diff --git a/ROADMAP.md b/ROADMAP.md
index 1145be2..09dceea 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -111,12 +111,20 @@ IMS (`~/Desktop/PROG+HTML/IMS`) is discontinued and folded in — same stack
   in-app install banner on `beforeinstallprompt`. Native shells via Capacitor
   remain deferred until push notifications are a real requirement.
 - ~~**Versioning**~~ — `v0.x` minor-per-phase until the API surface stabilizes.
-  Release pipeline (Phase 1) now also ships desktop bundles: tag → GitHub
-  Release notes + ghcr.io images + CLI/MCP binaries + desktop installers.
+  `v0.5.0` tagged and pushed; the release pipeline now also ships desktop
+  bundles: tag → GitHub Release notes + ghcr.io images + CLI/MCP binaries +
+  desktop installers.
 - **Docs site** — deferred on purpose. README stays canonical; the OpenAPI
   contract is the machine-readable source. The API still changes every phase —
   a docs site now would document a moving target. Revisit when `v1.0.0` lands.
 
+Follow-ups:
+
+- Verify the macOS/Windows desktop bundles produced by the `v0.5.0` CI run
+  (host-verified on Linux only).
+- Desktop bundle signing + auto-updater — unsigned artifacts today; add when
+  distribution matures.
+
 ---
 
 ## What is deliberately out of scope
diff --git a/TODO.md b/TODO.md
deleted file mode 100644
index 3a5eea2..0000000
--- a/TODO.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# Primora — Working list
-
-## Phase 5 — Distribution (shipped, `deb56d9`)
-
-- [x] PWA: vite-plugin-pwa + manifest + icons + install banner; SW precaches
-      the shell, `/api` `/auth` `/mailpit` stay NetworkOnly
-- [x] `apps/desktop`: Tauri 2 thin shell — connect screen, tray
-      (Show / Change Server / Quit), close-to-tray, single-instance
-- [x] `release.yml`: desktop bundle matrix (linux/macOS/windows) attached to
-      GitHub Releases
-- [x] Workspace bumped to `0.5.0`, lockfile synced
-- [x] CHANGELOG + ROADMAP + README updated
-- [x] Gates: backend tests, frontend typecheck, workspace build, cargo check,
-      `check:generated` — all green
-- [x] Smoke: desktop shell rendered the compose deployment's dashboard
-      (tauri-driver + WebKitWebDriver)
-
-## Up next / future
-
-- [x] Tag `v0.5.0` + push — release workflow fires on tag push
-- [ ] Verify macOS/Windows desktop bundles from CI artifacts once the tag run
-      lands (host-verified on Linux only)
-- [ ] Capacitor native shells — only if push notifications become a real
-      requirement
-- [ ] Docs site / `docs/` folder — once the API surface stops moving per-phase
-      (revisit at `v1.0.0`)
-- [ ] Desktop bundle signing + auto-updater — unsigned artifacts today; add
-      when distribution matures