diff --git a/INTENT.md b/INTENT.md
index c3b8fe6..0b994d5 100644
--- a/INTENT.md
+++ b/INTENT.md
@@ -64,3 +64,9 @@ round trip needed for this run.
 The glas-harness adapter (`glas_harness/reins/rein_openweights.py`,
 mirroring `reins/rein_aharness.py`) now exists and is what performed
 this run.
+
+**Follow-up tracked in glas-harness:** `GLAS-WP-0002-T02` — the OpenBao
+AppRole/vault credential path (`credentials.py`'s `_acquire_token`/`bao
+kv get` branch) is only unit-tested against mocked `bao` calls; it needs
+a real (or realistic sandboxed) AppRole and a live run with
+`OPENROUTER_API_KEY` unset to prove the vault round trip actually works.