diff --git a/.env.example b/.env.example
index d579c8a..6a02975 100644
--- a/.env.example
+++ b/.env.example
@@ -1,9 +1,10 @@
 # =============================================================================
 # .env.example — every key, no values. Committed deliberately.
 #
-# On lin001 these live as TWO 0600 files under ~/ai/, never in Git:
-#   ~/ai/pg-ai.env   the POSTGRES_* / AGENT_DB_* block
-#   ~/ai/api.env     everything else
+# On lin001 these live as THREE 0600 files under ~/ai/, never in Git:
+#   ~/ai/pg-ai.env     the POSTGRES_* / AGENT_DB_* block
+#   ~/ai/langfuse.env  the Langfuse SALT / NEXTAUTH_SECRET block (see below)
+#   ~/ai/api.env       everything else
 # Follow the ~/authelia/authelia.env precedent: chmod 0600, owned by azureuser.
 # =============================================================================
 
diff --git a/status/workflow-map.html b/status/workflow-map.html
index d4ff079..2193b24 100644
--- a/status/workflow-map.html
+++ b/status/workflow-map.html
@@ -651,7 +651,7 @@ shows the control-room machine opening the page on 28 August, the day the rule w
 three questions on 31 August, each answered.</td></tr>
 
 <tr><td class="ph">8</td>
-<td><b>The exam</b> &mdash; 75 engineer-checked questions run end to end and scored</td>
+<td><b>The exam</b> &mdash; 78 engineer-checked questions run end to end and scored</td>
 <td><span class="badge b-blocked">Runnable, and never run</span></td>
 <td><b>Nothing is blocking this and it has still not been done.</b> The model account arrived on 27
 August, so both AI steps can be scored; no scorecard has ever been produced. The set covers 28
@@ -714,7 +714,7 @@ returns that document&rsquo;s heading, purpose and prerequisites and withholds t
 The rulebook already refused instruction language and still does; this removes the temptation
 rather than relying on catching it.</li>
 <li><b>What it still does not prove:</b> whether the labelling and wording are <em>good enough</em>.
-They work; they are not yet scored. The 75-question exam can now be run and has not been. And no
+They work; they are not yet scored. The 78-question exam can now be run and has not been. And no
 operator has yet sat at a control-room PC and got an answer &mdash; the one check that cannot be
 done from here.</li>
 <li><b>Found today, and worth repeating:</b> the most obvious question at this station &mdash;