diff --git a/docs/audits/2026-09-07-k1-systemd-authority-and-manual-control-r9.md b/docs/audits/2026-09-07-k1-systemd-authority-and-manual-control-r9.md
index 5cd7f14..f73643a 100644
--- a/docs/audits/2026-09-07-k1-systemd-authority-and-manual-control-r9.md
+++ b/docs/audits/2026-09-07-k1-systemd-authority-and-manual-control-r9.md
@@ -74,3 +74,24 @@ credential loading, DeviceInfo, physical START/STOP and live stream verification
 must be recorded separately as observed. The connected browser tooling exposes
 only an empty in-app browser, not the owner's Chrome or its cache controls;
 fresh-cache physical UI acceptance remains an owner step.
+
+## Prepared release
+
+Both packages were built from a93f1f1b8b9ba54c1deeabea517f1d82aa8bd923;
+the Design Guideline pin remains 5b882bc3d9b13a86e6c26111ef5ded687ea3a2fc.
+Node production UI/Go/Debian build and its additional UI boundary test passed.
+The private immutable R9 release contains:
+
+| Artifact | Bytes | SHA-256 |
+| --- | ---: | --- |
+| mission-core-node_0.8.7_amd64.deb | 109815210 | 92c78d54acfd140d58edfa84efcead46043f238305a1ab6a9d6a3881ba4923f8 |
+| mission-core-xgrids-k1_0.1.6+private.1_amd64.deb | 318108348 | 40f9f91dd4e2589f0a8bd33abfd0e75004ac03c79a150a35a57393823d22a3cb |
+
+Both packages, the bounded GUI installer and SHA256SUMS were staged to the
+owner-controlled BK release directory. Remote checksums matched; apt simulation
+selected exactly the two package upgrades, with no removals or new packages.
+The authorized installer is open in Ubuntu and awaits owner sudo authentication.
+At this gate, installed versions are still R8; credential loading and hardware
+acceptance are not yet claimed. Private evidence contains the release metadata
+and validation logs. The canonical Core service remains healthy on port 8000;
+no backend is listening on legacy port 8765.