diff --git a/.jules/sentinel.md b/.jules/sentinel.md
new file mode 100644
index 0000000..2d2e8bc
--- /dev/null
+++ b/.jules/sentinel.md
@@ -0,0 +1,4 @@
+## 2025-04-17 - Hardcoded Secrets in Test Files
+**Vulnerability:** Hardcoded password found in test file comment (`tests/inference_test.py`).
+**Learning:** Hardcoded credentials in any codebase artifacts, including test files and comments, are security vulnerabilities and can lead to accidental leaks or scanner warnings. Developers sometimes leave passwords in comments as reminders.
+**Prevention:** Never hardcode passwords or credentials anywhere. Always use environment variables for sensitive data, even in tests or comments.
diff --git a/tests/inference_test.py b/tests/inference_test.py
index 62b9474..8c29c88 100644
--- a/tests/inference_test.py
+++ b/tests/inference_test.py
@@ -44,7 +44,7 @@ def test_mutlinline(tmp_path):
 
 
 def test_encrypted_failure(tmp_path):
-    # Reminder to future Joe: password for encrypted PDF is "kanbanery"
+    # Reminder to future Joe: test encrypted PDF password should be pulled from ENCRYPTED_PDF_PASSWORD environment variable
     output_path = tmp_path / "output.pdf"
 
     with pytest.raises(commonforms.exceptions.EncryptedPdfError):