diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 972c51b..11704fe 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -272,7 +272,7 @@
 | task | NK-WP-0049-T21 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
 | task | NK-WP-0049-T22 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
 | task | NK-WP-0049-T23 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
-| task | NK-WP-0049-T24 | todo | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
+| task | NK-WP-0049-T24 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
 | task | NK-WP-0049-T25 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
 | task | NK-WP-0049-T26 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
 | task | NK-WP-0049-T27 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
diff --git a/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md b/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md
index ada6dc7..98cf03e 100644
--- a/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md
+++ b/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md
@@ -664,9 +664,12 @@ T26 separately records accepted guide publication.
 
 ```task
 id: NK-WP-0049-T24
-status: todo
+status: wait
 priority: medium
 assignee: codex
+needs_human: true
+decision_id: "e4c288d9-0b8a-4261-a8bf-0d2a15688615"
+blocking_reason: "Limits recorded 2026-10-23; founder chooses accept-with-review-date or intake for G1 second provider, G2 external host-loss detection, G3 recurring drill cadence."
 depends_on: [NK-WP-0049-T14]
 state_hub_task_id: "474f5a78-a643-59c6-bcf9-fc4a908dfcb0"
 ```
@@ -685,6 +688,21 @@ an external watchdog are not implemented; do not add their grants/jobs implicitl
 This task triages the new insights instead of silently expanding NK49's required
 implementation to an entire disaster-recovery programme.
 
+2026-10-23: current limits recorded. Gate routed as decision `e4c288d9`.
+- **G1, single provider.** The full identity bundle has one encrypted off-host
+  copy (Storage Share). Scaleway holds database dumps only.
+- **G2, host-local health.** The hourly health check and the 25-hour freshness
+  bound run on railiance01 itself. If that host is lost, nothing reports
+  staleness.
+- **G3, no recurring drill.** The PI database, LLDAP and archive recoveries were
+  each run once.
+
+Recommendation: accept G1 as a bounded residual risk until 2027-01-31. Open
+owner intakes for G2 (off-host watchdog) and G3 (a quarterly isolated restore
+that reuses the T16/T31 tooling). Once the founder answers, record each accepted
+risk or link each intake, then close this task. No grant, job or watchdog is
+added here.
+
 ## Deliver and verify the offline retrieval adapter and recovery tools kit
 
 ```task