diff --git a/REPORT.md b/REPORT.md
index 69cbe19..69f863c 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -4,12 +4,32 @@ Four defects of one family, each with a source-verified mechanism, tests and red
 Agent **v0.128.0** · controller **v0.210.0** · `gates.yml` (workflow only). **The hub was not touched,
 not bumped and not deployed.**
 
-## 1. Part 1's live sequence — NOT YET RUN
+## 1. Part 1's live sequence — RUN, OPERATOR-PRESENT, PASSED
 
-**The code, tests and deploy are done; the live proof is the operator-present STOP** (§10). Agent
-0.128.0 is live on `felhom-pve` (`felhom-agent --version` → `0.128.0`, service `active`, normal
-smartctl/lvs/lxc-info work in the journal). Steps 3 and 4 — the preflight NOT OK, then OK after one
-tick with no daemon restart — are **owed and will be quoted verbatim when the operator says go.**
+On `demo-felhom` guest 9201, agent 0.128.0. Backup taken first and verified byte-identical
+(`sha256 eff18437…`), pbsdr marker sha recorded and **unchanged at every step**
+(`fd4c97b5…`).
+
+**Step 3 — the preflight with the key removed (today's defect, live):**
+
+```
+{"id": "pbs_storage_id", "ok": false, "detail": "escrow.pbs_storage_id not configured"}
+```
+
+**Step 4 — one 60 s tick later, same daemon:**
+
+```
+{"id": "pbs_storage_id", "ok": true, "detail": "felhom-pbs"}
+```
+
+**No restart:** agent MainPID **1993397 before and 1993397 after** — the same process. The wizard
+would have refused at 18:04:16Z and would pass at 18:05:44Z, with nobody touching the box.
+
+**Step 5 — nothing else moved:** 45 keys in the backup, 45 now, **added none / removed none /
+changed none**. The one key is back with its original value.
+
+**Positive control:** the preflight was exercised BEFORE the change and reported `ok: true` on the
+same row, so a green afterwards is a measurement and not an artefact of the probe.
 
 ## 2. The writer of `agent.json` — ESTABLISHED