diff --git a/TODO b/TODO
index 3ffb15043..5b59291aa 100644
--- a/TODO
+++ b/TODO
@@ -1,3 +1,7 @@
+-- make camget and/or pkg/schema sanity-check all the "file" and "directory"
+   names, to make sure they don't have path separators in them, "..", etc.
+   Use Basename/Clean/etc.
+
 -- rename sha1.New() to blobref.NewHash() and
    blobref.SHA1FromString(string) to blobref.FromString(string), and
    add blobref.FromHash(hash.Hash) (using reflect.TypeOf to find