diff --git a/CHANGELOG.md b/CHANGELOG.md
index 085f1a0..33ab9cb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 ## v0.341.0 (2026-10-23) — the night update takes a security-fix step (D39 = B, `09` §3 decision 255, R-1239)
 
+**Released 2026-10-23: global floor 11:24:47 UTC (the operator's yes in chat), MinAgent 0.158.1; image `sha256:8aa4ce60…c0bc`
+from `63dcccf`.** Proven first as rc.1 on 9202 (the night leg took a security-fix step) and through per-box floors on
+Tester 1, demo-hp and demo-felhom (box walk green on all three; felhom.eu `audits/security-lane-2026-10-23/P4-release/`).
+
 **MinAgent: 0.158.1** (unchanged). No hub dependency (the hub report's `update_leg.steps[].security` is a new optional
 field; the hub stores the report as it comes). Task: the D39 = B day brief (attended).
 
diff --git a/REPORT.md b/REPORT.md
index f554f25..a0ea88b 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -10,4 +10,8 @@ unrecorded taken (unknown-verdict red), every step logged as a security fix (pro
 verdict line, so the old line cannot turn them red; that is why their red-proof is a different mutation.
 `go build`, `go vet`, `go test ./...` green; `controller_gates.py --fast` OK.
 
-**Live:** see the felhom.eu evidence `documentation/audits/security-lane-2026-10-23/` (P2 old controller, P3 the rc).
+**Live** (felhom.eu `documentation/audits/security-lane-2026-10-23/`): on 0.340.0 the night leg skipped the drill's
+security step (`not_proven`) and a hand press took it; on 0.341.0-rc.1 the night leg logged `plex: security fix
+CVE-2026-96652,… taken` and ended `done` (second-drive copy and undo copy first). **Released:** image 0.341.0 from
+`63dcccf` (CI 2264 / #471 success); per-box floors on the three test boxes, all on 0.341.0 by 11:15:31 UTC, box walk green;
+global floor 0.341.0 / MinAgent 0.158.1 at 11:24:47 UTC on the operator's yes; per-box floors cleared.