diff --git a/docs/plans/2026-02-12-sqlite-repositories-design.md b/docs/plans/2026-02-12-sqlite-repositories-design.md
index 493c776..e6402cb 100644
--- a/docs/plans/2026-02-12-sqlite-repositories-design.md
+++ b/docs/plans/2026-02-12-sqlite-repositories-design.md
@@ -213,16 +213,17 @@ All SQLite repository tasks are **complete**. See `docs/plans/2026-02-13-sqlite-
 
 ### Quality Gate
 
-All 64 tests passing. `./scripts/check.sh` all green (ruff format, ruff check, ty check, pytest).
+All 86 tests passing. `./scripts/check.sh` all green (ruff format, ruff check, ty check, pytest).
 
 ### Roadmap
 
 Per the design doc, the roadmap is:
 1. ~~Scaffolding~~ (done)
 2. ~~SQLite repositories~~ (done)
-3. **Authentication** (WebAuthn + password) — next phase
-4. OIDC provider integration (idpyoidc)
-5. Management UI (OIDC RP that dogfoods the OP)
+3. ~~Authentication services~~ (done) — PasswordService, WebAuthnService, MagicLinkService
+4. **Authentication routes** (login/register endpoints + templates) — next phase
+5. OIDC provider integration (idpyoidc)
+6. Management UI (OIDC RP that dogfoods the OP)
 
 ---