CHANGELOG + REPORT: same-tag re-tests (decision 52), wger's key, wanderer on the bench

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

REPORT.md

@@ -1,13 +1,9 @@
-# REPORT — 2026-09-30 (evening): twelve more steps, six first ladders
+# REPORT — 2026-09-30 (late): same-tag security fixes become tested steps (decision 52)
 
-Evidence: `felhom.eu/documentation/audits/more-night-apps-2026-09-30/`. Operator report: `felhom.eu/REPORT-more-night-apps-2026-09-30.md`.
+Evidence: `felhom.eu/documentation/audits/night-rulings-2026-09-30/`. Operator report: `felhom.eu/REPORT-night-rulings-2026-09-30.md`.
 
-- **First ladders:** calibre-web `53a4a1d` (`files_may_change`: its library DB), gitea `d7ba60c`, wger `4ad32aa`,
-  crafty-controller `e1f0179`, uptime-kuma `35dd5cf`, zipline `a9700e2` + `fb87030` (4.6.1 → 4.7.0 → 4.8.0; the direct
-  jump fails and the box undid it). **Within-major:** emby `3e4aa77`, ghost `9a78e3b`, home-assistant `15f4d59`, outline
-  `b0b2514`, rallly `8d3a35a`. Each: bench 9401 (swap 0, 10-min watch, 0 kills) + box 9202 through the guarded Update.
-- **Fixes:** wger runs its migrations at start `7a4ff48` (R-738 — its update left the login 500 behind a `done`);
-  immich's step `0b82…` re-proven at 768M and rewritten by the new `--restep` `48440ce`/`63a96b0` (R-732).
-- **Harness** `5b1972b`, `63a96b0`, `84de9a9`: five fixtures, gitea's installer, HTTPS backends, named files behind
-  `files_may_change`, the bench's `password:N:special` (R-735), zipline's readback, the stale gate-count test.
-- **Night-updatable:** 30 + 2 conditional → **35 + 3 conditional**; 15 apps have no ladder. Not done: wanderer (R-739).
+- `6a3ead9`: the re-test entry, its gates and decoys, `upgrade-test.py --retest`, `scripts/retest-floating.py` (the monthly
+  command), `retest_box.py`, `box_walk.py`, `BENCH_ENV_OVERRIDES`. Proven end to end on 9202. Run today: nothing on the
+  engine lines; two exact tags rebuilt upstream (R-743).
+- `45d8482`: wger's JWT key pair (R-737).
+- Runbook: `felhom.eu/documentation/runbooks/monthly-floating-retest.md`.