examples/CI-Eng-Sample/README.md

@@ -49,8 +49,8 @@ For a server that other projects use, where CI Server must not be restarted:
 Copy the whole sample folder to a temporary folder on the server, run from there, and delete
 it afterwards. Also delete `%TLS_LOG_PATH%\OPXCIENG.log`. The OPC UA certificate exchange and
 its undo are user steps (see below); the client's own certificate `<host>_OPXCIENG.der/.pem`
-and the trusted copies stay in the `pki` folders and in `OPCUAC_PKI_CERTIFICATES_DF` until the
-user deletes them.
+and the trusted copies stay in the `pki` folders (and in `OPCUAC_PKI_CERTIFICATES_DF`, which
+follows the files) until they are deleted; the server-side `pkiserver
ejected` folder is created by the test.
 
 ## Current contents
 

knowledge/r105-verification.md

@@ -95,7 +95,8 @@ is removed again afterwards. Scripts: `examples/CI-Eng-Sample/shared/`.
 - Remove: 0 errors. Before/after snapshot: all datasets identical (count and name hash), no
   `CIENG*` record left. Left over and cleaned: 34 `dss_*.tmp` files in `tls\lst` (ISS-091),
   `OPXCIENG.log`, the temporary sample copy.
-- **User step still open:** the certificate files of the test (client own certificate
-  `<host>_OPXCIENG.der/.pem`, the server certificate trusted in the client store, the client
-  certificate trusted in the server store) and their 2 extra `OPCUAC_PKI_CERTIFICATES_DF`
-  records. Claude is not allowed to change the certificate stores.
+- Certificates: the test's files (client own certificate `<host>_OPXCIENG.der/.pem`, the
+  server certificate trusted in the client store, the client certificate trusted in the
+  server store) and the `pkiserver\rejected` folder created by the test were deleted with the
+  user's approval. `OPCUAC_PKI_CERTIFICATES_DF` went back from 3 to 1 record by itself: the
+  dataset follows the certificate files. The server is back in its original state.