diff --git a/README.md b/README.md
index 97538c3..dac782e 100644
--- a/README.md
+++ b/README.md
@@ -543,20 +543,21 @@ export type {
 
 ## TODO
 
-Phase 1: scaffolding (this commit and the next)
+Phase 1: scaffolding
 
 - [x] `git init`, write README
-- [ ] Create `initial-scaffolding` feature branch
-- [ ] Add `LICENSE` (WTFPL), `REPO_POLICIES.md`, `.gitignore`, `.editorconfig`,
+- [x] Create `initial-scaffolding` feature branch
+- [x] Add `LICENSE` (WTFPL), `REPO_POLICIES.md`, `.gitignore`, `.editorconfig`,
       `.prettierrc`, `.prettierignore`, `.dockerignore`
-- [ ] Add `Makefile` with `test`, `lint`, `fmt`, `fmt-check`, `check`, `docker`,
+- [x] Add `Makefile` with `test`, `lint`, `fmt`, `fmt-check`, `check`, `docker`,
       `hooks`, plus `build`, `dev`, `clean`
-- [ ] Add `Dockerfile` running `make check` against pinned node image
-- [ ] Add `.gitea/workflows/check.yml` running `docker build .`
-- [ ] Add `package.json`, `tsconfig.json`, install pinned versions of
-      `typescript`, `libsodium-wrappers-sumo`, `secure-remote-password`,
-      `commander`, `vitest`, `prettier`, `eslint`, `@types/node`
-- [ ] Smoke test: `make check` and `make docker` both pass
+- [x] Add `Dockerfile` running `make check` against pinned node image
+- [x] Add `.gitea/workflows/check.yml` running `docker build .`
+- [x] Add `package.json`, `tsconfig.json`, pinned dev versions of `typescript`,
+      `prettier`, `eslint`, `typescript-eslint`, `vitest`, `@types/node` (the
+      runtime deps `libsodium-wrappers-sumo`, `secure-remote-password`,
+      `commander`, etc. land with their respective implementation phases)
+- [x] Smoke test: `make check` and `make docker` both pass
 
 Phase 2: crypto primitives