Note BRBL still clear on manual check (48h test still pending)

Manual dig confirms 89.58.8.149 still delisted as of 2026-07-26, matching
the automated 1h propagation check. Not conclusive yet - Barracuda's
temporary 48h reputation bump is still in effect; the scheduled 48h
routine on 2026-07-27 is the real test of whether removal stuck.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

TODO.md

@@ -20,10 +20,16 @@ Nothing here is urgent; all are low-risk, no-downtime changes.
       **Confirmation number: `BBR21785009436-19117-9182`.** Per Barracuda's
       response, the IP gets a temporary 48h reputation bump to "normal"
       while they investigate (up to ~1h to propagate), after which it
-      either stays clear or reverts to listed. Scheduled follow-up checks
-      (routines `trig_01F1RMhEtNHtAbuHb9ffe1oX` at ~1h,
-      `trig_019GayXSo5TW5eSxiJ99Ghrp` at ~48h) — if it reverts, next step is
-      a manual follow-up to Barracuda citing the confirmation number above.
+      either stays clear or reverts to listed.
+      **Status 2026-07-26: still clear** (`dig +short
+      149.8.58.89.b.barracudacentral.org A` → NXDOMAIN, no `127.0.0.2`) —
+      matches the 1h check (routine `trig_01F1RMhEtNHtAbuHb9ffe1oX`, fired
+      2026-07-25 21:02 UTC, also clear). This is expected during the 48h
+      "normal" bump window, not yet proof of permanent delisting. The real
+      test is the 48h check (routine `trig_019GayXSo5TW5eSxiJ99Ghrp`,
+      scheduled 2026-07-27 20:03 UTC) — if it reverts to listed, next step
+      is a manual follow-up to Barracuda citing the confirmation number
+      above.
 
 - [ ] **dyndns app has no real per-user auth binding** — found 2026-07-20,
       while fixing the command injection below.