diff --git a/HomeAssistant/needfromcharles.md b/HomeAssistant/needfromcharles.md
index a8e7634..b2b3157 100644
--- a/HomeAssistant/needfromcharles.md
+++ b/HomeAssistant/needfromcharles.md
@@ -69,3 +69,9 @@ Dongle manual/app check · minisplit nameplate photo · ecobee + lock codes
 UniFi Network 9 removed the classic API. Please create an Integration API key:
 UniFi UI → Settings → System → Advanced → Integrations → API Keys → Add.
 - [ ] Paste the key here (or ~/.creds/unifi-api.env):
+
+## 9. iDRAC/IPMI credentials (added 2026-09-02) — blocks #625
+Both OOB ports are live but predate Redfish; IPMI (623/UDP) is the only data
+path. Temp + power monitoring for tsys6/tsys7 needs one of:
+- [ ] iDRAC root password for both, or
+- [ ] a read-only IPMI account (name + password), pasted here or into ~/.creds/idrac.env
diff --git a/WORKING.md b/WORKING.md
index 3b739f3..0540112 100644
--- a/WORKING.md
+++ b/WORKING.md
@@ -15,3 +15,9 @@ Discourse k8s wiki #305 reply 8, and git PFVCluster d3c5ae8/1f44a19)
 - [x] Serial bounce wave completed; test pod schedules on worker only [#368]
 - [x] post-setup.sh kubectl bug + join-workers.sh timeouts fixed; tuning codified [#367][#368]
 - [x] ultix-offstage excluded (unreachable) — join when back on tailnet [#368]
+- [x] hap-bridge removed from pfv-bms host (unsupported_system_software fixed; supported=true) [#619]
+- [x] hap-bridge.py merge fix + 5 unit tests (babd6d2) [#619]
+- [x] Core watchdog re-enabled (founder-approved); community SSH add-on confirmed gone [#344]
+- [x] Lock DHCP-table verdict: no lock OUIs, BLE-only likely — answered in needfromcharles §3 [#619]
+- [x] iDRAC probes: both live, TLS1.0-only, no Redfish (hardware gen), SNMP off — #625 note + creds ask §9
+- [x] HA backup pre-cleanup-2026-09-02 verified (692MB); image prune 0B (nothing dangling; 4GB optional via -a, left to founder)