diff --git a/LITELLM-KEY-DISTRIBUTION.md b/LITELLM-KEY-DISTRIBUTION.md
new file mode 100644
index 0000000..5d6812a
--- /dev/null
+++ b/LITELLM-KEY-DISTRIBUTION.md
@@ -0,0 +1,56 @@
+# LiteLLM Virtual Key Distribution — Phase 2 Cutover
+## Syslog Solution LLC — July 1, 2026 (keys regenerated)
+
+### Active Agent Keys (Update agent configs with these)
+
+| Agent | LiteLLM Virtual Key | Tier | Budget | Models | Verified |
+|-------|-------------------|------|--------|--------|----------|
+| **Abiba** | `sk-i7F7rCfgpS0oouOTA2LgMw` | enterprise | $1,000 | All 4 | ✅ Jul 1 |
+| **Mumuni** | `sk-XY2aUfvy2BIs6kp1ZPh6VA` | enterprise | $1,000 | All 4 | ✅ Jul 1 |
+| **Tanko** | `sk-3ZsdWJbbNSo9zSnJN2OsJw` | enterprise | $1,000 | All 4 | ✅ Jul 1 |
+| **Kagenz0** | `sk-VYKRAVYEG1rKVEMDKEUggg` | enterprise | $1,000 | All 4 | ✅ Jul 1 |
+| **Koby** | `sk-gWDaPAp-FavgKdqKJpzqhQ` | professional | $500 | All 4 | ✅ Jul 1 |
+| **Koonimo** | `sk-1kLC8ZxW-tEZueV3NU4rCQ` | professional | $500 | All 4 | ✅ Jul 1 |
+
+### Configuration Changes Required Per Agent
+
+Each agent must update their `OPENAI_API_BASE` and `OPENAI_API_KEY`:
+
+```
+OPENAI_API_BASE=http://192.168.68.116/v1
+OPENAI_API_KEY=<agent's LiteLLM key from table above>
+```
+
+### LiteLLM Admin Access
+
+| Resource | Key |
+|----------|-----|
+| LiteLLM Admin UI | http://192.168.68.116/ui/ (Authentik SSO — pending) |
+| LiteLLM Master Key | `sk-litellm-7f96080dd99b15c36bd4b333b58a6796` |
+| Router Admin Key | `sk-admin-ee09fffd04978b61a1569ac670c68814` |
+
+### Fallback (if LiteLLM fails)
+
+If LiteLLM is down, NGINX automatically falls back to the router on :9000.
+In that case, agents can also directly use:
+```
+OPENAI_API_BASE=http://192.168.68.116/v1
+OPENAI_API_KEY=<agent's original sk-syslog-* key>
+```
+(Only works when NGINX @router_fallback is active)
+
+### Deprecated Router Keys
+
+These keys still work through the @router_fallback but NOT through LiteLLM:
+- sk-syslog-abiba, sk-syslog-mumuni, sk-syslog-tanko
+- sk-syslog-kagenz0, sk-syslog-koby, sk-syslog-koonimo
+- sk-starter-abc123, sk-professional-xyz789
+- sk-syslog-local-master-key
+
+These have been fully revoked as of July 1, 2026.
+
+### Key Rotation History
+
+- **2026-07-01**: Keys regenerated for Abiba, Kagenz0, Koby, Koonimo (old values unrecoverable).
+  Mumuni and Tanko keys confirmed working, left unchanged. All blocked/stale keys purged.
+- **2026-06-17**: Initial key creation (values in this doc were placeholder/incorrect).