diff --git a/doorman/doorman.pl b/doorman/doorman.pl
index 02d6587..4ddeaae 100644
--- a/doorman/doorman.pl
+++ b/doorman/doorman.pl
@@ -34,8 +34,8 @@ my $rsyslog = "/usr/bin/logger";
 # Card IDs that bypass network auth
 my %backdoors = (
 
-  "0000000001" => 'Charles NW',
-  "0000000002" => 'Josef C',
+  "REDACTED-BADGE-1" => 'Charles NW', # badge ID redacted 2026-09-03 — real IDs live in private KNEL/access-roster
+  "REDACTED-BADGE-2" => 'Josef C', # redacted 2026-09-03
 
 );