diff --git a/BUGHUNT.md b/BUGHUNT.md
index a07d30a..7b7098e 100644
--- a/BUGHUNT.md
+++ b/BUGHUNT.md
@@ -1,5 +1,19 @@
 # Bug Hunt Report — Comprehensive Controller Audit
 
+> **RECONCILED 2026-06-13 (controller now v0.59.0).** This report is from v0.30.3 and predates the
+> Proxmox re-platform / slice-8C de-privileging — much of the audited code has since been rewritten,
+> moved to `felhom-agent`, or deleted. A full reconciliation against current code lives at
+> **`felhom.eu/documentation/audits/bughunt-reconcile-2026-06-13.md`** (authoritative). Summary:
+> - **H1–H4, H12** (concurrency Highs): already FIXED (confirmed in the deep-sweep audit).
+> - **H10** (plaintext secret on encrypt failure): the old `// H10 fix` only logged a WARN and still
+>   persisted plaintext — now **FIXED fail-closed** in v0.59.0 (`5a80739`).
+> - **C2, H5, H6, H7, H8**: verified FIXED. **C3** (SSD-only DB DR loss): **MOOT-by-architecture**
+>   (DR is now whole-LXC PBS). **C1, H9, H11** + several file-gone Lows: **MOOT** (gone, not migrated-with-bug).
+> - Remaining Mediums/Lows: mostly CODE-GONE; a small `[backlog]` set (M4/M5/M6, M18/M19, M25) survived
+>   but is **not yet deep-verified** — see the reconciliation for the list.
+>
+> The original v0.30.3 content is preserved unchanged below for history.
+
 **Date:** 2026-02-25
 **Scope:** Full controller codebase (`controller/` — all ~80 Go files, all packages)
 **Method:** Systematic code review of every file + live testing on demo node (192.168.0.162)