diff --git a/cameleer-server-app/src/main/java/com/cameleer/server/app/runtime/DeploymentExecutor.java b/cameleer-server-app/src/main/java/com/cameleer/server/app/runtime/DeploymentExecutor.java
index 4ffc6ea9..01b5d134 100644
--- a/cameleer-server-app/src/main/java/com/cameleer/server/app/runtime/DeploymentExecutor.java
+++ b/cameleer-server-app/src/main/java/com/cameleer/server/app/runtime/DeploymentExecutor.java
@@ -134,6 +134,9 @@ public class DeploymentExecutor {
         try {
             App app = appService.getById(deployment.appId());
             Environment env = envService.getById(deployment.environmentId());
+            // TODO Task 11: replace with signed download URL via ArtifactDownloadController.
+            //   This leaks the filesystem locator out of ArtifactStore — tactical bridge until
+            //   the loader-init-container pattern lands.
             String jarPath = appService.getVersion(deployment.appVersionId()).jarPath();
             String generation = generationOf(deployment);