diff --git a/tools/ci/playbook-quit-check.sh b/tools/ci/playbook-quit-check.sh
index 87f12f07d..a75542dbf 100755
--- a/tools/ci/playbook-quit-check.sh
+++ b/tools/ci/playbook-quit-check.sh
@@ -29,8 +29,15 @@ fi
 # 15:30 UTC: a job script never pauses or resumes the installed app's miners through /api/pause or /api/resume, not even
 # as a fallback with a finally block (a script that dies before its finally leaves the box paused unattended); the
 # job runner's --stop-miners is the sanctioned way (it stops them around the job and restarts them on any exit).
-ALLOW='^(packaging/windows/stop-igneum\.ps1|relay/playbooks/ember-tune-pc1\.ps1|tools/proving-v1/pc2-agg-cost\.ps1|tools/proving-v1/pc2-agg-cost-restore\.ps1)$'   # 6 October 2026 (0.3.14 gate): the three allowed pending the agg-cost --stop-miners change and the Ember playbook's rewrite (the coordinator's 15:30Z ruling)
+ALLOW='^(packaging/windows/stop-igneum\.ps1|relay/playbooks/ember-tune-pc1\.ps1|tools/proving-v1/pc2-agg-cost\.ps1|tools/proving-v1/pc2-agg-cost-restore\.ps1)$'   # 6 October 2026 (0.3.14 gate): the three allowed pending the agg-cost --stop-miners change and the Ember playbook's rewrite (the coordinator's 15:30Z ruling); EXPIRES 0.3.15 (the check below fails the tree at 0.3.15 or later while they stand)
 fail=0
 while IFS= read -r f; do [[ "$f" =~ $ALLOW ]] && continue; check_file "$f" || fail=1; done < <(git ls-files 'relay/playbooks/**' 'tools/windows/**' 'tools/proving-v1/**' 'packaging/**' | grep -E '\.(ps1|sh)$')
+# expiry of the dated allow entries (6 October 2026): at 0.3.15 or later the three must be gone from ALLOW
+ver="$(sed -n 's/^version = "\(.*\)"/\1/p' app/igneum-app/Cargo.toml 2>/dev/null | head -1)"
+if [ -n "$ver" ] && [ "$(printf '%s\n0.3.15\n' "$ver" | sort -V | head -1)" = "0.3.15" ]; then
+  for e in relay/playbooks/ember-tune-pc1.ps1 tools/proving-v1/pc2-agg-cost.ps1 tools/proving-v1/pc2-agg-cost-restore.ps1; do
+    case "$ALLOW" in *"${e//./\\.}"*) echo "playbook-quit: the allow entry for $e expired at 0.3.15 (the tree says $ver): the pause/resume rule applies to it now"; fail=1 ;; esac
+  done
+fi
 [ "$fail" = 0 ] && echo "playbook-quit: no playbook quits, pauses or resumes the installed app"
 exit $fail