v0.324.0 released to the three test boxes: CHANGELOG live results, CONTEXT, REPORT

CHANGELOG.md

@@ -31,6 +31,14 @@ night brief 2026-10-16 → 17 (felhom.eu `REPORT-night-2026-10-17.md`).
   2026-02-25). **R-976** — a password change or reset ends every dashboard, family and setup-gate session (the gate key
   is rotated and saved); a family app cookie carries a per-app token, never the session. Tests `TestR983_*`,
   `TestR976_*`, each red-proved. 135 i18n parity fixtures re-captured (the sign-out control; one minlength), 22 unchanged.
+- **Live on demo-hp 9201 (rc.1, the dashboard's own posts):** Rallly (Postgres) and Grimmory (MariaDB) removed,
+  reinstalled and restored — off-site path: marker row (+ books file) back, healthy, the app's and the dump user's DB
+  logins work (last night: crash loop and hold); on-box path (Rallly) the same; a unit without its password over a newer
+  install refused with the app untouched; „use my kept data" (Grimmory) the same. restic: copies made by 0.14.0, 0.18.1
+  and 0.19.1 on demo-hp's real store each restored byte-identical by all three; after a 0.19.1 prune (scratch store)
+  0.14.0 still lists, checks and restores. Scanner: critical 3 (2) → 1 (0), high 122 (52) → 93 (23). Headless Chrome on
+  the public address: sign in, `X-Frame-Options: DENY`, POST sign-out, family gate (Grimmory), setup gate (Rallly).
+  Released by per-box floors to Tester 1, demo-hp, demo-felhom (21:52 UTC), box walk green.
 
 ## v0.323.0 — Debian 13 with restic pinned outside the OS, re-proven; felhom-samba 1.2.0 on Alpine 3.24.2 (2026-10-16)