diff --git a/plugins/qca-gnupg/TODO b/plugins/qca-gnupg/TODO
new file mode 100644
index 00000000..dd99cb92
--- /dev/null
+++ b/plugins/qca-gnupg/TODO
@@ -0,0 +1 @@
+don't write stdin to signing until status channel says it is okay