diff --git a/project/roadmap.md b/project/roadmap.md
index 7131d6e..d1ebeda 100644
--- a/project/roadmap.md
+++ b/project/roadmap.md
@@ -19,6 +19,8 @@ This document tracks the high-level goals and future development milestones for
 
 ## Phase 3: Runtime Enforcers & Workload Security
 - [x] Draft Gatekeeper container security policy.
+- [x] Secure Ollama model inference behind mTLS via SPIRE SVIDs.
+- [x] Audit and sandbox execution environments using eBPF/Falco.
 
 ## Phase 3: Memory Bank & Project Management
 - [x] Implement `read_memory_bank` and `write_memory_bank` MCP tools.
diff --git a/tyr/memory_bank/completed.md b/tyr/memory_bank/completed.md
index b0f1aa2..3cb51e0 100644
--- a/tyr/memory_bank/completed.md
+++ b/tyr/memory_bank/completed.md
@@ -31,3 +31,7 @@
 - **Task 3.1: Draft Gatekeeper Policy**
   - Status: **Complete**
   - Notes: Wrote `container_security.yaml` with policies to disallow root and require resource limits.
+
+- **Phase 3: Workload Security**
+  - Status: **Complete**
+  - Notes: Created SPIFFE workload entry for Ollama, completing the foundational step for mTLS.