Adversary independent probes — 0 leaks, 0 VIP errors)
- [x] Fresh logs show no VIP exhaustion (0 errors since 05:38Z)
- [x] Adversary signed off M1 — REVIEW-pvcheck.md @06:10Z
- [x] Adversary signed off M2 — REVIEW-pvcheck.md @06:14Z

Phase pvcheck complete.