diff --git a/docs/manual-checklist.md b/docs/manual-checklist.md
index d5eb669..9922d94 100644
--- a/docs/manual-checklist.md
+++ b/docs/manual-checklist.md
@@ -18,7 +18,7 @@ Do these once, in order, after `scripts/run.sh` has completed. Tick and date.
 
 ## Apps needing a first-launch grant
 - [ ] Launch **Rectangle** once -> grant Accessibility when prompted. Set your snap keys.
-- [ ] Launch **kitty** once. Gatekeeper prompt -> Open.
+- [ ] Launch **kitty** once. Gatekeeper prompt -> Open. **Local Network prompt -> Allow** (or System Settings > Privacy & Security > Local Network > kitty ON). Symptom if missed: `ssh 192.168.0.x` says `No route to host` in kitty while Terminal works — macOS 15+ returns EHOSTUNREACH to LAN IPs for apps without the grant.
 - [ ] Launch **Tailscale** -> log in to the tailnet. Confirm `tailscale status` in kitty and that `ssh mac` from bebop resolves via MagicDNS later.
 - [ ] Gitea: `cat ~/.ssh/id_ed25519.pub` -> https://git.sethpc.xyz/user/settings/keys -> Add Key. Then `git clone git@git.sethpc.xyz:Seth/mac.git` works from the Mac if you ever want to edit there.