the drill's own screen, walked in English on the live box

'Wrong or expired code' — the sentence that stopped the 2026-09-20 walk — read
back off guest 9201 through the felhom_lang cookie, with the byte-identical
Hungarian beside it. The first pass could not see it because its own Hungarian
attempts had tripped the lockout; the window was waited out rather than cleared
by a restart, because restarting to make a probe pass measures a box nobody runs.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/audits/i18n-closing-2026-09-21/live/claim-page.md

@@ -43,9 +43,25 @@ The claim/reset page's rate limiter was left locked for **15 minutes** from the
 Tier 0). It clears itself; nothing was configured, no password was changed, no code was consumed.
 The dashboard password is **unchanged** — the probe never submitted a valid code.
 
-## What was NOT walked here
+## C — the drill's own screen, walked after the window reopened
 
-The **wrong-code answer in English** ("Wrong or expired code") — the drill's own screen — was
-pre-empted by the lockout above. It is covered by `TestClaimAnswersFollowTheReadersLanguage`, which
-asserts both that the English sentence is present and that the Hungarian one is gone, and which was
-red-proofed by restoring the literal. See the second live run below once the window reopens.
+The first pass could not see the wrong-code answer in English, because its own Hungarian attempts had
+tripped the lockout. The window was **waited out** rather than cleared by restarting the controller —
+restarting to make a probe pass would have measured a box nobody runs. One wrong code per language,
+**English first** so the Hungarian pass could not pre-lock it:
+
+| cookie | one wrong code | answer |
+|---|---|---|
+| `felhom_lang=en` | `this-is-not-the-code` | **"Wrong or expired code"** |
+| `felhom_lang=hu` | `this-is-not-the-code` | „Hibás vagy lejárt kód" |
+
+**That is the exact screen the 2026-09-20 drill stopped on**, and it is now in the reader's language.
+It is also the sentence `VOLUNTEER-first-hour.en.md` §13 quotes, and `guide_quote_gate.py` now fails
+the push if the guide and the bundle ever disagree about it.
+
+## The box afterwards
+
+The claim/reset rate limiter was exercised and has since cleared. **Nothing was configured, no code
+was consumed, no password was changed** — every attempt used a deliberately wrong code, so none of
+them could reach the password-setting branch. The dashboard password is the one in the operator's
+credentials file, unchanged, and was used to sign in for the backups capture after all of this.