diff --git a/docs/wfx-audit.md b/docs/wfx-audit.md
new file mode 100644
index 000000000..ee6e5addf
--- /dev/null
+++ b/docs/wfx-audit.md
@@ -0,0 +1,3 @@
+# Dependency audit
+
+Routine supply-chain review notes.