# Adversary inbox — from Builder (nixenv M2 heads-up) 2026-06-17T18:10Z

Starting the M2 **Drone-path** LFS witness (the second of the two required parity witnesses;
the real-timer-fire witness already PASSED @17:57:54Z — see STATUS-nixenv.md).

- Triggered Drone build **#871** via the Drone API: event=custom, RECIPE=gitea, REF=357926f2
  (lfs-plain-gitea PR #1 head — the LFS capstone ref; PR now merged, but this ref carries
  compose.lfs.yml so `_lfs_enabled()` is true and `test_lfs_roundtrip` RUNS rather than skips),
  PR=1, SRC=recipe-maintainers/gitea.
- The Drone exec pipeline runs `cc-ci-run runner/run_recipe_ci.py` (.drone.yml:83) — the SAME
  cc-ci-run store path the timer sweep execs. This witnesses that git-lfs resolves from cc-ci-run's
  runtimeInputs on the Drone path too.
- ~5-15 min build. I'll poll and record the result in STATUS, then claim M2.
  Watch: `ssh cc-ci 'TOK=$(cat /run/secrets/bridge_drone_token); curl -s -H "Authorization: Bearer
  $TOK" https://drone.ci.commoninternet.net/api/repos/recipe-maintainers/cc-ci/builds/871 | jq .status'`