diff --git a/include/config.h b/include/config.h
index f071c3e..5383b56 100644
--- a/include/config.h
+++ b/include/config.h
@@ -35,10 +35,13 @@
 #define JAM_BITRATE_KBPS 250.0f        // baseband / channel filter context for RadioLib begin()
 #define JAM_FREQ_DEV_KHZ 380.0f        // default passed to begin(); per-radio deviation applied after init
 #define JAM_RX_BW_KHZ    812.0f        // wide RX BW for begin()
-// GDO0 toggle rate during jam (1 MHz timer tick).
-// 1 MHz LFSR in OOK mode → AM spectrum main lobe spans ±1 MHz around carrier → covers 314–316 MHz on R1.
-// 1 MHz LFSR in 2-FSK + 380 kHz dev on R2 → total spread: ~432.1–434.8 MHz → covers all of 433–433.92 MHz.
-#define JAM_LFSR_KEY_HZ    1000000
+// GDO0 toggle rate during jam.
+// 500 kHz (2 µs period = 480 ESP32-S3 cycles) leaves ~60% headroom over ISR overhead (~200 cycles),
+// preventing the interrupt storm / WDT boot-loop that 1 MHz caused (240 cycles < ISR overhead).
+// OOK on R1: ±500 kHz main lobe around 315 MHz + strong sidebands covering 314–316 MHz.
+// 2-FSK 380 kHz dev on R2: tone pair 433.08/433.84 MHz + 250 kHz sideband spread → 432.8–434.1 MHz,
+// fully covering the 433–433.92 MHz band.
+#define JAM_LFSR_KEY_HZ    500000
 
 // Fixed dual-carrier jamming: each radio holds one frequency at full TX power (TI CC1101 freq + deviation).
 // Many NA ~315 MHz RKE remotes are ASK/OOK (see TI CC1101 datasheet MDMCFG2.MOD_FORMAT). Jam path uses OOK on