diff --git a/TODO.md b/TODO.md
new file mode 100644
index 0000000..8c1405c
--- /dev/null
+++ b/TODO.md
@@ -0,0 +1,41 @@
+# Status
+
+pre-1.0
+
+No git tags. The site is live, but the repo lacks the standard scaffold
+(Makefile, LICENSE, Dockerfile, policy files).
+
+# Next Step
+
+Add the policy scaffold in one commit: Makefile with Hugo-appropriate
+targets (test builds the site with hugo --minify, lint/fmt/fmt-check via
+prettier over content and theme, check, hooks), .prettierrc and
+.prettierignore, LICENSE, REPO_POLICIES.md, .editorconfig, and a
+Dockerfile plus .dockerignore that builds the site and runs make check,
+images pinned by sha256. Update README to mention the new workflow.
+
+# Completed Steps
+
+* 2026-02-10: design pass: minimal light theme with inline CSS, grey
+    wells for mesh channels and signal groups, horizontal overflow fix,
+    body width tuning, map link update
+* 2026-02-10: added README and footer contribute link
+* 2026-02-10: added Gitea workflow that builds the site and deploys to
+    Cloudflare Pages
+* 2026-02-08: initial Hugo static site for lora.vegas
+
+# Future Steps
+
+* Add .gitea/workflows/check.yml that runs make check; pin the images
+    and actions in deploy.yml by sha256 (klakegg/hugo:ext-alpine,
+    node:20, actions/checkout, upload/download-artifact are all
+    unpinned)
+* Rework README.md into the standard sections: Description, Getting
+    Started, Rationale, Design, TODO, License, Author (currently About,
+    Contributing, Technical Details, License)
+* Replace the "content is provided as-is" README note with the text of
+    the committed LICENSE
+* Expand .gitignore beyond Hugo outputs (OS and editor files)
+* Verify the Cloudflare Pages deploy still works after the workflow
+    changes
+* Keep mesh channel and signal group listings current