diff --git a/CLAUDE.md b/CLAUDE.md
index 9b5f091..d3c2dfb 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -55,6 +55,13 @@ per-project narrative in `../scadaproj/.claude/skills/sister-project-history/<pr
 (create `mxaccessgateway.md` there if this gateway ever needs one) and shared-library history
 in `../scadaproj/<lib>/CLAUDE.md`.
 
+> ⛔ **Wonder box remote access (2026-09-11): no `psbridge`, no `winrm`.** Both skills are retired/disabled —
+> the WinRM remote-exec channel set off the security software on the wonder boxes (vd03/vq03/vq04). Do not
+> run remote commands (service control, publish/swap, PowerShell) on those boxes and do not stand up a
+> replacement channel until the user clears one. Still allowed: UNC/SMB file copies and logging directly
+> into the SQL Servers. Deploy steps that need a command on the box are blocked; see the umbrella
+> [`../scadaproj/CLAUDE.md`](../scadaproj/CLAUDE.md) for the current hold.
+
 ## Build, Test, Run
 
 ```powershell