diff --git a/tracker.org b/tracker.org
index 9e71fd26..2a236e78 100644
--- a/tracker.org
+++ b/tracker.org
@@ -2907,22 +2907,24 @@ larger team.
 
 ***** Work I did (When to reach out)
 
-- IROH-Auth: login, OAuth2, OpenID connect, OAuth2 clients, User/Org/Client
-  management
-- TK-Store: access different DB with interfaces. Has been butchered a bit
+- **IROH-Auth**: login, OAuth2, OpenID connect, OAuth2 clients, User/Org/Client
+  management, **scopes**
+- **API Security**: **scopes**, how to use them, organize, etc...
+- **TK-Store**: access different DB with interfaces. Has been butchered a bit
   by Matthieu with its cache interface, he is aware about it.
-- Inspect: extract obserables (IP, url, hashes, etc...) from raw text
+- **Inspect**: extract obserables (IP, url, hashes, etc...) from raw text
 - Response in Module system (iroh-int); now it is more Matthieu
-- Admin interface: hidden but *very important*
-- Structured logs (via Riemann/ES), helped get data for management: now
+- **Admin interface**: hidden but *very important*
+- **Structured logs** (via Riemann/ES): helped get data for management: now
   should be moved to G2 (but I am still relevant for kibana access, how to
   log in our code, still missing structured log, but we are close)
-- Code architecture:
+- **Code architecture**:
   - first decided to use lein-monolith (terrible but best from other
     terrible choices), then removed it recently. Take a look at
     =CONTRIBUTING.md=. Made =tk-tests= see rationale, etc...
   - =let-either= in =iroh-int= (monads, etc..)
   - =tk-store= is structured with the flaws from stores in CTIA
+  - =defwebservice= to centralize how our webservices work
 
 ***** Advices