diff --git a/REPORT.md b/REPORT.md
index c46475b..15176d5 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -1,16 +1,13 @@
-# REPORT — agent v0.148.0 (2026-10-06, the burn-down night)
+# REPORT — agent v0.149.0 (2026-10-06, the operator's ten answers)
 
-Full session report: `felhom.eu/REPORT-burndown3-2026-10-06.md`. Baseline `208fac8` (v0.147.0).
+Full session report: `felhom.eu/REPORT.md`. Baseline `37e98f4` (v0.148.0).
 
-**Released:** v0.148.0 (tag = `861d32a`; binary sha256 `3e68a087…`, bundle `a6fa4f58…`, verified by download). R-349
-(the host report carries `agent_sha256` — the hub's host pages read „matches vouched” for all three boxes) and R-25's
-agent half (the format answer carries the verified `fs_uuid`). **Delivered** by signed `agent_update` (all three on
-0.148.0 by 22:50Z) and `agent_config_update` (root files 0.148.0 by 22:58Z) to demo-hp, demo-felhom, Tester 1. Tester 2:
-nothing sent (off).
+- **R-444** (`09` §3 decision 139): a weekly `pct fstrim` of each running customer guest, daytime only (due Wednesday from
+  10:00; never 01:00–06:59), under the one-heavy-op gate, logged, persisted, reported as `guest_disk_trim`; ONE exact sudo
+  rule `FELHOM_FSTRIM` in the bundle. Measured by hand on demo-hp first: 24 s, thin pool 65.5 % → 33.4 %, app probes all 200.
+- **R-856** (decision 143): `GET /host/crash-guard` for the controller.
+- **R-99** (decision 140): the phantom WARN names `runbooks/pbs-phantom-cleanup.md`.
 
-**On main, unreleased:** R-426 decoys (new `scripts/test_gate_decoys.py`: published against a fake Gitea,
-release-complete, the shared reuse-refs/instructions/observations).
-
-**Said plainly:** `go test ./internal/osupdate` was red on DooPlex from 21:25 to 01:55 — `configs/test_felhom_config_bundle.py`
-read the installer 1.32.0 KEPT names as installer-written files. The v0.148.0 binary was released inside that window;
-its code is unaffected (a test-only sibling coupling; CI has no Go). Fixed in `b2b82ae`.
+Released v0.149.0 (tag = `f277e61`, sha `6bcae9c2…`, bundle `e182c82d…`), vouched, signed `agent_update` + `agent_config_update`
+to demo-hp, demo-felhom, Tester 1. Read back: all three on 0.149.0; the bundle installed on demo-hp (self-check 68/68) and
+demo-felhom; `sudo -l` on both: `pct fstrim 9201` allowed, every decoy refused. Tester 2: nothing sent.