diff --git a/documentation/TODO__Agents.md b/documentation/TODO__Agents.md
index 15215ac..2e520d0 100644
--- a/documentation/TODO__Agents.md
+++ b/documentation/TODO__Agents.md
@@ -32,6 +32,9 @@
 - **Status:** **ENFORCED**.
 - **Maintenance:** Run `tests/e2e/test_e2e_v3_security_audit.py` after ANY router or registry change.
 
+## 🔑 Credentials / Access Maintenance
+- [ ] **Bitbucket API Token Migration:** Bitbucket is deprecating app passwords — all existing ones become inactive **2026-06-09**. Switch `git` remote auth to an API token before that date. Ref: https://support.atlassian.com/bitbucket-cloud/docs/api-tokens/
+
 ## 🚧 Strategic Goals (V3.5+)
 - [ ] **Pydantic V2 / SQLAlchemy 2.0:** Major framework upgrade for performance and type safety.
     - SQLAlchemy 2.0 is likely the easier migration (additive, legacy mode available).