diff --git a/docs/plans/2026-09-26_lead-decisions.md b/docs/plans/2026-09-26_lead-decisions.md
index 5a02a59e..e5a068f1 100644
--- a/docs/plans/2026-09-26_lead-decisions.md
+++ b/docs/plans/2026-09-26_lead-decisions.md
@@ -132,3 +132,12 @@ which stay with him. Each item names who decided it and what happened.
    is that removing the grace lets delayed events from an old run resolve the
    next prompt (report `agents/rocko/work/discord-engine-busy-r1-review-2026-09-26.md`,
    047dbd8f). Darkwing is on R2, and the restart stays held.
+10. **Board guard live.** Rocko approved Dewey's Host and Origin guard
+    (de9ff942), and Sage committed it as d1629d61 after the eight suites,
+    control-board (121/121) and webui (9/9) passed on an index export. It
+    was pushed. The board restarted at 20:40:43Z: old PID 3977979 stopped
+    on SIGTERM, new PID 288909, log
+    `/tmp/control-board-20260926T204043Z.log`, the same flags and port 7331,
+    44 sessions before and after. Live checks: a foreign Host on
+    `/api/board` returns 403, a foreign Origin on `POST /api/reply` returns
+    403, and the WebUI proxy's `/api/board` returns 200.