diff --git a/todo.md b/todo.md
index bfde2d8..3ee2f62 100644
--- a/todo.md
+++ b/todo.md
@@ -25,7 +25,7 @@ A single, ordered build plan from an empty repo to a production-ready, multi-ten
 - [x] Create `LICENSE` (proprietary, all rights reserved — per `readme.md`).
 - [x] Agree package manager = pnpm; add `pnpm-workspace`/`package.json` scripts (`dev`, `build`, `start`, `test`, `lint`, `typecheck`, `test:e2e`).
 - [x] Set up GitHub Actions CI: install, lint, typecheck, unit tests on every PR. (Railway deploys from `main` after checks pass.)
-- [ ] Enable branch protection on `main` (PR + green CI required).
+- [x] Enable branch protection on `main` (PR + green CI required).
 
 ## Phase 1 — Foundation