diff --git a/.gitea/workflows/release-dry-run.yml b/.gitea/workflows/release-dry-run.yml
index 1c9e6bf..29905a5 100644
--- a/.gitea/workflows/release-dry-run.yml
+++ b/.gitea/workflows/release-dry-run.yml
@@ -19,7 +19,7 @@ jobs:
 
       - name: Check unresolved placeholders
         run: |
-          ! grep -RInE "PROJECT_NAME|PROJECT_DESCRIPTION|REPOSITORY_OWNER|REPOSITORY_NAME|BUILD_COMMAND|TEST_COMMAND|LINT_COMMAND" -- . --exclude-dir=.git --exclude-dir=node_modules --exclude-dir=.next
+          ! grep -RInE "[P]ROJECT_NAME|[P]ROJECT_DESCRIPTION|[R]EPOSITORY_OWNER|[R]EPOSITORY_NAME|[B]UILD_COMMAND|[T]EST_COMMAND|[L]INT_COMMAND" -- . --exclude-dir=.git --exclude-dir=node_modules --exclude-dir=.next
 
       - name: Setup Node
         uses: actions/setup-node@v4
diff --git a/.gitea/workflows/template-compliance.yml b/.gitea/workflows/template-compliance.yml
index bbf258f..bb970c2 100644
--- a/.gitea/workflows/template-compliance.yml
+++ b/.gitea/workflows/template-compliance.yml
@@ -23,7 +23,7 @@ jobs:
 
       - name: Placeholder scan
         run: |
-          ! grep -RInE "PROJECT_NAME|PROJECT_DESCRIPTION|REPOSITORY_OWNER|REPOSITORY_NAME|PACKAGE_NAME|ARTIFACT_NAME|ARTIFACT_OUTPUT_DIRECTORY" -- AGENTS.md .codex README.md docs .gitea || exit 1
+          ! grep -RInE "[P]ROJECT_NAME|[P]ROJECT_DESCRIPTION|[R]EPOSITORY_OWNER|[R]EPOSITORY_NAME|[P]ACKAGE_NAME|[A]RTIFACT_NAME|[A]RTIFACT_OUTPUT_DIRECTORY" -- AGENTS.md .codex README.md docs .gitea || exit 1
 
       - name: README divider
         run: grep -q "rainbow.png" README.md
diff --git a/AGENTS.md b/AGENTS.md
index 1ec6111..d4a6cb2 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -12,6 +12,7 @@ WatchLink is a Dockerized Next.js + Postgres web app for persistent shared watch
 - Do not commit secrets, `.env` files, private keys, certificates, or tokens.
 - Keep `.codex/project.md` aligned when commands, artifact paths, or release rules change.
 - Do not create a release unless explicitly requested.
+- Create focused tracker issues for real follow-up work that is outside the current scope or independently parallelizable. If Gitea issue access is unavailable, document the follow-up in `docs/agent-handoff.md`.
 - Gitea target: `git.wilkensxl.de/MrSphay/WatchLink`.
 - Docker image target: `git.wilkensxl.de/MrSphay/watchlink:latest`.
 
@@ -49,4 +50,5 @@ docker compose up --build
 
 - `git diff --check` passes.
 - Run the cheapest reliable verification command available in the environment.
+- Independent follow-up work has tracker issues, or `docs/agent-handoff.md` explains why issues could not be created.
 - If a pushed Gitea workflow starts, poll it until success or report a concrete blocker.
diff --git a/docs/agent-handoff.md b/docs/agent-handoff.md
index ab9f41a..c19651a 100644
--- a/docs/agent-handoff.md
+++ b/docs/agent-handoff.md
@@ -7,5 +7,13 @@ Initial implementation created from `codex-agent-repository-kit` guidance.
 ## Notes
 
 - The kit was read and applied as a source template, not kept as a project dependency.
+- The kit was updated to v1.0.2 (`95b47ab`) after initial implementation. The new follow-up issue rule was applied to `AGENTS.md`.
 - npm and Docker were not available in the initial local shell, so dependency installation and Docker verification may need a machine with those tools in PATH.
 - `GITEA_TOKEN` may be available locally, but it must not be printed or committed.
+
+## Follow-ups
+
+- Confirm repository visibility in Gitea and set `MrSphay/WatchLink` to public if it is still private. API verification was blocked by `GITEA_TOKEN` returning 401.
+- Run `npm install`, `npm run typecheck`, `npm run test`, and `npm run build` once npm is available.
+- Build and push `git.wilkensxl.de/MrSphay/watchlink:latest` once Docker is available.
+- Poll Gitea Actions after the next push once API token access is fixed.