diff --git a/TASKS.md b/TASKS.md
index 56c23fa..87d96f2 100644
--- a/TASKS.md
+++ b/TASKS.md
@@ -7,6 +7,7 @@
 ### P2 - Normal
 - [ ] Tune presence threshold per room with real-world testing
 - [x] Pi-side presence event handling in watch daemon
+- [x] Firmware security audit (cppcheck + manual review — no issues found)
 - [ ] Power consumption measurements using POWERTEST + external meter
 - [ ] Test OTA rollback (flash bad firmware, verify auto-revert)
 - [ ] Create HA webhook automations for deauth_flood / unknown_probe