diff --git a/TODO.md b/TODO.md
index 22cfeda5d8..f58593c2d9 100644
--- a/TODO.md
+++ b/TODO.md
@@ -127,6 +127,10 @@ SPDX-License-Identifier: LGPL-2.1-or-later
 
 ## Features
 
+- sysext: condition confext/sysext on machine tags, too
+
+- sysupdate: add health check logic, revert updates if fail
+
 - sysupdate: run things in a loop always, to deal with stepping stones, and
   adding new transfer files. finish, when stable.