diff --git a/SCRATCH/session-status-mar29-evening.md b/SCRATCH/session-status-mar29-evening.md
index 3f74097..15d5698 100644
--- a/SCRATCH/session-status-mar29-evening.md
+++ b/SCRATCH/session-status-mar29-evening.md
@@ -27,13 +27,20 @@
 - [ ] Fix outbound NAT — orphaned interface references from config import
 - [ ] Verify LXCs on ZPACK_LAN can reach internet
 
+### Proxmox API token for container provisioning
+- [ ] Create user `zlh-automation@pve` on new host
+- [ ] Create API token — save it
+- [ ] Assign role with VM.Allocate, VM.Config.*, Datastore.AllocateSpace, Sys.Console at path `/`
+- [ ] Update token in zpac-api .env file
+- NOTE: Proxmox 9 REST API is backwards compatible with PVE 8 — no code changes needed
+
 ### zpac-api (9020) — needs services installed
 - [ ] Install Node 22, MariaDB, Redis
 - [ ] Import DB dump from /opt/databases/
 - [ ] Restore Redis dump
 - [ ] npm install
 - [ ] npx prisma generate
-- [ ] Update .env with new host IPs
+- [ ] Update .env with new host IPs + new Proxmox API token
 - [ ] Start and verify API responds
 
 ### zpac-portal (9021)