diff --git a/graph/workflows/scheduled-task-backlog-triage-2026-03-04t091529-0600-6c9684.md b/graph/workflows/scheduled-task-backlog-triage-2026-03-04t091529-0600-6c9684.md
new file mode 100644
index 00000000000..46c6fbf5c22
--- /dev/null
+++ b/graph/workflows/scheduled-task-backlog-triage-2026-03-04t091529-0600-6c9684.md
@@ -0,0 +1,24 @@
+---
+id: 6c9684a1-8996-41f2-a826-ed38e8400f50
+type: workflow
+title: "Scheduled task: backlog-triage (2026-03-04T09:15:29-06:00)"
+tags: [scheduled-task, backlog-triage, automation]
+importance: 0.4
+confidence: 0.8
+created: "2026-03-04T15:16:57.376928+00:00"
+updated: "2026-03-04T15:16:57.376928+00:00"
+---
+
+---
+
+### Triage Summary — 2026-03-04
+
+**Total open issues:** ~86 across 7 repos (including 2 open PRs in claude-home)
+
+---
+
+#### High Priority
+
+- **[paper-dynasty-card-creation#2]** Hardcoded API bearer token in `db_calls.py` (also duplicated in ops script) — credentials in source, security risk
+- **[paper-dynasty-card-creation#3]** Hardcoded Supabase service-role JWT in `scripts/supabase_doodling.py` — bypasses RLS, full DB access
+- **[major-domo-database#19]** Hardcoded Discord webhook URL (in