diff --git a/hub/CHANGELOG.md b/hub/CHANGELOG.md
index 75c307c3..c576321f 100644
--- a/hub/CHANGELOG.md
+++ b/hub/CHANGELOG.md
@@ -1,4 +1,8 @@
-## Unreleased (2026-10-08, evening) — the operator's decision sheet: operator actions (D1), box presence + delete a switched-off box at once (D2), the household's health mail points to the dashboard (D3), the Cloudflare token reach check (D6), one lost off-site snapshot is an error (D7) — ships with tomorrow's hub release
+## v0.144.0 — the operator's decision sheet (D1, D2, D3, D6, D7) and the morning's R-243, R-901, R-304, R-415 (2026-10-09)
+
+Release together with controller 0.304.0 (D1's operator actions need both). No wire change an older box cannot read.
+
+### Part (2026-10-08, evening) — the operator's decision sheet: operator actions (D1), box presence + delete a switched-off box at once (D2), the household's health mail points to the dashboard (D3), the Cloudflare token reach check (D6), one lost off-site snapshot is an error (D7)
 
 Operator rulings 2026-10-08 14:16, `09` §3 decisions 185–194. **Operator action on deploy: none.** The controller of the
 same day carries D1's other half; an older controller ignores `operator_actions` (rows then expire after 24 h).
@@ -32,7 +36,7 @@ same day carries D1's other half; an older controller ignores `operator_actions`
   cannot widen it); each window explains one fall only; a window stuck open past its deadline explains nothing;
   unreadable windows fall back to the half-rule. NAS tiers keep the half-rule. `TestR435_*` (store + monitor). `08` §6.5.
 
-## Unreleased (2026-10-08) — an alarm when a box never backs up off-site because its escrow is pending (R-243; `09` §3 decision 179); a deleted customer's audit rows go after 1 year (R-901; decision 181); the operator's older-recovery-package mail (R-304; decision 183); no duplicate or nested customer domain (R-415, R-138 option B) — ships with tomorrow's hub release
+### Part (2026-10-08) — an alarm when a box never backs up off-site because its escrow is pending (R-243; `09` §3 decision 179); a deleted customer's audit rows go after 1 year (R-901; decision 181); the operator's older-recovery-package mail (R-304; decision 183); no duplicate or nested customer domain (R-415, R-138 option B)
 
 **Operator action on deploy: none.** Expect ONE `offsite_escrow_pending` mail for **Tester 2** on the first sweep after
 the deploy: its latest report (2026-10-04) says off-site ON, escrow `pending`, no successful run ever — the state the