update project documentation

TODO.md

@@ -10,20 +10,20 @@ Unstructured intake buffer for ideas, issues, and observations. Items here are r
 - Structured JSON logging for log aggregation compatibility
 - Burn-after-read paste option
 - Custom expiry header for per-paste TTL
-- CLI client tool (fpaste) for easier usage
 - Rate limit headers in responses (X-RateLimit-*)
 - Paste compression for large text content
-- Optional paste encryption with user-provided key
 - ETag support for conditional requests
-- HEAD method support for metadata without body
 - Paste listing for authenticated users (their own pastes only)
+- Neovim/Vim plugin for editor integration
+- Webhook notifications for paste events
 
 ## Observations
 
-- Current abuse prevention uses content-hash; IP-based limiting delegated to proxy
+- Abuse prevention uses content-hash dedup + PoW + entropy enforcement
 - SQLite WAL mode could improve concurrent read performance
 - Container image size could be reduced with multi-stage build
-- Test coverage could include more edge cases for MIME detection
+- E2E encryption in CLI uses cryptography package (optional dependency)
+- Entropy check has size threshold to avoid false positives on small data
 
 ## Questions
 
@@ -34,10 +34,9 @@ Unstructured intake buffer for ideas, issues, and observations. Items here are r
 
 ## Debt
 
-- Dedup feature changes pending commit
-- Documentation could include more deployment examples
 - No integration tests for container deployment
 - Missing test for concurrent paste creation
+- Could add more deployment examples (Kubernetes, systemd)
 
 ## External Dependencies