snapshot: B2+B3 CI/CD pipeline fullført

protocols/sessions/2026-05-26_b2-b3-cicd-ferdig.md

@@ -0,0 +1,51 @@
+# OSVauco OPAX Snapshot — 2026-05-26 — B2 + B3 Fullført
+
+**Tidspunkt:** 2026-05-26 03:05 CEST  
+**Agent:** OPAX (Perplexity + Gemini CLI TUI)
+
+---
+
+## ✅ B2 — GitHub PAT → Secret Manager
+- Secret `github-pat` verifisert i Secret Manager
+- Prosjekt: `propane-will-491900-m5`
+- Opprettet: 2026-05-26T00:15:46Z
+
+## ✅ B3 — CI/CD Pipeline (Cloud Build 2nd gen)
+
+### GitHub Connection
+- Navn: `osvauco-github-conn`
+- Region: `us-central1`
+- Status: `COMPLETE` (installationState)
+- OAuth-bruker: `chrischristiansen-glitch`
+- IAM-fix: Cloud Build P4SA fikk `roles/secretmanager.admin` for å opprette connection-secret
+
+### Repository
+- Navn: `osvauco-repo`
+- Remote URI: `https://github.com/chrischristiansen-glitch/OSVauco.git`
+- Merk: `.git`-suffix påkrevd (uten ga det INVALID_ARGUMENT)
+
+### Trigger
+- Navn: `osvauco-agent-deploy`
+- ID: `2fdd789f-a4dc-4f4a-8297-5e91674d2178`
+- Branch: `^main$`
+- Build-config: `cloudbuild.yaml`
+- Service account: `357036551735-compute@developer.gserviceaccount.com`
+- Resource path: `projects/propane-will-491900-m5/locations/us-central1/triggers/2fdd789f-a4dc-4f4a-8297-5e91674d2178`
+
+### B4-notat
+Cloud Build 2nd gen bruker Google Cloud GitHub App — ingen manuell webhook-URL nødvendig i GitHub.
+B4 er i praksis løst som del av B3.
+
+---
+
+## Gjenstående
+| Task | Status |
+|------|--------|
+| B5 Cost guard + GCS ML-telemetri sink | 🔲 Ikke startet |
+| B1-IAP opax.vauco.no | 🔲 Ikke startet |
+
+## ⚠️ Teardown
+`osvauco-agent-00058-x6v` kjører fortsatt. Husk:
+```bash
+bash infrastructure/03-teardown.sh
+```