MISTAKE FIRST, disclosed plainly: while doing a routine 'does this file still exist' HTTP status check on 4 toolbox files (boot_bkidx.php, boot_fix_hub.php, boot_roster2.php, boot_tools_desc.php), I didn't realize their content was a self-deleting bootstrap pattern (decode a companion .b64.txt file, write+include it, then unlink(__FILE__)). The GET request itself triggered execution and all 4 deleted themselves. Investigated the actual impact before doing anything else: their required .b64.txt payload files didn't exist (confirmed absent from the directory listing), so file_get_contents() returned empty, base64_decode('') produced an empty string, and the resulting _run.php files that got created were confirmed 0 bytes via read-only file-editor.php (not via a live GET, to avoid a repeat). No real code executed beyond the self-deletion. Preserved the pre-incident content (from the snapshot, fetched hours earlier and unlikely to have changed) to Trash for all 4, and cleared the 4 orphaned empty _run.php residue files. Lesson for future checks: read a toolbox/backend script's actual source via file-editor.php (read-only) before ever hitting it with a live GET for a status check -- a 200 isn't harmless on files that can have side effects.\n\nREAL BUG FOUND AND FIXED: COMMANDS-30.php (the CURRENT, actively-referenced toolbox command file per REFERENCE-30.md's standing duties) had the same dead hardcoded token as 4 other files fixed earlier this session -- confirmed broken with the current token (unauthorized), fixed, confirmed working with a live functional test (real link_check output, not just a write-success response). This is the 5th instance this session of the same token-migration gap.\n\nRETIRED (confirmed dead/superseded by actual content read, not just filename pattern), all preserved to Trash first: bak_exec.php, dbcheck.php, dbcheck2.php, dirscan.php, test_write_check.php (already-zeroed/empty leftover scratch scripts) -- COMMANDS-03.php (explicitly self-marked INCOMPLETE, superseded by COMMANDS-30.php) -- 3 config/EXEC_OPEN_Tech.30.*.txt dot-naming files (each self-documented 'ARCHIVED 08/01/26 -- superseded by Series P -- no longer active') -- the 4 self-deleted boot_*.php files (preserved from snapshot) and their 4 empty _run.php residue files.