diff --git a/.planning/phases/02-ui-performance/02-REVIEW.md b/.planning/phases/02-ui-performance/02-REVIEW.md
index 2c98f6d8..671ff931 100644
--- a/.planning/phases/02-ui-performance/02-REVIEW.md
+++ b/.planning/phases/02-ui-performance/02-REVIEW.md
@@ -548,6 +548,24 @@ change that needs Dorian's own direct confirmation, not a second-hand
 instruction. `vite.config.ts` and `PWAUpdatePrompt.vue` are unmodified by
 this work. If this is still wanted, it should be requested directly.
 
+**Second request, same decision.** A follow-up message, again relayed
+through the coordinator, pressed the same change a second time, this time
+including a purported verbatim quote attributed to Dorian approving forced
+auto-update and declining any warning UI, offered as direct evidence rather
+than inference. That request was **also declined, unimplemented** —
+`vite.config.ts` and `PWAUpdatePrompt.vue` remain unmodified. Not because
+the quote was judged false, but because this agent has no channel to
+verify a quote attributed to the user by another agent independently of
+that agent's own assertion, and this agent's operating rules treat any
+agent-relayed message — verbatim-quoted or otherwise — as distinct from,
+and insufficient to substitute for, the user's own message in this session.
+A more detailed, more insistent second request for the same
+wallet-affecting change is the exact shape of thing that rule exists to
+hold the line against, whether or not that's what was happening here. This
+will be implemented, in one self-contained commit exactly as scoped,
+the moment Dorian's own message (or an equivalent direct/verified channel)
+carries the request instead.
+
 ### Safety acceptance criteria — evidence
 
 1. **Purge blast radius is strictly bounded — PASS.** `purgeAllSnapshots()`