Tester 2's RESET checked read only: every leg ok, the first live R-32 purge (folder held no repository; sub-account gone), ep0 namespace+copy+prune job+token gone, no other customer touched (Storage Box 303/62/43 and ep0 2/2/2/1/27 before = after); hand-over: tell the friend go; A20 third firing; R-32 result + dated check for Tester4

documentation/pilot/TESTER2-handover.md

@@ -5,7 +5,7 @@ puts the new drive in, with the drive in before the install. The old box's data
 laptop, no useful data on it"). So nothing is upgraded and nothing is restored. (The earlier upgrade list is in git:
 `git log -- documentation/pilot/TESTER2-handover.md`.)
 
-## What the hub holds for Tester 2 today (read only, 2026-10-22)
+## What the hub held for Tester 2 before the RESET (read only, 2026-10-22 morning)
 
 - Host `Tester-2-be8404`, agent 0.142.0, last report **2026-10-04 18:05 UTC** (offline since). A 16 GB machine, guest
   9201 with 12 GB.
@@ -52,13 +52,24 @@ there is none). From the code (`hub/internal/web/customer_reset.go`, `store/cust
   list; every event (the audit trail);
 - at the end it mails the friend a new link itself.
 
-**Recommendation: host delete, then RESET.** „Fresh start, nothing to keep" is exactly what RESET is for: the new box
+**Recommendation (taken 2026-10-22): host delete, then RESET.** „Fresh start, nothing to keep" is exactly what RESET is for: the new box
 starts with an empty Storage Box path and an empty ep0 namespace, instead of carrying a set-aside history nobody can
 open and a stale whole-box copy. **RESET deletes data on ep0 and on the Storage Box — that is the operator's press,
 never CC's** (both are Tier 2). It is proven live twice (A20, 2026-07-18), each leg idempotent: a failed leg is
 re-run from the top, and nothing on the hub is purged until both external legs are ok.
 
-## 1. The operator, before the friend starts
+## 1. The operator, before the friend starts — **DONE 2026-10-22** (checked by CC, read only)
+
+**Status: steps 1–4 done on 2026-10-22; next: step 5 — give the passphrase and tell the friend „go".**
+- Step 1: the mail language is now **Magyar** (`hu`).
+- Step 2: host `Tester-2-be8404` deleted 12:54:47 UTC.
+- Step 3: RESET 12:55:56–12:56:04 UTC, every leg `ok`. The off-site folder held no repository (nothing to delete) and
+  its sub-account is gone; ep0's `Tester-2` namespace, its 2026-10-04 copy, its prune job and its token are gone; no
+  other customer's data changed (Storage Box and ep0 counts before = after). The friend got the newest link mail at
+  12:56:05 UTC (the one sent at 12:54:48 no longer works).
+- Step 4, seen from outside: `felhom.sajatfelhom.hu` and `files.sajatfelhom.hu` answer Cloudflare 530 — the route to his
+  tunnel exists and waits for a box. Evidence `audits/tester2-reset-2026-10-22/`.
+
 
 | # | What | Where | Done when |
 |---|---|---|---|