diff --git a/CODE-AUDIT.md b/CODE-AUDIT.md
index 158e70a..3a22d9f 100644
--- a/CODE-AUDIT.md
+++ b/CODE-AUDIT.md
@@ -2546,8 +2546,10 @@ Security & correctness audit (2026-06-23):
 
 - Designed app icon before v1.0 (placeholder shipped).
 - Migrate JSON stores to better-sqlite3 if a user indexes many large channels.
-- Metadata editing (`--parse-metadata`/`--replace-in-metadata`) — held pending a live recipe.
-- PO-token WebView auto-minting — only the `--extractor-args` plumbing shipped.
+- ~~Metadata editing (`--parse-metadata`/`--replace-in-metadata`)~~ — done: `--replace-in-metadata` in
+  `DownloadOptionsForm.tsx` (ROADMAP.md "Metadata editing before download").
+- ~~PO-token WebView auto-minting~~ — done: [poToken.ts](src/main/poToken.ts) opens a hardened
+  BrowserWindow on the shared login session and mints the token automatically (ROADMAP.md "Reliability").
 - ~~Taskbar overlay badge (needs a drawn `NativeImage`)~~ — done (W11): [badge.ts](src/main/badge.ts).
 - i18n — deliberately deferred (note: UI strings are hard-coded throughout).
 - Code signing — **non-goal**: no certificate will be purchased, so builds ship unsigned and the SmartScreen