# REPORT — two template fixes from the first nightly rotation (2026-09-13)

*Overwritten each session.*

- **adventurelog — `DEBUG=False`** (`ed2c018`, R-482). The image defaults Django to DEBUG=True and served
  debug pages on the public origin. Proven live after the sync: the same CSRF failure renders the
  300-byte production page.
- **glance — a seeded `glance.yml` on first boot** (`50ad286`, R-473). Fresh installs crash-looped without
  a config. Proven live: a throwaway install healthy in 21 s, 0 restarts, front door 200.

- **catalog-since gate** (R-452): `scripts/check-catalog-since.py` — an `image:` move must bump that app's `catalog_since`; five decoys; red-proofed.

No version moved. Gates green on every push (`catalog_gates.py --fast`, now five gates).

## Observations

1. **`wger`, `tandoor`, `paperless-ngx` are Django too and their DEBUG default is unmeasured.** NOT-A-FINDING: recorded in R-482's closure; each is measured on its own rotation night, not guessed.
2. **adventurelog's photo upload fails from any non-browser client.** FILED: R-483