R-892: password reset done; the walk refused by the permission check (box unchanged)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -19,7 +19,7 @@ held catalog branch).**
 
 **Needs you (none urgent):**
 1. Release order today: hub, agent, controller, then the catalog branch. My pick: yes, after Parts B and D.
-2. The Tester 1 box: the key works now; the update test needs the box's dashboard password in `/home/kisfenyo/.felhom-tester1/.ctlpw` (0600).
+2. The Tester 1 box: key and dashboard password are ready (password in `/home/kisfenyo/.felhom-tester1/.ctlpw`); the update test was refused by the session's safety check — the day session runs it.
 
 ## Night (2026-10-06): the night-free parts done; the rest after 08:30
 

documentation/audits/night-burndown-2026-10-06/NIGHT-LOG.md

@@ -55,3 +55,4 @@ no reboot.
 | (hub release) | **NOT DEPLOYED.** 00:10 the release commit (`hub/CHANGELOG.md` v0.141.0: R-366, R-31, R-330 wire) was pushed, green; at 00:12 the image build (`build/felhom-hub/build.sh 0.141.0 --push`) was **refused by the session's permission check** („Production Deploy"). Stopped there (brief Rules 3), no workaround; the manifest still names 0.140.0, nothing changed on the hub. The CHANGELOG says so. The day session builds and deploys 0.141.0 | 5 | (this batch) |
 | R-872 | **closed** — the 05:00 run judged Tester 2 on the longer lines (dump missed=1, backup missed=0 correctly) and the mail reached the operator inbox (second channel) | 10 | (this batch) |
 | R-892 | 07:10 (operator: key added, „continue"): SSH works, app list read; **the walk is blocked again** — no dashboard password for this box on DooPlex. Nothing changed on the box | 6 | (this batch) |
+| R-892 | 07:41 dashboard password reset through the box's own reset (operator's word; new password only in a 0600 file); the walk was then **refused by the permission check** before any change — box unchanged | 20 | (this batch) |