diff --git a/TODO.md b/TODO.md
index fc94648..f74ae68 100644
--- a/TODO.md
+++ b/TODO.md
@@ -26,7 +26,8 @@ runs make check on main.
 - 2026-09-28: `docker stop` no longer kills the daemon 2 seconds after the
   stop signal: the entrypoint switches to the `routewatch` user with
   `setpriv` instead of `runuser`, so the daemon receives the signal itself
-  and gets its full 60 seconds to shut down (closes #33)
+  and gets the whole wait `docker stop` allows, up to its own 60-second
+  limit (closes #33)
 - 2026-09-28: ready to run under upaas: a set but invalid `PORT`,
   `XDG_DATA_HOME` or `MALLOC_ARENA_MAX` stops the start, the health
   check follows `PORT`, README "Running under upaas" section (closes