diff --git a/.github/ISSUE_TEMPLATE/user-feedback.md b/.github/ISSUE_TEMPLATE/user-feedback.md
new file mode 100644
index 0000000..549be69
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/user-feedback.md
@@ -0,0 +1,26 @@
+---
+name: User feedback
+about: Create a report to help us improve
+title: "[User Feedback] <replace-with-feedback-title>"
+labels: ''
+assignees: ''
+
+---
+
+## What happened
+
+**Task:** <!-- e.g., "Set up MFA on patient records" -->
+
+**Skill said:** <!-- e.g., "Use auth.jwt()->'app_metadata' in the RLS policy" -->
+
+**Expected:** <!-- e.g., "The function also needs SECURITY DEFINER + grant to supabase_auth_admin" -->
+
+## Source
+
+**File:** <!-- e.g., references/security-model.md -->
+
+**Section:** <!-- e.g., "Trust Boundaries > user_metadata vs app_metadata" -->
+
+## Fix suggestion
+
+<!-- Leave blank if unsure -->