diff --git a/documentation/audits/security-2026-11-02/walks/actualbudget/box-verdict-actualbudget.json b/documentation/audits/security-2026-11-02/walks/actualbudget/box-verdict-actualbudget.json
index 523bae89..64e0b1c5 100644
--- a/documentation/audits/security-2026-11-02/walks/actualbudget/box-verdict-actualbudget.json
+++ b/documentation/audits/security-2026-11-02/walks/actualbudget/box-verdict-actualbudget.json
@@ -207,7 +207,7 @@
     "23:41:24   [1] deployed, controller state=running, pinned={'actualbudget': 'actualbudget/actual-server:26.9.0'}",
     "23:41:24     gate: budget is gated — passed as the household (cookie set)",
     "23:41:28   [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
-    "23:41:28     actualbudget: /account/bootstrap http=200 :: {\"status\":\"ok\",\"data\":{\"token\":\"04b22639-d5f9-48bc-a93b-c61688fcefca\"}}",
+    "23:41:28     actualbudget: /account/bootstrap http=200 :: {\"status\":\"ok\",\"data\":{\"token\":\"***REDACTED***\"}}",
     "23:41:28     actualbudget: login with the seeded password http=200 ok=True",
     "23:41:30   [5] drill commit b6efe8acd65a: actualbudget actualbudget/actual-server:26.9.0 -> actualbudget/actual-server:26.11.0 (push rc=0)",
     "23:41:39   [5] the box's drill mirror now at b6efe8acd",
diff --git a/documentation/audits/security-2026-11-02/walks/actualbudget/walk.txt b/documentation/audits/security-2026-11-02/walks/actualbudget/walk.txt
index f1faf11b..282a78b5 100644
--- a/documentation/audits/security-2026-11-02/walks/actualbudget/walk.txt
+++ b/documentation/audits/security-2026-11-02/walks/actualbudget/walk.txt
@@ -3,7 +3,7 @@
 23:41:24   [1] deployed, controller state=running, pinned={'actualbudget': 'actualbudget/actual-server:26.9.0'}
 23:41:24     gate: budget is gated — passed as the household (cookie set)
 23:41:28   [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}
-23:41:28     actualbudget: /account/bootstrap http=200 :: {"status":"ok","data":{"token":"04b22639-d5f9-48bc-a93b-c61688fcefca"}}
+23:41:28     actualbudget: /account/bootstrap http=200 :: {"status":"ok","data":{"token":"***REDACTED***"}}
 23:41:28     actualbudget: login with the seeded password http=200 ok=True
 23:41:30   [5] drill commit b6efe8acd65a: actualbudget actualbudget/actual-server:26.9.0 -> actualbudget/actual-server:26.11.0 (push rc=0)
 23:41:39   [5] the box's drill mirror now at b6efe8acd