diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2a197f80..b95c9898 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,4 +1,4 @@
-## v0.352.1 (2026-11-14) — Go 1.27.4: the security fix GO-2026-6859 (felhom.eu R-1391) — release 1 of four („dates”)
+## v0.352.1 (2026-11-14) — Go 1.27.4: the security fix GO-2026-6859 (felhom.eu R-1391) — RELEASED (image `sha256:1a6e8945…`, from `8747744b`, CI run id 2637; rc.1 on scratch guest 9202); per-box floors 09:18 UTC, global floor 2026-11-14 09:21 UTC (MinAgent 0.158.1); golden 0.352.1 baked and vouched the same day
 
 ### 2026-11-14
 
@@ -23,6 +23,13 @@ pattern. The release is hygiene, not an urgent fix.
 
 **Tests.** `go build`, `go vet`, `go test ./...` green on Go 1.27.4; `controller_gates.py --fast` green.
 
+**Released.** rc.1 on scratch guest 9202 (healthy, 0 ERROR lines). Tester 1, demo-hp and demo-felhom took 0.352.1 by
+per-box floors within a minute; on each: every container healthy, 0 ERROR lines, the running binary reads `go1.27.4`,
+`https_only_check.py` exit 0, and every public name still answers `strict-transport-security: max-age=86400` and
+nothing more (26 names). Global floor in its own save; 35 minutes later: all three on the release, no new event but
+`controller_updated`/`controller_started`. Per-box floors cleared. Evidence: felhom.eu
+`documentation/audits/release-1-dates-2026-11-14/controller/`.
+
 ## v0.352.0 (2026-11-10) — R-1371: one fill warning per filesystem — RELEASED (image `sha256:3c785dd3…`, from `3dbb68c1`, CI 2615; rc.1 on scratch guest 9202); per-box floors 15:16 UTC, global floor 2026-11-10 15:31 UTC (MinAgent 0.158.1)
 
 ### 2026-11-10