diff --git a/TODO.md b/TODO.md
index de61383a..6eb04149 100644
--- a/TODO.md
+++ b/TODO.md
@@ -40,6 +40,15 @@ Deferred work. Context: Officer is collapsing from multi-tenant / open-source-re
 
 ## Infra (alpha)
 
+- [ ] **Delete `/etc/systemd/system/officer-vnc.service`.** Hand-installed unit (not in this repo)
+      that ran `vncserver :1 -geometry 1920x1080 -localhost yes -fg` with `Restart=on-failure`,
+      enabled at boot — it kept a whole parallel XFCE session alive on `:1` (283 MB, 166 tasks)
+      independently of the platform, and silently respawned it whenever the display was killed.
+      Obsolete now that the Desktop panel mirrors `:0` via x11vnc. Disabled 2026-07-15
+      (`systemctl disable --now`), but the unit file is still on disk. Nothing in the codebase
+      recreates it and nothing documents it, so delete the file rather than leave a mystery service
+      one `systemctl enable` away from returning.
+
 - [ ] **`ufw` blocks port 9010 on the LAN.** Default deny incoming; only `22/tcp`, `80/tcp`,
       `443/tcp`, and everything on `tailscale0` are allowed — so `http://192.168.47.196:9010` is
       unreachable from the LAN while localhost and Tailscale work.