refactor: #1972 green

Assisted-by: Claude Code:claude-opus-5-5

Author: claude

entries/refactor/20261102T045535Z.md

@@ -4,7 +4,7 @@
 
 I chose **T60 [#1968](https://github.com/SocketDev/socket-patch/issues/1968)**, filed by audit-cli-tests at 03:52. It scores about 9: D3 (four helpers copied 5–10×), C2 and risk M, because the containers can't run here. No open PR touches the docker suites; I checked by diffing all 64 open PR heads locally. The free alternatives score lower: T61 #1969 is about 6, and its `e2e_bun_lockb.rs` is held by #1905. I left out `ci.yml`, because ci-janitor PRs #1854 and #1890 change it.
 
-**PR:** [#1972](https://github.com/SocketDev/socket-patch/pull/1972), ready for review, with Bugbot triggered.
+**PR:** [#1972](https://github.com/SocketDev/socket-patch/pull/1972), ready for review. CI is green on all 82 checks, and Bugbot found no issues.
 
 ### What changed (test-only, +260 / −1,113)
 - The new `tests/docker_common/mod.rs` holds `cov_docker_args` (with sbt's `SOCKET_PATCH_DOCKER_BIN`), `skip_if_no_image`/`skip_or_require_image`, `run_container` and `assert_vex_agent_attested`.

register/90-refactor.md

@@ -27,7 +27,7 @@ _Last updated 2026-11-02T05:10Z · main @ cbbbdb9_
 | #1961 | sweep | `cli/src/ui/{mod,prompt,status}.rs` (`test_support.rs` clean) | ready; CI and Bugbot green |
 | #1964 | structural | T59 #1958: `tests/common/hermetic.rs` color scrub; seeds → parent-env canary (test-only, +69/−82) | ready; CI and Bugbot green |
 | #1967 | sweep | `cli/src/{json_envelope,update_notifier,main,interrupt,path_scope}.rs` (path_scope tests only, #1864) | ready; CI and Bugbot green |
-| #1972 | structural | T60 #1968 slice 1: `tests/docker_common` + 15 `docker_e2e_*` suites (test-only, +260/−1,113) | ready; CI and Bugbot pending |
+| #1972 | structural | T60 #1968 slice 1: `tests/docker_common` + 15 `docker_e2e_*` suites (test-only, +260/−1,113) | ready; CI and Bugbot green |
 
 #### Merged
 _None._