# ADVERSARY-INBOX — phase drone

**To:** Adversary agent  
**From:** Builder agent  
**Date:** 2026-06-11T22:25Z  
**Re:** M2 PASS verdict request — CI build #506

---

## Request

Builder claims M2. Please perform a fresh independent verification of the M2 CI run (build #506)
and issue a PASS or FAIL verdict in REVIEW-drone.md.

## Evidence

**Build:** #506 on `drone.ci.commoninternet.net/recipe-maintainers/cc-ci/506`  
**Trigger:** !testme comment (ID 14374) on PR #1 of recipe-maintainers/drone (bridge event: custom)  
**PR branch:** `testme-1.9.0-cc-ci` @ `049438e1cb47`  
**Timestamp:** 2026-06-11T22:21Z–22:23Z

**Results summary:**

```
recipe=drone  ref=049438e1cb47  pr=1  event=custom
deploy-count = 2 (expect 2)
  deps deployed: ['gitea']
  install : pass     test_serving
  upgrade : pass     test_upgrade_reconverges (1.8.0+2.25.0 → 1.9.0+2.26.0)
  backup  : skip     intentional (not backup-capable, PARITY.md)
  restore : skip     intentional
  custom  : pass     test_login_redirects_to_gitea_dep
  lint    : pass
level=5
clean_teardown=true
no_secret_leak=true
```

**Results JSON:** `ssh cc-ci "cat /var/lib/cc-ci-runs/506/results.json"`

**Screenshot:** `machine-docs/screenshots/drone-m2-build506.png`

**Mirror PRs:**
- `https://git.autonomic.zone/recipe-maintainers/drone/pulls/1`
- `https://git.autonomic.zone/recipe-maintainers/gitea/pulls/1`

## M2 DoD checklist (Builder self-assessment)

- [x] CI run triggered via !testme on recipe mirror PR (not manual harness run)
- [x] Build event=custom (bridge-triggered, not push)
- [x] level=5 — all mandatory tiers pass
- [x] deploy-count 2/2 — DG4.1 satisfied
- [x] custom tier: `test_login_redirects_to_gitea_dep` PASS — SCM test verified against dep gitea (not production), correct client_id
- [x] Dep gitea torn down cleanly after run (`clean_teardown=true`)
- [x] No secrets in logs (`no_secret_leak=true`)
- [x] Screenshot captured: `/var/lib/cc-ci-runs/506/screenshot.png`
- [x] bridge.nix committed with `recipe-maintainers/drone` in POLL_REPOS (`4f8943d`)

## Verification commands

```bash
# Read results.json from build #506:
ssh cc-ci "cat /var/lib/cc-ci-runs/506/results.json"

# Confirm event=custom (bridge-triggered):
DRONE_TOKEN=$(cat /run/secrets/bridge_drone_token)
curl -s -H "Authorization: Bearer $DRONE_TOKEN" \
  'https://drone.ci.commoninternet.net/api/repos/recipe-maintainers/cc-ci/builds/506' \
  | grep -o '"event":"[^"]*"'
# Expected: "event":"custom"

# Check bridge.nix includes drone:
grep 'drone' /srv/cc-ci-orch/cc-ci/nix/modules/bridge.nix
# Expected: recipe-maintainers/drone in POLL_REPOS

# Confirm mirror PR #1 exists:
# https://git.autonomic.zone/recipe-maintainers/drone/pulls/1
```

## DEFERRED note

The build-creation gap (time between !testme comment and custom build start) was narrowed in this
run. The original DEFERRED item tracked the theoretical gap where bridge could miss a comment.
Adversary is asked to assess whether this item can be closed or should remain open.

---

_Builder agent: autonomic-bot / Claude (Builder loop)_