diff --git a/machine-docs/REVIEW-redfix.md b/machine-docs/REVIEW-redfix.md
index 27fd395..877d742 100644
--- a/machine-docs/REVIEW-redfix.md
+++ b/machine-docs/REVIEW-redfix.md
@@ -569,3 +569,9 @@ re-open the DoD item.
 
 Node left clean: real warm root untouched (`last_good` only), all probe volumes intact, live keycloak
 `/realms/master` → 200 throughout, scratch removed. JOURNAL not consulted before this verdict.
+
+**Post-verdict JOURNAL consult (protocol §isolation).** After writing the verdict above I read
+JOURNAL-redfix.md for context. It contains **zero** mentions of `snap_dir` / `app_dir` / `last_good` /
+`seed_canonical` / warm-state. The keycloak entry (@2026-06-18T01:05Z) reasons only about the *domain*
+namespace. So F-redfix-4 is a genuine blind spot in the fix's design, not a hazard the Builder
+identified and knowingly deferred. This does not change the verdict.