diff --git a/lib/backup-stack.ts b/lib/backup-stack.ts
index 07aaad0..f1b02e5 100644
--- a/lib/backup-stack.ts
+++ b/lib/backup-stack.ts
@@ -255,12 +255,13 @@ export class BackupStack extends cdk.Stack {
     //
     // Still EXPLICIT-ARN (not tag-based) on purpose: the DynamoDB tables are
     // owned by other stacks, so tagging them here would drift those stacks.
-    // File-share left this account on 2026-09-29 (PLAT-77). Both of its volume
-    // ARNs are out of this selection so a later delete of the retained volume
-    // does not fail the backup job. Tradeoff: if a volume is replaced (new
-    // vol-id) it silently drops from this selection; scheduled drift detection
-    // and the audit re-run are the backstop. Identifiers verified against the
-    // live account 2026-06-03.
+    // vol-054cf918f227d88f6 (file-share, 20 GiB) no longer exists and is out of
+    // this selection. vol-04d951cccacc435b5 stays through the PLAT-77 rollback
+    // hold (RetainUntil 2026-10-06) so that disk keeps its offsite copy. Remove
+    // it when the hold ends. Tradeoff: if a volume is replaced (new vol-id) it
+    // silently drops from this selection; scheduled drift detection and the
+    // audit re-run are the backstop. Identifiers verified against the live
+    // account 2026-06-03.
     //
     // Excluded by intent: the ledgerflow tables — the whole LedgerFlow stack
     // was decommissioned 2026-06-03 (audit Day 4), so they no longer exist.
@@ -292,6 +293,7 @@ export class BackupStack extends cdk.Stack {
         ...[
           "vol-05cb0eb5c145d799b", // SeaHavenIndustries-dev
           "vol-00f05a5a809697ce5", // forgejo
+          "vol-04d951cccacc435b5", // file-share NAS rollback hold until 2026-10-06
           "vol-07094902194638fff", // syslog-server
           "vol-0c2cbe9e71517a517", // Mutual Aid Data
           "vol-0fe224f13812f47e7", // jump box