diff --git a/backlog.tasks b/backlog.tasks
index b7cd0e3..3a3eb14 100644
--- a/backlog.tasks
+++ b/backlog.tasks
@@ -58,5 +58,6 @@ Maintenance:
     ✔ Check whether publish job is only run on tags, if not, guard it @done
     ✔ Gate only single steps @done
         ✔ Do not publish to npm, if NPM_TOKEN is not set (e.g. PRs from forks) @done
-        ✔ Do not publish to Gitea, if GITEA_TOKEN is not set (e.g. PRs from forks) @done
+        ✔ Do not publish to Gitea — uses the run's automatic `github.token`, so no secret gate is needed @done
         ✔ Otherwise run the steps @done
+        ✔ Fail the job unless both the Gitea release and npm publish succeeded @done