diff --git a/TODO.md b/TODO.md
index 8cfb8e4..7b99617 100644
--- a/TODO.md
+++ b/TODO.md
@@ -38,3 +38,11 @@
 - [ ] Cost tracking per interaction
 - [ ] Execution recording / audit trail
 - [ ] Update regression tests for skill system + channel layout
+
+## Low priority (from REPORT.md)
+
+- [ ] Hardcoded network interface fallback — `src/network.ts:56` defaults to `"eno2"` if route parsing fails
+- [ ] Predictable mount point names — `src/agent-manager.ts:94` uses `Date.now()` instead of crypto random
+- [ ] No Firecracker binary hash verification — `scripts/install.sh` downloads without SHA256 check
+- [ ] Ollama response size unbounded — `agent/tools.py` should limit `resp.read()` size
+- [ ] Process termination inconsistent — two patterns (ChildProcess vs PID polling), works but could consolidate