diff --git a/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md b/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md
index 5b93c5e..8af0142 100644
--- a/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md
+++ b/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md
@@ -122,6 +122,14 @@ CR exec --app gateway.inference.coop -- sh -c \
    grep -c "x-litellm-response-cost-input" /app/.venv/lib/python3.13/site-packages/litellm/proxy/proxy_server.py'
 #    → 1 and 1
 
+# 2b. supply-chain IoC check (standing policy on every LiteLLM image change):
+CR exec --app gateway.inference.coop -- sh -c \
+  'ls /app/.venv/lib/python3.13/site-packages/litellm_init.pth 2>/dev/null; \
+   ls /root/.config/sysmon 2>/dev/null; \
+   ls /tmp/pglog 2>/dev/null; echo IOC-CLEAN'
+#    → must print ONLY "IOC-CLEAN" (no such files). Any hit = stop, quarantine, rotate
+#      the gateway env keys (master + providers live in that env).
+
 # 3. MEMBER-SCOPE key path (master-key tests alone prove nothing — master bypasses
 #    exactly the tables a broken migration empties):
 #    POST /key/generate  {"alias":"upgrade-verify-temp"}   (master auth) → temp key