Website + evidence: the Usenet pair (R-988 closed), and the drill route filed as R-989

The catalog published SABnzbd and NZBGet today (app-catalog 8ee687e). Here:

- two cards in the media category on both language sets, each with the project's own logo and
  each saying IN BOLD that a paid Usenet subscription is the household's own
- the published count 60 -> 62 everywhere it is stated; the category badges are derived from
  the cards now (media read 15 with 17 cards, otthon/home read 14 with 16 — both stale)
- documentation/audits/usenet-2026-10-12/: both bench runs, both box steps and verdicts, the
  nine defects with their measurements, what a missing provider left unmeasured, the teardown
- R-988 closed (moved to CLOSED-ITEMS in this commit); R-989 filed: the drill-catalog route of
  09 §6.5 cannot be followed — that repo is private and no box has catalog credentials, so the
  templates were staged in the box's own catalog cache instead
- walk.app_env: a SECRET field in app.yaml is stored ENC:, so that helper returns ciphertext —
  the docstring says so now, measured the hard way
- STATUS.md and REPORT-usenet-2026-10-12.md

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0117kRTSgs3rJWUFGxyoWN6Y

STATUS.md

@@ -2,7 +2,35 @@
 
 **Ready for the first real tester (Tester-2): yes. Tester 2 (a laptop) is off; nothing was sent to it.**
 
-**Updated 2026-10-12 (evening): demo-hp, demo-felhom and Tester 1 run agent 0.154.0 and controller 0.309.0. The open-items list is at 120 (2026-10-12 night; the newest rows are the forum reading, R-990, and the missing hardware page, R-991). Reports: `REPORT-newapps-2026-10-12.md`, `REPORT-disk-evening-2026-10-12.md`, `REPORT-answers-2026-10-12.md`, `REPORT-m3-2026-10-11.md`, `REPORT-redesign-2026-10-10.md`, `REPORT-testers-2026-10-10.md`, `REPORT-register-shrink-2026-10-10.md`, `REPORT-new-apps-2026-10-10.md`, `REPORT-release-2026-10-10.md`, `REPORT-break-the-circle-2026-10-09.md`, `REPORT-dooplex-survival-2026-10-09.md`, `REPORT-day4-2026-10-09.md`.**
+**Updated 2026-10-12 (evening): demo-hp, demo-felhom and Tester 1 run agent 0.154.0 and controller 0.309.0. The open-items list is at 120 (2026-10-12 late night; the Usenet pair shipped and closed, the forum and survey readings were filed, and the drill-catalog row is R-992). Reports: `REPORT-usenet-2026-10-12.md`, `REPORT-newapps-2026-10-12.md`, `REPORT-disk-evening-2026-10-12.md`, `REPORT-answers-2026-10-12.md`, `REPORT-m3-2026-10-11.md`, `REPORT-redesign-2026-10-10.md`, `REPORT-testers-2026-10-10.md`, `REPORT-register-shrink-2026-10-10.md`, `REPORT-new-apps-2026-10-10.md`, `REPORT-release-2026-10-10.md`, `REPORT-break-the-circle-2026-10-09.md`, `REPORT-dooplex-survival-2026-10-09.md`, `REPORT-day4-2026-10-09.md`.**
+
+## Monday 2026-10-12 (late night): the two Usenet downloaders are live
+
+- **SABnzbd and NZBGet are in the catalog**, on `usenet.<domain>` and `nzbget.<domain>` — the pair you
+  asked for after the torrent clients. The app list now says 62 apps.
+- **Both app pages say, in bold, that a paid Usenet subscription is yours to bring.** Usenet is not
+  like torrents: the files live on a company's servers and access is a subscription. Without one the
+  app starts and you can sign in, but nothing downloads. I had no subscription, so the one thing I
+  could not test is a real download — that is written into both records rather than glossed over. If
+  you ever want it covered, a provider's free trial for a few days is enough and I can add that one
+  measurement.
+- **What I could test, I did, twice each** — on the test box and on the scratch box through the product
+  itself, installed and updated the way a household would, with each app's own queue accepting a job
+  and still holding it after the update.
+- **Nine things were wrong and all nine were fixed before publication.** The two worth knowing: one of
+  them was **open to anyone with the address** — its "ask external visitors to log in" setting ignores
+  anyone arriving from a home-style address, which is exactly how our tunnel arrives — and the other
+  kept its download queue in the folder our backup rules call expendable, so a restore would have
+  brought back the finished films and lost what was still downloading.
+- **Everything is back as it was found:** both apps removed from the scratch box through the product,
+  its catalog pointer and sync timing restored (proven by comparing the files themselves), the test
+  box emptied and stopped, the drill copy of the catalog reset.
+
+**Waiting on you:** one small decision, whenever you like. The scratch box can no longer read the
+drill copy of the catalog (that repository is private and the box has no login for it), so I staged
+the two test templates on the box by hand this time. Either the box gets a read-only login for it, or
+that copy becomes readable. If you do nothing: every future new-app test needs the same hand-staging,
+which works but is one more step to get wrong (R-989).
 
 ## Monday 2026-10-12 (night): what Hungarian beginners ask on the PROHARDVER! home-server forum