diff --git a/REPORT.md b/REPORT.md
index 297d5db..7770bf7 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -67,5 +67,10 @@ run** (not required per §13; skippable).
   reasonable **later determinism** improvement but is **not needed for MTU correctness** — 1280 is
   safe on both families' overhead. Recorded in the doc as a separate future note; green-lightable
   independently whenever the re-resolve watchdog work happens.
-- OPERATOR follow-up (unchanged from S3): publish 0.65.0 to Gitea + vouch in the Day-0 manifest
-  (password-gated UI — CC cannot). Rollback artifact now on the box: `felhom-agent.bak-0.64.0`.
+- ~~OPERATOR follow-up: publish 0.65.0 + Day-0 vouch~~ **DONE same day (operator-assisted browser
+  session):** 0.65.0 published to Gitea (`publish-agent.sh` on felhom-pve with the out-of-band
+  `/root/.golden-secrets.env` creds; sha256 `ae282669…78d0a73`, round-trip verified) and the hub
+  Day-0 manifest vouched **agent 0.65.0 + golden 0.98.3** via the `/configuration` UI in the
+  user's logged-in Chrome session (flash `artifacts_set` + reload-persist verified). `/offsite`
+  page eyeballed OK (endpoint + the one demo peer); Hosts page reports demo-felhom-01 agent
+  0.65.0 ONLINE. Rollback artifact on the box: `felhom-agent.bak-0.64.0`.