diff --git a/docs/how-to/agent-change-process.md b/docs/how-to/agent-change-process.md
index 0b6956e..236d9d3 100644
--- a/docs/how-to/agent-change-process.md
+++ b/docs/how-to/agent-change-process.md
@@ -1,6 +1,7 @@
 ---
 title: Agent Change Process
 modified: 2026-02-20
+last-reviewed: 2026-02-22
 tags:
   - how-to
   - ai
diff --git a/docs/how-to/authentik/build-authentik-container.md b/docs/how-to/authentik/build-authentik-container.md
index ed9acf7..6b3ab57 100644
--- a/docs/how-to/authentik/build-authentik-container.md
+++ b/docs/how-to/authentik/build-authentik-container.md
@@ -1,6 +1,7 @@
 ---
 title: Build Authentik Container Image
 modified: 2026-02-20
+last-reviewed: 2026-02-22
 tags:
   - how-to
   - authentik
diff --git a/docs/how-to/authentik/create-authentik-secrets.md b/docs/how-to/authentik/create-authentik-secrets.md
index be9ed34..1e6e07d 100644
--- a/docs/how-to/authentik/create-authentik-secrets.md
+++ b/docs/how-to/authentik/create-authentik-secrets.md
@@ -1,6 +1,7 @@
 ---
 title: Create Authentik Secrets
-modified: 2026-02-20
+modified: 2026-02-22
+last-reviewed: 2026-02-22
 tags:
   - how-to
   - authentik
@@ -25,6 +26,7 @@ Create the 1Password item that the ExternalSecret references for Authentik confi
 ## Notes
 
 - The database password in this 1Password item is the same one used by the CNPG managed role via `external-secret-authentik.yaml`. Both the database ExternalSecret and the future Authentik deployment ExternalSecret reference the same 1Password item but different fields.
+- The 1Password item has since grown with OIDC client secrets (`grafana-client-secret`, `forgejo-client-secret`, `zot-client-secret`, `jellyfin-client-secret`) and an `api-token` field, added during subsequent service integrations.
 
 ## Related