diff --git a/TODO.org b/TODO.org
index e6cb60ad..ccaa82c0 100644
--- a/TODO.org
+++ b/TODO.org
@@ -1380,7 +1380,8 @@ through a pointer into it is answerable; memcheck is told the same fact, so the
 same read is reported. The two stay two claims — different tools reaching
 different people.
 
-** TODO The leak question across the corpus
+** NEXT The leak question across the corpus
+Decided 2026-09-25: one pass over the whole corpus with LeakSanitizer and memcheck's leak check on. Memory an allocator holds by design is set aside; memory nothing owns is a leak and is fixed. The sweeps' default stays leak-checking off.
 Both sweeps run with leak checking off, because allocate-once-never-free is this
 runtime's design and a leak check produces a suppression list. A green sweep
 therefore says nothing about who frees the newly allocating =(bytes s)=. Worth