diff --git a/documentation/audits/evidence-backup-promise-2026-09-16/phaseE-freshbox.txt b/documentation/audits/evidence-backup-promise-2026-09-16/phaseE-freshbox.txt
index 3a789723..9a6acaa3 100644
--- a/documentation/audits/evidence-backup-promise-2026-09-16/phaseE-freshbox.txt
+++ b/documentation/audits/evidence-backup-promise-2026-09-16/phaseE-freshbox.txt
@@ -204,3 +204,14 @@ status: running
 ##   „Send self-bind link", because no automatic mail existed for a customer who was already waiting.
 ##   This walk used the mail the hub sent ITSELF after the host delete (R-509, proven at 12:23:00Z),
 ##   so the pre-declared operator press is gone.
+## 2026-09-16T16:00Z THE BOX ENROLLED ITSELF, minutes after the bind:
+##   Host ID        tester-1-33b6a9      (the morning's host record was deleted; this is a new box)
+##   Status         ONLINE, „Enrolled just now", „Last Report just now"
+##   Agent          0.131.0 — the vouched agent, no hand upgrade
+##   PBS wrapper    „matches vouched 104db0a4401f…"
+##   Capabilities   „pve:store-grant:felhom-pbs  critical  ok — backup tier felhom-pbs readable by
+##                  the agent", „pve:store-grant:local ok", „pve:pool-read ok"
+##   Guests         0/0 at this moment — the customer guest is still being created.
+## AND THE CLAIM MAIL CAME BY ITSELF at 16:00:58Z: „[Felhom] Új beállító kód — újratelepült a
+##   szervered … A kód 72 óráig érvényes". The setup code itself is a SECRET: it is held out-of-band
+##   in a 0600 file for the claim step and appears in no committed file.