diff --git a/TODO b/TODO
new file mode 100644
index 00000000..908367bb
--- /dev/null
+++ b/TODO
@@ -0,0 +1,19 @@
+/ = in progress, x = done, ? = to be discussed
+
+[/] finish legacy code removal
+  [x] remove 2.8 report_error() in ratbox imported stuff
+  [ ] rewrite s_auth.c -> split into three distinct parts
+    [ ] authentication state/lock manager
+    [ ] identd check
+    [ ] dns check
+    ### this should be a nice framework to let modules hook the
+    ### auth state imo. it'd also be cool to make the DNS checker and
+    ### auth checker modules (loaded by default, of course). --nenolod
+[/] port to libratbox
+  [x] get it running
+  [ ] clean up maxconnections kludges &c
+  [ ] in-process SSL
+  [?] port and use ratbox ssld for server links
+[ ] merge some stuff from ircd-seven directly (to be determined what)
+  [?] remote d:lines support?
+[ ] gk:line/akill syncing