diff --git a/2026/2026-09-23--goa-merchant-terms-privacy+mon.md b/2026/2026-09-23--goa-merchant-terms-privacy+mon.md
new file mode 100644
index 0000000..11ce7d3
--- /dev/null
+++ b/2026/2026-09-23--goa-merchant-terms-privacy+mon.md
@@ -0,0 +1,32 @@
+# 2026-09-23 — GOA merchant /terms+/privacy + mon green
+
+## Why
+
+Public merchant `taler.hacktivism.ch` lacked `/terms` + `/privacy` (501).
+elelmon still assumed legacy multi-CTR `taler-hacktivism*`; live SoT is single
+CTR **`goa-regio-ng`** (pasta 9010–9015).
+
+## Live (hernani@koopa)
+
+| Piece | Detail |
+|-------|--------|
+| CTR | `goa-regio-ng` · BANK=EX=MER same |
+| Terms | `TERMS_ETAG=merchant-tos-dual-v2` · en under `/var/lib/taler-merchant/terms/` |
+| Privacy | `PRIVACY_ETAG=merchant-pp-swiss-v0` |
+| Drop-in | `/etc/taler-merchant/conf.d/terms-privacy.conf` · httpd restart |
+| Public | `https://taler.hacktivism.ch/{terms,privacy}` → **200** |
+| Mon stamp | `20260923T075931Z` · LOG `~/.local/state/elelmon-runs/hacktivism-full-….log` |
+| Mon result | EXIT=0 · 182 OK · 0 ERROR · 21 WARN · 21 INFO |
+| Public mon | staging → `/var/www/monitoring-sites/{host}/monitoring/` |
+
+## Repo SoT (magikoopa)
+
+**koopa-admin-log** — profile/scripts already had ETAGs + install helpers;
+runtime apply on CTR today. Caddyfile dossiers `try_files` → `{path} {path}/ {path}/index.html`
+(separate commit).
+
+**elelmon** — laptop tip goa-aware (clean); koopa WT may still need SSH pull.
+
+## Hold
+
+Cutover locked. No `taler-deployment` master push. Next: T3 vanilla Ansible lokal → T2 APT (Freigabe).