diff --git a/docs/roadmap.md b/docs/roadmap.md
index 392803b..3974d8f 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -26,6 +26,7 @@ and which parts are a plausible-looking configuration nobody has run.
 | v0.14 | Five cloud defects found and fixed without an apply: static pre-flight, and a real apply against an emulated AWS API |
 | v0.15 | Remote, locked Terraform state; the autopilot default that walks an instance refresh out of quorum; quorum recovery and the root token, both closed without a cloud account |
 | v0.16 | Audit anchors shipped to storage that refuses to delete them, on both clouds; key rotation and recovery rekey; a snapshot read back out of object storage and restored |
+| v0.17 | Seal migration in both directions, and the unseal-key rekey — plus the key the local root of trust had been discarding, which made restarting one container unrecoverable |
 
 ## The honest gap