diff --git a/plan/README.md b/plan/README.md
index fb3a9187..79c399b2 100644
--- a/plan/README.md
+++ b/plan/README.md
@@ -165,6 +165,7 @@ The exit criterion is met and something is still open in the file.
 | [account-lifecycle](account-lifecycle.md) | An account's whole life is one reviewed state machine | open |
 | [alpha-exit](alpha-exit.md) | What an alpha deployment on the public internet must refuse or survive | open |
 | [blob-storage-tiers](blob-storage-tiers.md) | A blob lives on disk, in a bucket, or in both, and a deployment picks | open |
+| [browser-binding](browser-binding.md) | A web sign-in's code reaches only the agent's own browser | open |
 | [cedar-engine](cedar-engine.md) | Cedar is the second engine, and it never permits by accident | open |
 | [credential-rotation](credential-rotation.md) | An account's credentials change after it is created, and a replaced key stops working at once | open |
 | [dedupe-audit](dedupe-audit.md) | A workspace-wide sweep for drifted duplicate logic, dead code, and stragglers from removed backends | open |