diff --git a/.jules/sentinel.md b/.jules/sentinel.md
new file mode 100644
index 0000000..c983238
--- /dev/null
+++ b/.jules/sentinel.md
@@ -0,0 +1,4 @@
+## 2025-04-08 - Remove Hardcoded Password in Test Comments
+**Vulnerability:** Hardcoded password for an encrypted PDF found in test comments (`tests/inference_test.py`).
+**Learning:** Developers often leave credentials in comments for convenience in test files, underestimating the risk of leaking sensitive information or personal passwords.
+**Prevention:** Avoid committing sensitive credentials or personal passwords in any code artifacts, including comments and tests. Use environment variables or secure vault integrations instead if testing with protected data is required.
\ No newline at end of file
diff --git a/tests/inference_test.py b/tests/inference_test.py
index 62b9474..debb37b 100644
--- a/tests/inference_test.py
+++ b/tests/inference_test.py
@@ -44,7 +44,6 @@ def test_mutlinline(tmp_path):
 
 
 def test_encrypted_failure(tmp_path):
-    # Reminder to future Joe: password for encrypted PDF is "kanbanery"
     output_path = tmp_path / "output.pdf"
 
     with pytest.raises(commonforms.exceptions.EncryptedPdfError):