diff --git a/local/docs/DRIVER-MANAGER-MIGRATION-PLAN.md b/local/docs/DRIVER-MANAGER-MIGRATION-PLAN.md
index 45df7752c9..0908669e46 100644
--- a/local/docs/DRIVER-MANAGER-MIGRATION-PLAN.md
+++ b/local/docs/DRIVER-MANAGER-MIGRATION-PLAN.md
@@ -91,7 +91,7 @@ declared open, and adds a driver-by-driver audit. Commit `31bbe2fa12`.
 | P3 item (v4.0) | v4.1 resolution |
 |---|---|
 | Quirk lifecycle phases (`phase = "early"|"enable"`) | Driver probe consults `QuirkPhase::Early` before channel open; gates `WRONG_CLASS` / `BROKEN_BRIDGE` → `NotSupported`. PM phases remain out of scope (plan § P3). |
-| AER recovery dispatch to bound drivers | Auto-dispatch wired: `unified_events::Aer` → `route_to_driver` → `dispatch_recovery` (shared with `/recover` scheme endpoint). `RecoveryAction::Handled`/`Fatal` are no-ops; `ResetDevice`/`RescanBus` execute. |
+| AER recovery dispatch to bound drivers | Manager-level auto-dispatch wired: `unified_events::Aer` → `route_to_driver` → `dispatch_recovery` (shared with `/recover` scheme endpoint). `RecoveryAction::Handled`/`Fatal` are no-ops; `ResetDevice`/`RescanBus` execute. **Not** the `Driver::on_error` trait callback (which `DriverConfig` does not override) — that's a separate driver-IPC item, still open. |
 | Per-vendor firmware packaging | `fetch-firmware.sh` already supports `--vendor {amd,intel} --subset {all,rdna,dmc,wifi,bluetooth}`; the linux-firmware-split per-vendor recipe split is a packaging decision deferred to C4 (no correctness gap). |
 
 Plus an honest-absence fix in `redox-driver-core::modern_technology`: