diff --git a/TODOS.md b/TODOS.md
index 337ab5f71..20753b347 100644
--- a/TODOS.md
+++ b/TODOS.md
@@ -545,6 +545,18 @@ coverage fill. Remaining, in rough priority order:
 - **P3 — codex-e2e-plan-format's testIfSelected names have no map keys**
   (run-all only today) + 15 E2E / 2 judge PHANTOM touchfiles keys select
   tests that exist nowhere — add keys or delete, one sweep. Effort S.
+- **P2 — first-execution rot found by the sliced lane's first live run**
+  (PR #2721): (a) `skill-e2e-skillify` "provenance-refusal" fails
+  deterministically (CI x2 + local) — its child reports "The skillify skill
+  is not registered in this environment"; the test's `HOME: workDir` env
+  override breaks project-skill registration under the hermetic env while
+  its 5 sibling tests (same fixture, no HOME override) load skills fine.
+  Start by diffing the passing siblings' env. (b)
+  `skill-e2e-session-intelligence` "context-restore loads latest" failed
+  twice in CI but passes locally (4/4) — CI-container/stochastic shape;
+  watch across runs. (c) `tpa-apple-ban` failed only on retry attempt 2 —
+  flake watch. All three are the coverage contract WORKING (these files ran
+  in no CI lane before). Effort S each.
 - **P3 — duration-weighted slice assignment** if parity data shows slice
   walls diverging >1.5x (round-robin today; eval-store durations exist).
   Effort S.