diff --git a/hub/internal/web/hosts.go b/hub/internal/web/hosts.go
index fc99529..5e56b8c 100644
--- a/hub/internal/web/hosts.go
+++ b/hub/internal/web/hosts.go
@@ -394,7 +394,7 @@ func (s *Server) handleHostDelete(w http.ResponseWriter, r *http.Request, hostID
 		http.Error(w, "Confirmation does not match the host id — nothing deleted.", http.StatusBadRequest)
 		return
 	}
-	deleteEscrow := true // RED-PROOF 2: escrow-ack check dropped
+	deleteEscrow := r.FormValue("delete_escrow") == "1"
 	if err := s.store.DeleteHost(hostID, deleteEscrow); err != nil {
 		if errors.Is(err, store.ErrHostEscrowPresent) {
 			s.logger.Printf("[WARN] host delete refused: %s has key escrow (acknowledgement missing)", hostID)