diff --git a/kiosk/src/firmware.rs b/kiosk/src/firmware.rs
index 918c5ec..7bc0056 100644
--- a/kiosk/src/firmware.rs
+++ b/kiosk/src/firmware.rs
@@ -52,8 +52,10 @@ pub struct CheckResponse {
 
 #[derive(Debug, Clone, Deserialize)]
 pub struct UpdateInfo {
+    #[allow(dead_code)] // surfaced for logging / future rollout coordination
     pub release_id: String,
     pub version: String,
+    #[allow(dead_code)] // surfaced for logging
     pub channel: String,
     pub sha256: String,
     pub signature: String,
diff --git a/kiosk/src/local_server.rs b/kiosk/src/local_server.rs
index 1d928df..a939cdb 100644
--- a/kiosk/src/local_server.rs
+++ b/kiosk/src/local_server.rs
@@ -38,6 +38,9 @@ use crate::WorkerMsg;
 pub struct LocalServerState {
     pub local_key: String,
     pub server_url: String,
+    /// Held for future kiosk-auth proxy paths (currently the proxy forwards
+    /// the caller's own Bearer, so kiosk_key isn't read on hot path).
+    #[allow(dead_code)]
     pub kiosk_key: String,
     /// Channel into the kiosk UI worker so layout-switch requests reach the
     /// GTK main loop. Wrapped in Mutex<Option<_>> so the state struct stays