diff --git a/docs/MASTER_PLAN.md b/docs/MASTER_PLAN.md
index 558c51f9..9a44d7ed 100644
--- a/docs/MASTER_PLAN.md
+++ b/docs/MASTER_PLAN.md
@@ -18,9 +18,30 @@
 | **TASK-8** | **Security hardening (CRIT-01, CRIT-02, HIGHs)** | **P0** | PLANNED | - |
 | **TASK-9** | **Full feature testing sweep** | **P1** | PLANNED | - |
 | **TASK-10** | **ISO build verification + multi-hardware test** | **P1** | PLANNED | - |
-| **TASK-11** | **Rootless podman + restore security hardening** | **P1** | PLANNED | - |
+| **TASK-11** | **Rootless podman + restore security hardening** | **P1** | ~~DONE~~ | - |
 | **TASK-12** | **Beta telemetry — node reporting + monitoring panel** | **P1** | PLANNED | - |
 | **TASK-17** | **Alpha version tags + rollback strategy** | **P2** | PLANNED | - |
+| **BUG-18** | **Fedimint Gateway iframe/tab UI doesn't load** | **P1** | PLANNED | - |
+| **BUG-19** | **Wrong IndeedHub splash (needs "Studio" version)** | **P1** | PLANNED | - |
+| **BUG-20** | **ElectrumX always shows "Building..." not height** | **P2** | PLANNED | - |
+| **BUG-21** | **OnlyOffice iframe/tab UI doesn't load** | **P1** | PLANNED | - |
+| **BUG-22** | **Portainer iframe/tab UI doesn't load** | **P1** | PLANNED | - |
+| **BUG-23** | **NPM iframe/tab UI doesn't load** | **P1** | PLANNED | - |
+| **BUG-24** | **Tailscale iframe/tab UI doesn't load** | **P1** | PLANNED | - |
+| **BUG-25** | **Nextcloud shows "Start" after install** | **P2** | PLANNED | - |
+| **TASK-26** | **Rename fedimintd to "Fedimint Guardian" + icon** | **P2** | PLANNED | - |
+| **TASK-27** | **Add tab-launch icon to apps that open in tabs** | **P2** | PLANNED | - |
+| **TASK-28** | **Sort installed apps to end of marketplace** | **P2** | PLANNED | - |
+| **TASK-29** | **Fix mesh mobile: remove title/flash/peers header, fix gutters** | **P2** | PLANNED | - |
+| **TASK-30** | **On-Chain as first tab in receive Bitcoin modals** | **P2** | PLANNED | - |
+| **TASK-31** | **Sticky nav header (My Apps/App Store/Services + categories + search)** | **P2** | PLANNED | - |
+| **TASK-32** | **Integrate boot loader into deploy + build + production** | **P1** | PLANNED | - |
+| **BUG-33** | **CPU load alert threshold too low (8 = 2x cores)** | **P2** | PLANNED | - |
+| **TASK-34** | **Pentest findings remediation plan** | **P1** | PLANNED | - |
+| **TASK-35** | **Federation node names (show name not DID, hover for key)** | **P2** | PLANNED | - |
+| **TASK-36** | **Cleaner iframe error screen with remediation** | **P2** | PLANNED | - |
+| **BUG-37** | **Apps flicker Start/Launch during container scan** | **P2** | PLANNED | - |
+| **TASK-38** | **Add blockchain sync info to homepage System card** | **P2** | PLANNED | - |
 
 ### Phase 2: User Testing (controlled, real hardware)