diff --git a/docs/04-HARDWARE-INVENTORY.md b/docs/04-HARDWARE-INVENTORY.md
index 6d2f03f..db0eee8 100644
--- a/docs/04-HARDWARE-INVENTORY.md
+++ b/docs/04-HARDWARE-INVENTORY.md
@@ -14,7 +14,7 @@
 | **Location** | 19" Rack U3 (on shelf) |
 | **IP** | 192.168.10.1 |
 | **MAC** | 78:9A:18:2C:A5:48 |
-| **OS** | RouterOS 7.20.6 |
+| **OS** | RouterOS 7.23.3 |
 | **Serial** | - |
 
 **Ports:**
@@ -77,7 +77,7 @@
 | **Location** | Corridor (ceiling) |
 | **IP** | 192.168.10.2 |
 | **MAC** | 18:FD:74:54:3D:BC |
-| **OS** | RouterOS 7.21.1 |
+| **OS** | RouterOS 7.23.3 |
 | **Serial** | HCT085KBH8B |
 | **SSH** | `ssh -i ~/.ssh/mikrotik_key -p 2222 xtrm@192.168.10.2` |
 
diff --git a/docs/07-WIFI-CAPSMAN-CONFIG.md b/docs/07-WIFI-CAPSMAN-CONFIG.md
index cebb48d..d52dd61 100644
--- a/docs/07-WIFI-CAPSMAN-CONFIG.md
+++ b/docs/07-WIFI-CAPSMAN-CONFIG.md
@@ -23,7 +23,7 @@
 | SSID | XTRM |
 | Band | 5GHz |
 | Mode | 802.11ax (WiFi 6) |
-| Channel | 5745 MHz (ch 149) |
+| Channel | 5180 MHz (ch 36) |
 | Width | 20/40/80MHz |
 | Security | WPA2-PSK + WPA3-PSK |
 | Cipher | CCMP (AES) |
@@ -107,10 +107,10 @@ If devices still can't connect, use WPA-only with TKIP-only:
 |---------|-------|
 | caps-man-addresses | 192.168.10.1 |
 | discovery-interfaces | bridgeLocal |
-| slaves-datapath | capdp (bridge=bridgeLocal, vlan-id=40) |
+| slaves-datapath | capdp (bridge=bridgeLocal, vlan-id=30) |
 | Traffic processing | **On CAP only** (wifi-qcom-ac driver limitation) |
 | certificate | request |
-| RouterOS | 7.21.3 |
+| RouterOS | 7.23.3 |
 | SSH Port | 2222 |
 | SSH (via proxy) | See ProxyJump command below |
 
@@ -168,7 +168,7 @@ The CAP runs bridge VLAN filtering to properly tag/untag WiFi client traffic bef
 | 31 | C8:5C:CC:40:B4:AA | Xiaomi Air Purifier 2 | 30 |
 | 32 | (any) | Default - VLAN40 | 40 (catch-all) |
 
-**Default behavior:** Devices not in the access list get VLAN 40 (CatchAll) via the default rule and the datapath `vlan-id=40`.
+**Default behavior:** Devices not in the access list get VLAN 40 (CatchAll) via the default rule. CAP clients instead take the CAP-side `capdp` datapath, which is **`vlan-id=30`** (verified live 2026-09-27).
 
 ### Show Full Access List
 
@@ -235,3 +235,28 @@ Per-client VLAN does not work on CAP — the cAP XL ac uses wifi-qcom-ac drivers
 /interface wifi capsman print
 /interface wifi capsman remote-cap print
 ```
+
+
+---
+
+## 5GHz Channel Change (2026-09-27)
+
+`wifi1` (hAP 5GHz) moved from **5745 MHz (ch 149)** to **5180 MHz (ch 36)**.
+
+Channel 149 sits in UNII-3, which is not permitted for Wi-Fi in Bulgaria/EU. The radio ran with `country=United States` to reach it. Clients in the BG regulatory domain were power-restricted there, producing a badly asymmetric link and very low throughput.
+
+| Metric | Before (ch 149) | After (ch 36) |
+|--------|-----------------|---------------|
+| MacBook Wi-Fi download | ~38 Mbps | **~241 Mbps** |
+| Client transmit rate | 17 Mbps (MCS 1) | 204-272 Mbps (MCS 2) |
+| Signal at AP | -86 dBm | -86 dBm (unchanged; channel was the limit) |
+
+Channel 36 is legal in BG and non-DFS, so `skip-dfs-channels=all` still applies.
+
+### WAN baseline (2026-09-27)
+
+Measured on `ether1` with real traffic from Unraid: **~880 Mbps down / ~720 Mbps up**. The 2.5G WAN port negotiates at 1 Gbps because the Vivacom ONT only advertises `1G-baseT-full`. No queues are configured, so nothing local shapes traffic.
+
+### CAP 5GHz tested and reverted
+
+`cap-wifi1` (cAP XL, corridor ceiling) was enabled to test desk coverage. It was not audible from the desk and was reverted to disabled. A datapath with `vlan-id=20` returned `vlan-id configured, but interface does not support assigning vlans`, re-confirming that wifi-qcom-ac CAPs cannot do per-interface VLAN assignment.