- Five HUB_TOKEN_* keys added to the host secrets file (mode 600, backup kept). - docker compose up -d --build recreated the hub container on :8788 with the AUD-49 image (central-ai-hub:local, sha256:f6b773c8a33a), user 1000:100. - Verified: /health ok with omniroute ok, control action refused, bad token 401, container healthy. Co-Authored-By: Paperclip <noreply@paperclip.ing>