diff --git a/replit.md b/replit.md
index 65a8321..021d392 100644
--- a/replit.md
+++ b/replit.md
@@ -209,3 +209,16 @@ Only available in development (`NODE_ENV !== 'production'`).
 ### `scripts` (`@workspace/scripts`)
 
 Utility scripts package. Each script is a `.ts` file in `src/` with a corresponding npm script in `package.json`. Run scripts via `pnpm --filter @workspace/scripts run <script>`. Scripts can import any workspace package (e.g., `@workspace/db`) by adding it as a dependency in `scripts/package.json`.
+
+## Roadmap
+
+### Mode 2 — Pre-funded session (v2)
+Token-based cost debits against a pre-funded balance. Spec in `TIMMY_TEST_PLAN.md` (Tests 11–16 as SKIP stubs).
+
+### Nostr integration
+Nostr (NIP-04/NIP-44 encrypted DMs) is planned as the delivery layer for the bootstrap flow and beyond:
+- **Node credential delivery** — provisioned node generates a Nostr keypair during cloud-init and publishes credentials as an encrypted DM to the user's pubkey; eliminates the current HTTP one-time SSH key polling mechanism
+- **Job status events** — job state transitions (`awaiting_payment → complete`) published as Nostr events; clients subscribe instead of polling
+- **Node identity** — each Timmy node gets a persistent Nostr identity (npub) for discovery and communication
+
+Until Nostr is wired in, the current HTTP polling + one-time SSH key delivery serves as the POC placeholder.