diff --git a/obsidian/Crussell/plans/p11-square-web-payments-sdk.md b/obsidian/Crussell/plans/p11-square-web-payments-sdk.md
index bf40e6e..5e5633d 100644
--- a/obsidian/Crussell/plans/p11-square-web-payments-sdk.md
+++ b/obsidian/Crussell/plans/p11-square-web-payments-sdk.md
@@ -117,5 +117,5 @@ All 8 flows render `SquareCardInput` and send the resulting `cnon:xxx` as `new_c
 - [x] `CardEntryUnavailable` kept only as the no-credentials fallback
 - [x] Backend nonce paths verified unchanged (Step 4/5 done)
 - [x] Frontend checks pass: svelte-check 0 errors, eslint 0 errors, build succeeds
-- [ ] Sandbox smoke test (requires Square sandbox credentials): new-card payment succeeds end-to-end
+- [ ] Sandbox smoke test (BLOCKED — no real Square credentials available; must run before any production flip): new-card tokenization → payment → saved card → refund → reconcile, exercised against a real Square endpoint
 - [x] Docs updated (README, Gap Backlog, Feature Catalog, Technical Manual)