From ae2bfb2f7a6f3b87eae503e36413b19bea6b82c5 Mon Sep 17 00:00:00 2001
From: kisfenyo <nagyfenyvesi.viktor@gmail.com>
Date: Mon, 19 Oct 2026 21:48:13 +0200
Subject: [PATCH] REPORT: the security-scan gate (R-986)

---
 REPORT.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/REPORT.md b/REPORT.md
index 88df7a8..2ed21cd 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -27,3 +27,9 @@ The race (free at the read, busy at the start) keeps the old behaviour: one shor
 - **Global floor 0.335.0 / MinAgent 0.158.1 at 18:39:26 UTC**, read back from hub.db + WAL; per-box floors cleared.
 - Evidence: `felhom.eu/documentation/audits/night-2026-10-19/P9/`.
 - i18n: no page changed, no fixture changed.
+
+## Also tonight (tooling, no release): the security-scan gate (R-986)
+
+`controller_gates.py` registers the shared `felhom.eu/scripts/security_scan_gate.py` (fast set: hook and CI),
+warn-first; `.security-accepted` holds the first scan's 4 accepted hits (test constants, decoy values); decoys in
+`controller/scripts/test_gate_decoys.py` (55 cases OK). Commit `a03c25a`, CI 2109 success.