diff --git a/CHANGELOG.md b/CHANGELOG.md
index 98fc574..61c9f89 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,4 +1,4 @@
-## claper → PostgreSQL 17; calcom not moved (2026-09-28, `09` §3 decision 43)
+## claper → PostgreSQL 17, calcom → 1536M and PostgreSQL 18 (2026-09-28, `09` §3 decision 43)
 
 - **claper: PostgreSQL 16 → 17** (`4a249b9`, alone in its commit, written by `upgrade-test.py --write-ladder`). Its upstream
   compose runs 15; 17 is the newest major with no mount change (decision 42's reasoning; decision 43). Bench (LXC 9401 on
@@ -8,9 +8,13 @@
   47 s, seed read back. Engine gate: ALLOWED.
 - **New fixture:** claper's own release CLI (`bin/claper rpc` → `Claper.Accounts.register_user`, readback by
   authenticating, a wrong password must refuse) — `scripts/upgrade_fixtures_box.py` (`c5015ce`).
-- **calcom: NOT moved — inconclusive.** Its FROM version (`calcom/cal.com:v6.2.0`) does not start at the catalog's 768 MB
-  limit: OOM-killed at every start on 9202, stopped by the box after 6 crashes (R-703). Seed route found (`POST
-  /api/auth/setup`), not exercised.
+- **calcom: memory 768M → 1536M** (`9555e73`, R-703). v6.2.0 was OOM-killed at every start at 768M (a fresh install
+  crash-looped and the box stopped it). At 1536M, sampled from the container's birth: `anon` peak 817 MiB (53 %), 0 kills.
+- **calcom: PostgreSQL 16 → 18** (`037f956`, alone in its commit, mount → `/var/lib/postgresql`). Its upstream compose runs
+  untagged `postgres` at the 18 layout (decision 42's rule), Prisma 6.16.1. Bench: converted in 35.0 s, check equal over
+  122 tables, seed read back, `anon` peak 61.5 % over 10 592 requests, 0 kills. Box (9202, guarded Update): converted,
+  done in 68 s, PG_VERSION 18, seed read back. Engine gate: ALLOWED.
+- **New fixture:** calcom's own first-run API (`POST /api/auth/setup`) + the user's public page as readback (`b35fc7f`).
 - **Found: claper creates a default admin `admin@claper.co` / `claper` on every install** (R-702, P1) — not changed here.
 
 Evidence: `felhom.eu/documentation/audits/pg-calcom-claper-2026-09-28/`.
diff --git a/REPORT.md b/REPORT.md
index 344905a..f7f8fd8 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -1,4 +1,4 @@
-# REPORT — 2026-09-28: claper → PostgreSQL 17; calcom inconclusive
+# REPORT — 2026-09-28: claper → PostgreSQL 17; calcom → 1536M and PostgreSQL 18
 
 Brief: "golden, Day-0 vouch, kept data from off-site…" Part C. Architecture read: `09-update-architecture.md` §3
 decisions 35–42 (42's reasoning applied as decision 43).
@@ -6,11 +6,12 @@ decisions 35–42 (42's reasoning applied as decision 43).
 | app | move | bench (LXC 9401, demo-hp) | box 9202 (guarded Update) | result |
 |---|---|---|---|---|
 | claper | postgres 16 → 17 | proven — converted 30.8 s, 32 tables equal, seed back, peaks 75.8 % / 78.3 %, 0 kills | proven — CONVERTED in 7.2 s, done 47 s, PG_VERSION 17, seed back | live catalog `4a249b9`, engine gate ALLOWED |
-| calcom | — | not run | FROM v6.2.0 OOM-killed at 768 MB on a fresh install (R-703) | inconclusive |
+| calcom | memory 768M → 1536M (`9555e73`) | — | 768M OOM-killed every start; 1536M anon peak 817 MiB (53 %) | fixed, R-703 closed |
+| calcom | postgres 16 → 18 | proven — converted 35.0 s, 122 tables equal, seed back, anon 61.5 %, 0 kills | proven — converted, done 68 s, PG_VERSION 18, seed back | live catalog `037f956`, engine gate ALLOWED |
 
 - Fixture: claper `rpc register_user` + authenticate readback (negative control: wrong password refuses) — `c5015ce`.
-- calcom seed route exists (`POST /api/auth/setup`, first user only) but the app never ran long enough to use it.
-- New rows: R-702 (claper default admin `admin@claper.co`/`claper`, P1), R-703 (calcom OOM at 768 MB, P2).
-- Bench LXC 9401 destroyed (hostname checked), template removed; `local-lvm` 55.59 % at teardown.
+- calcom fixture: `POST /api/auth/setup` + public page readback (negative control: unknown name 404) — `b35fc7f`.
+- New rows: R-702 (claper default admin `admin@claper.co`/`claper`, P1, open), R-703 (calcom OOM at 768 MB — closed by `9555e73`), R-704 (a crash-loop hold survives remove + reinstall).
+- Bench LXC 9401 created twice and destroyed twice (hostname checked), template removed; `local-lvm` 55.6 % at teardown.
 
 Evidence: `felhom.eu/documentation/audits/pg-calcom-claper-2026-09-28/`.