# REPORT — D39 = B: the security-fix lane (2026-10-23, attended)

**Plain words first.** An app with a public security hole can now get its fix at night on every box, after one test
on the test box. Controller 0.341.0 does it and is the floor since 13:24 (your yes). Older controllers skip such a fix
at night and take it when a person presses Update — both seen on the test box. Nothing needs you.

- Design: `09-update-architecture.md` §3 decision 255 (+ a dated note on decision 13). Capability map B23.
- Catalog `3898593` (+ a box-walk address fix after it); controller `63dcccf` = 0.341.0; drill commits `8c1d908` …
  `17e0da0` (the drill only).
- Evidence and the full table: `documentation/audits/security-lane-2026-10-23/README.md`.
- Register 186 → 186: closed R-1239 (D39 = B); opened R-1240 (9202's 34 saved configs with the catalog token); R-1238
  stays open, its text now says the next Plex fix can use the lane.
- `STATUS.md`: D39 out of the decide table, one „what works" line, the „Updated" paragraph replaced (the old one is in
  `STATUS-HISTORY.md`). `CONTEXT.md`: the rulings. System poster: no fact changed (none of the three actions).
- Instruction / fact files edited: `app-catalog-felhom.eu/CLAUDE.md` (the lane, added); `operations/nodes.md` line 221
  (9202 „same dashboard password" → its own password, measured) and line 46 (Tester 1 `.101` → DHCP, `.148` today).
- No `--no-verify` in this run.