diff --git a/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs b/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs
index e44d9231..637fb3c5 100644
--- a/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs
+++ b/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs
@@ -28,7 +28,7 @@ public class GetShadowRunPollingEndpoint : Endpoint<GetShadowRunPollingRequest,
     public override void Configure()
     {
         Get("/shadow-runs/{RunId}");  // RoutePrefix "api" added automatically in Program.cs
-        Roles("Admin", "Analyst");  // RBAC: Only Admin or Analyst can poll
+        Roles("Admin", "Analyst", "Researcher");  // RBAC: Admin, Analyst, or Researcher can poll (Gate 3 testing)
     }
 
     public override async Task HandleAsync(GetShadowRunPollingRequest req, CancellationToken ct)