diff --git a/docs/todo.md b/docs/todo.md
new file mode 100644
index 0000000..5223976
--- /dev/null
+++ b/docs/todo.md
@@ -0,0 +1,3 @@
+# TODO
+
+- [ ] Make pi-workflow verification tolerate inaccessible sibling Git worktrees. `GitStateProbe.captureRepository()` currently enumerates every path from `git worktree list --porcelain` and fails the verification command before execution when any unrelated worktree cannot be inspected. Preserve detection of cross-worktree mutations without making unrelated worktrees a hard verification dependency. Add focused coverage for an inaccessible registered sibling worktree.