# STATUS — Phase gtea (gitea full-test enrollment)

**Last updated:** 2026-06-15

## DONE

Gate M2: **ADVERSARY PASS** @2026-06-15T22:10Z (commit 90522ee)

All phase-gtea Definition-of-Done conditions verified by Adversary:

1. ✓ Full 5-tier suite green on gitea main in real CI
   - Build #684, level=5, RECIPE=gitea REF=main PR=0
   - install/upgrade/backup/restore/custom: all PASS
   - LFS correctly SKIP on main (compose.lfs.yml absent)

2. ✓ LFS roundtrip green in real CI on PR #1
   - Build #695, level=5, RECIPE=gitea REF=357926f26e69 PR=1
   - All 5 tiers PASS; `test_lfs_roundtrip` PASS (18s)
   - UPGRADE_SECRET_PREP hook pre-created correct 43-char lfs_jwt_secret

3. ✓ Drone dep path unaffected
   - Build #692, level=5, RECIPE=drone REF=main
   - Dep path fully green after all gtea harness changes

4. ✓ cc-ci self-test lint green (ruff format+check pass on all gtea files)

5. ✓ Unit tests: 53/53 PASS throughout (test_gitea_dep.py 10/10, test_meta.py 43/43)

6. ✓ No secrets in any run artifact (no_secret_leak=true in all builds)

## Gate history

- Gate M1: **ADVERSARY PASS** @2026-06-15T20:32Z (commit a106036)
- Gate M2: **ADVERSARY PASS** @2026-06-15T22:10Z (commit 90522ee)

## Key commits

- bac3662: claim(gtea): M1 suite green locally, all 5 stages PASS
- a121d2c: fix(gtea): M2 blockers (UPGRADE_EXTRA_ENV, HC1 SHA fix, stale creds)
- d832b35: fix(gtea): UPGRADE_SECRET_PREP hook for correct lfs_jwt_secret
- ad53b5a: fix(gtea): STACK_NAME derived from domain (dots→underscores)
- 2d865f0: fix(gtea): ruff format+check all gtea files