diff --git a/BACKLOG.md b/BACKLOG.md
index fae6315..fb51415 100644
--- a/BACKLOG.md
+++ b/BACKLOG.md
@@ -538,8 +538,10 @@ Tickets DC-046 through DC-049 implement pluggable auth + email magic link. Sami
 ### DC-150: WireGuard invites (QR) + client config
 - **status:** todo
 - **details:** one-time token (7d TTL, single-use) → redemption page. Client
-  keypair generated IN THE BROWSER (WebCrypto X25519, ECDSA-P256 fallback);
-  server receives the public key only, registers the peer /32, returns config
+  keypair generated IN THE BROWSER via WebCrypto X25519 ONLY — NO fallback
+  algorithm; browsers lacking X25519 get an explicit unsupported-browser
+  failure. Server receives the public key only, registers the peer /32,
+  returns config
   (Address, DNS=10.53.0.1, hub PublicKey, AllowedIPs=10.53.0.0/16 — a CIDR,
   never a DNS zone). Config + QR rendered client-side; private key never
   transits or rests on the server. Tests: token lifecycle, single-use