diff --git a/documentation/audits/evidence-chaos-night-2026-09-17/round-1.txt b/documentation/audits/evidence-chaos-night-2026-09-17/round-1.txt
index 2b7c1089..844d99f6 100644
--- a/documentation/audits/evidence-chaos-night-2026-09-17/round-1.txt
+++ b/documentation/audits/evidence-chaos-night-2026-09-17/round-1.txt
@@ -86,3 +86,6 @@ was written. That is the documented rebuild behaviour, surfaced honestly with th
    2026-09-16T21:23:56Z {"last_duration":"1m45s","last_error":"","last_run":"2026-09-16T21:09:00Z","orphaned":true,"progress":{"active":false,"current_app":"","percent":0,"bytes_done":0,"total_bytes":0,"done_human":"","total_human":"","files_done":0,"total_files":
    2026-09-16T21:24:16Z {"last_duration":"1m45s","last_error":"","last_run":"2026-09-16T21:09:00Z","orphaned":true,"progress":{"active":false,"current_app":"","percent":0,"bytes_done":0,"total_bytes":0,"done_human":"","total_human":"","files_done":0,"total_files":
    2026-09-16T21:24:36Z {"last_duration":"1m45s","last_error":"","last_run":"2026-09-16T21:09:00Z","orphaned":true,"progress":{"active":false,"current_app":"","percent":0,"bytes_done":0,"total_bytes":0,"done_human":"","total_human":"","files_done":0,"total_files":
+   2026-09-16T21:24:56Z {"last_duration":"1m45s","last_error":"","last_run":"2026-09-16T21:09:00Z","orphaned":true,"progress":{"active":false,"current_app":"","percent":0,"bytes_done":0,"total_bytes":0,"done_human":"","total_human":"","files_done":0,"total_files":
+Read from remote host 192.168.0.115: Connection reset by peer
+client_loop: send disconnect: Broken pipe
diff --git a/documentation/audits/evidence-chaos-night-2026-09-17/round-10-accident.txt b/documentation/audits/evidence-chaos-night-2026-09-17/round-10-accident.txt
new file mode 100644
index 00000000..b83c9998
--- /dev/null
+++ b/documentation/audits/evidence-chaos-night-2026-09-17/round-10-accident.txt
@@ -0,0 +1,4 @@
+2026-09-16T23:26:12Z ACCIDENT=hard-reset round=10
+2026-09-16T23:26:12Z qm reset 336 (the reset button, mid-write)
+2026-09-16T23:26:14Z reset issued
+2026-09-16T23:26:14Z accident hard-reset complete
diff --git a/documentation/audits/evidence-chaos-night-2026-09-17/round-11-accident.txt b/documentation/audits/evidence-chaos-night-2026-09-17/round-11-accident.txt
new file mode 100644
index 00000000..c5feea51
--- /dev/null
+++ b/documentation/audits/evidence-chaos-night-2026-09-17/round-11-accident.txt
@@ -0,0 +1,6 @@
+2026-09-16T23:50:52Z ACCIDENT=drive-pulled-20min round=11
+2026-09-16T23:50:54Z data disk is nvme-scratch:336/vm-336-disk-0.raw — detaching it from the RUNNING box (the cable is pulled)
+2026-09-16T23:50:56Z detached; the disk file stays as unused0
+2026-09-16T23:50:56Z leaving it out for 20 minutes
+2026-09-17T00:10:58Z re-attached: nvme-scratch:336/vm-336-disk-0.raw
+2026-09-17T00:10:58Z accident drive-pulled-20min complete
diff --git a/documentation/audits/evidence-chaos-night-2026-09-17/round-8-accident.txt b/documentation/audits/evidence-chaos-night-2026-09-17/round-8-accident.txt
new file mode 100644
index 00000000..fb142eb1
--- /dev/null
+++ b/documentation/audits/evidence-chaos-night-2026-09-17/round-8-accident.txt
@@ -0,0 +1,6 @@
+2026-09-16T22:37:54Z ACCIDENT=internet-gone-10min round=8
+2026-09-16T22:37:55Z blocking the box's traffic off-LAN at the HOST, on tap336i0; the LAN stays up
+2026-09-16T22:37:55Z blocked (LAN allowed, everything else dropped) — 10 minutes
+2026-09-16T22:47:55Z unblocked; host sysctl restored to 0 and both rules removed
+-P FORWARD ACCEPT
+2026-09-16T22:47:55Z accident internet-gone-10min complete
diff --git a/documentation/audits/evidence-chaos-night-2026-09-17/round-9-accident.txt b/documentation/audits/evidence-chaos-night-2026-09-17/round-9-accident.txt
new file mode 100644
index 00000000..1d62050d
--- /dev/null
+++ b/documentation/audits/evidence-chaos-night-2026-09-17/round-9-accident.txt
@@ -0,0 +1,6 @@
+2026-09-16T23:00:53Z ACCIDENT=internet-gone-10min round=9
+2026-09-16T23:00:54Z blocking the box traffic off-LAN at the HOST, on tap336i0; the LAN stays up EXCEPT the hub (192.168.0.192)
+2026-09-16T23:00:54Z blocked (LAN allowed EXCEPT the hub at 192.168.0.192, everything else dropped) - 10 minutes
+2026-09-16T23:10:54Z unblocked; host sysctl restored to 0 and both rules removed
+-P FORWARD ACCEPT
+2026-09-16T23:10:55Z accident internet-gone-10min complete