felhom.eu/REPORT-security-lane-2026-10-23.md

REPORT — D39 = B: the security-fix lane (2026-10-23, attended)

Plain words first. An app with a public security hole can now get its fix at night on every box, after one test on the test box. Controller 0.341.0 does it and is the floor since 13:24 (your yes). Older controllers skip such a fix at night and take it when a person presses Update — both seen on the test box. Nothing needs you.

• Design: 09-update-architecture.md §3 decision 255 (+ a dated note on decision 13). Capability map B23.
• Catalog 3898593 (+ a box-walk address fix after it); controller 63dcccf = 0.341.0; drill commits 8c1d908 … 17e0da0 (the drill only).
• Evidence and the full table: documentation/audits/security-lane-2026-10-23/README.md.
• Register 186 → 186: closed R-1239 (D39 = B); opened R-1240 (9202's 34 saved configs with the catalog token); R-1238 stays open, its text now says the next Plex fix can use the lane.
• STATUS.md: D39 out of the decide table, one „what works" line, the „Updated" paragraph replaced (the old one is in STATUS-HISTORY.md). CONTEXT.md: the rulings. System poster: no fact changed (none of the three actions).
• Instruction / fact files edited: app-catalog-felhom.eu/CLAUDE.md (the lane, added); operations/nodes.md line 221 (9202 „same dashboard password" → its own password, measured) and line 46 (Tester 1 .101 → DHCP, .148 today).
• No --no-verify in this run.