diff --git a/TODO.md b/TODO.md
index efb7b84..9cca6e5 100644
--- a/TODO.md
+++ b/TODO.md
@@ -20,10 +20,16 @@ Nothing here is urgent; all are low-risk, no-downtime changes.
       **Confirmation number: `BBR21785009436-19117-9182`.** Per Barracuda's
       response, the IP gets a temporary 48h reputation bump to "normal"
       while they investigate (up to ~1h to propagate), after which it
-      either stays clear or reverts to listed. Scheduled follow-up checks
-      (routines `trig_01F1RMhEtNHtAbuHb9ffe1oX` at ~1h,
-      `trig_019GayXSo5TW5eSxiJ99Ghrp` at ~48h) — if it reverts, next step is
-      a manual follow-up to Barracuda citing the confirmation number above.
+      either stays clear or reverts to listed.
+      **Status 2026-07-26: still clear** (`dig +short
+      149.8.58.89.b.barracudacentral.org A` → NXDOMAIN, no `127.0.0.2`) —
+      matches the 1h check (routine `trig_01F1RMhEtNHtAbuHb9ffe1oX`, fired
+      2026-07-25 21:02 UTC, also clear). This is expected during the 48h
+      "normal" bump window, not yet proof of permanent delisting. The real
+      test is the 48h check (routine `trig_019GayXSo5TW5eSxiJ99Ghrp`,
+      scheduled 2026-07-27 20:03 UTC) — if it reverts to listed, next step
+      is a manual follow-up to Barracuda citing the confirmation number
+      above.
 
 - [ ] **dyndns app has no real per-user auth binding** — found 2026-07-20,
       while fixing the command injection below.