diff --git a/docker-compose.infra.yml b/docker-compose.infra.yml
index ced9e3b9..9237ebf2 100644
--- a/docker-compose.infra.yml
+++ b/docker-compose.infra.yml
@@ -65,6 +65,7 @@ services:
       timeout: 5s
       retries: 10
 
+  # dev-only: no-auth on 0.0.0.0:7233; production must gate via mTLS or API key
   temporal:
     image: temporalio/auto-setup:1.25
     depends_on: