diff --git a/docs/CURRENT/CATALOGS/WBS_PROGRESS_TRACKER.csv b/docs/CURRENT/CATALOGS/WBS_PROGRESS_TRACKER.csv
index ba862bea..e87858f5 100644
--- a/docs/CURRENT/CATALOGS/WBS_PROGRESS_TRACKER.csv
+++ b/docs/CURRENT/CATALOGS/WBS_PROGRESS_TRACKER.csv
@@ -24,4 +24,4 @@ AEG-X-011,S4,Cross,Golden vector 고도화,BLOCKED,TBD,"AGENTS.md: Algorithm cha
 AEG-VS-09-01,S4,VS-09,BuildEvidenceSnapshot,BLOCKED,TBD,"CLAUDE.md: Evidence requires Phase 1 results",PM/Architect,"Gate 2 prerequisite. Blocked by Phase 1."
 AEG-VS-10-01,S4,VS-10,GenerateSellDecision,BLOCKED,TBD,"CLAUDE.md: Model must pass PBO/DSR validation",PM/Architect,"Gate 3 prerequisite. Blocked by Phase 1."
 AEG-VS-19-01,S5,VS-19,RunFrozenBacktest,BLOCKED,TBD,"CLAUDE.md: Requires evidence from Phase 1-4",PM/Architect,"Gate 3 prerequisite. Blocked by Phase 1."
-PHASE-1-SHADOW-RUN,S0-S5,Cross,252+ Trading Day Shadow Run,BLOCKED,TBD,"docs/CURRENT/PHASE-1_SHADOW_RUN_STATUS_CORRECTION.md; docs/CURRENT/AEG-X-004_DBUP_EVIDENCE.md; docs/CURRENT/PHASE-1_REQUEUE_READINESS.md; db/migrations/0032_shadow_run_queued_status_contract.sql; logs/phase-1-execution.log; logs/host-startup-20260804-173000.log",BE/SRE,"Status-contract correction and approved test-db rehearsal are complete (0032; targeted 1/1, DbUp 12/12, recovery 6/6). Requeue readiness/preflight package is prepared. Job 893 was never started. Remains BLOCKED pending explicit approval, fresh Run/Job IDs, and production migration/DBA approval."
+PHASE-1-SHADOW-RUN,S0-S5,Cross,252+ Trading Day Shadow Run,BLOCKED,TBD,"docs/CURRENT/PHASE-1_SHADOW_RUN_STATUS_CORRECTION.md; docs/CURRENT/AEG-X-004_DBUP_EVIDENCE.md; docs/CURRENT/PHASE-1_REQUEUE_READINESS.md; db/migrations/0032_shadow_run_queued_status_contract.sql; logs/phase-1-execution.log; logs/host-startup-20260804-173000.log",BE/SRE,"Status-contract correction and approved test-db rehearsal are complete (0032; targeted 1/1, DbUp 12/12, recovery 6/6). Requeue readiness/preflight package is prepared. Legacy EXECUTE_PHASE_1_NOW.ps1 is explicitly disallowed. Remains BLOCKED pending approved production VersionSet, fresh Run/Job IDs, and production migration/DBA approval."
diff --git a/docs/CURRENT/PHASE-1_REQUEUE_READINESS.md b/docs/CURRENT/PHASE-1_REQUEUE_READINESS.md
index a322b0d2..34a4b5f7 100644
--- a/docs/CURRENT/PHASE-1_REQUEUE_READINESS.md
+++ b/docs/CURRENT/PHASE-1_REQUEUE_READINESS.md
@@ -16,6 +16,10 @@
 - Job 893 was never started; no historical run may be resumed or mutated.
 - Automatic order, KIS submission, model promotion, rollback automation, and threshold mutation remain disabled.
 
+## Unsafe legacy script
+
+`scripts/EXECUTE_PHASE_1_NOW.ps1` is not an approved execution path and must not be run. Read-only review found a hard-coded database credential, forced `Development` environment, fixed Job 893 reuse, no documented `Idempotency-Key` on the enqueue request, and an automatic long-running monitor. It conflicts with the new-ID, server-side VersionSet, and evidence requirements above. Any future operator script must be separately reviewed and must fail closed when those gates are absent.
+
 ## Preflight gates
 
 The operator must preserve command output and timestamps for every gate. A failed gate stops the procedure.