diff --git a/gtd.org b/gtd.org
index 83620cd..fc21976 100644
--- a/gtd.org
+++ b/gtd.org
@@ -121,6 +121,14 @@ Roadmap basis: Evolutionary roadmap from README.org. Working backwards from SOTA
       - Create/update/delete headlines, set properties, manage TODO states
       - Handle =id:= links and internal links
       - Pure Lisp implementation (no Emacs subprocess)
+***** TODO Expose Structural AST Editing Tools
+      - Wrap org-skill-emacs-edit into def-cognitive-tool definitions
+      - Force LLM to use semantic node updates instead of regex file I/O
+***** TODO Implement Reflection Loops
+      - Feed rejection traces (syntax errors, policy blocks) back to LLM to trigger self-correction
+***** TODO Harden Actuators
+      - Fix path-traversal vulnerabilities in file I/O tools (e.g. :write-file)
+      - Enforce Merkle-snapshots on all state-modifying actions
 ***** TODO Implement tool permission tiers (ask/allow/deny)
       - Per-tool permission plist stored in org-object
       - =generate-tool-belt-prompt= filters denied tools before LLM sees them
@@ -198,6 +206,7 @@ Unified control plane: hooks + cron + routing in one skill. Deep project underst
       - Stack-based context with =push-context= / =pop-context=
       - Path resolution relative to current context
       - Memory scope: =:scope= property on org-objects (memex/session/project)
+      - Implement lazy-loading proxies for large-scale memory traversal (offload cold nodes to disk)
 
 **** TODO 2. Model-Tier Routing (cost optimization)
 ***** TODO Extend =*model-selector-fn= for complexity-based routing