docs: bug-report instruction step 1 no longer calls every bundle unpseudonymised (#158)

Files changed:
- CHANGES.md
- VERSION
- instructions/bug-report.md

CHANGES.md

@@ -59,7 +59,7 @@ concern - readable here, never shipped as something to parse.
 
 ---
 
-## 8.0.0-beta.8 - 2026-09-30 - Bug-report collector can pseudonymise identities, in two stages
+## 8.0.0-beta.9 - 2026-09-30 - bug-report instruction: step 1 no longer calls every bundle unpseudonymised
 
 **Author:** Torben Nehmer
 
@@ -113,8 +113,15 @@ concern - readable here, never shipped as something to parse.
 - Demo corpus follows the decided project pages: three states, seed with their items (#156)
 - bug-report instruction: offer WIKI_TRACE=1 for a reproduction
 - reports/CONTRACT.md: only the collector's two counting calls take the bugreport session id
+- bug-report instruction: step 1 no longer calls every bundle unpseudonymised
 <!-- /wikitool:bumps -->
 
+### bug-report instruction: step 1 no longer calls every bundle unpseudonymised
+
+Step 1 told the agent to announce that the bundle "is not pseudonymised" and then, one paragraph
+later, to offer `--pseudonymise`. It now says the bundle holds machine, user and path names and the
+git remotes unless it is pseudonymised.
+
 ### Bug-report collector can pseudonymise identities, in two stages (Gitea #158)
 
 A bundle carries machine, user and path names, and an installation failure usually turns on the