diff --git a/priv/static/changelog.txt b/priv/static/changelog.txt
index fd64bc0f..5cb8125d 100644
--- a/priv/static/changelog.txt
+++ b/priv/static/changelog.txt
@@ -1,4 +1,5 @@
2026-05-09 — Smarter recommendations + AI-generated insight summaries
+* New recommendation: device overheating — flags any device with a temperature sensor at or above 65 °C, with the linked QoE score so you can tell whether a slowdown is thermal vs RF before sending a truck
* New recommendation: same-channel conflicts within your own network — when two or more of your APs at the same site sit on the same channel, the system flags the conflict with a clickable evidence table showing noise floor, RF score, average CPE SNR, and client count per AP, and escalates to critical when the RF environment is also contaminated
* New recommendation: sector overload detection — APs with low free airtime and active subscribers get flagged with subscriber count, QoE score, and AP model so you can decide whether to split the sector or upgrade the radio
* New recommendation: CPE re-aim candidates — wireless clients with both weak signal and low SNR (the alignment-issue signature) get individual cards with signal, SNR, TX/RX rate, and distance, so each truck-roll candidate is actionable on its own
diff --git a/test/towerops/recommendations/rules/device_overheating_test.exs b/test/towerops/recommendations/rules/device_overheating_test.exs
new file mode 100644
index 00000000..e4afe201
--- /dev/null
+++ b/test/towerops/recommendations/rules/device_overheating_test.exs
@@ -0,0 +1,117 @@
+defmodule Towerops.Recommendations.Rules.DeviceOverheatingTest do
+ @moduledoc """
+ Tests the rule that flags devices with elevated enclosure / chassis
+ temperature, optionally correlating with Preseem QoE degradation.
+ """
+ use Towerops.DataCase, async: true
+
+ import Towerops.AccountsFixtures
+ import Towerops.DevicesFixtures
+ import Towerops.OrganizationsFixtures
+
+ alias Towerops.Preseem.AccessPoint
+ alias Towerops.Recommendations.Rules.DeviceOverheating
+ alias Towerops.Snmp.Device, as: SnmpDevice
+ alias Towerops.Snmp.Sensor
+
+ setup do
+ user = user_fixture()
+ org = organization_fixture(user.id)
+ device = device_fixture(%{organization_id: org.id, name: "AP-Hot"})
+
+ {:ok, snmp} =
+ %SnmpDevice{}
+ |> SnmpDevice.changeset(%{device_id: device.id, sys_name: "AP-Hot"})
+ |> Repo.insert()
+
+ %{org: org, device: device, snmp: snmp}
+ end
+
+ defp insert_temp(snmp, value, opts \\ []) do
+ %Sensor{}
+ |> Sensor.changeset(%{
+ snmp_device_id: snmp.id,
+ sensor_type: Keyword.get(opts, :type, "temperature"),
+ sensor_index: "t_#{System.unique_integer([:positive])}",
+ sensor_oid: "1.2.3.#{System.unique_integer([:positive])}",
+ sensor_unit: "C",
+ sensor_divisor: 1,
+ sensor_descr: Keyword.get(opts, :descr, "Enclosure"),
+ last_value: value
+ })
+ |> Repo.insert!()
+ end
+
+ test "no insight when no temperature sensors", %{org: org} do
+ assert DeviceOverheating.evaluate(org.id) == []
+ end
+
+ test "no insight when temperature is healthy", %{org: org, snmp: snmp} do
+ insert_temp(snmp, 45.0)
+ assert DeviceOverheating.evaluate(org.id) == []
+ end
+
+ test "warning insight at 65–75°C", %{org: org, device: device, snmp: snmp} do
+ insert_temp(snmp, 68.0)
+
+ assert [insight] = DeviceOverheating.evaluate(org.id)
+ assert insight.type == "device_overheating"
+ assert insight.urgency == "warning"
+ assert insight.device_id == device.id
+ assert insight.metadata["temperature_c"] == 68.0
+ assert insight.metadata["sensor_descr"] == "Enclosure"
+ assert insight.title =~ "AP-Hot"
+ assert insight.title =~ "68"
+ end
+
+ test "critical insight at 75°C+", %{org: org, snmp: snmp} do
+ insert_temp(snmp, 78.0)
+
+ assert [insight] = DeviceOverheating.evaluate(org.id)
+ assert insight.urgency == "critical"
+ end
+
+ test "uses the hottest sensor when multiple are present", %{org: org, snmp: snmp} do
+ insert_temp(snmp, 60.0, descr: "CPU")
+ insert_temp(snmp, 70.0, descr: "Enclosure")
+
+ assert [insight] = DeviceOverheating.evaluate(org.id)
+ assert insight.metadata["temperature_c"] == 70.0
+ assert insight.metadata["sensor_descr"] == "Enclosure"
+ end
+
+ test "correlates with Preseem QoE degradation when AP is linked",
+ %{org: org, device: device, snmp: snmp} do
+ insert_temp(snmp, 72.0)
+
+ {:ok, _ap} =
+ %AccessPoint{}
+ |> AccessPoint.changeset(%{
+ organization_id: org.id,
+ preseem_id: "ap-thermal-#{System.unique_integer([:positive])}",
+ name: "Linked",
+ device_id: device.id,
+ match_confidence: "auto_ip",
+ qoe_score: 45.0
+ })
+ |> Repo.insert()
+
+ assert [insight] = DeviceOverheating.evaluate(org.id)
+ assert insight.metadata["qoe_score"] == 45.0
+ # Description should hint at thermal throttling correlation
+ assert insight.description =~ "QoE"
+ end
+
+ test "scopes to organization", %{org: org, snmp: snmp} do
+ insert_temp(snmp, 78.0)
+
+ other_user = user_fixture()
+ other_org = organization_fixture(other_user.id)
+ assert DeviceOverheating.evaluate(other_org.id) == []
+ end
+
+ test "ignores non-temperature sensors", %{org: org, snmp: snmp} do
+ insert_temp(snmp, 78.0, type: "voltage")
+ assert DeviceOverheating.evaluate(org.id) == []
+ end
+end