{
  "date": "2026-07-14",
  "operator": "Paul Campbell",
  "window": "09:00–13:00 UTC (approx)",
  "why": "WireGuard hardening rollout: brought up the wg admin tunnel, closed public port 22, added named operator accounts and this ledger's collector.",
  "refs": ["https://github.com/elevenmessenger/messenger/pull/884"]
}