From 1d0901987542c3311a606378dd11b95656032fcb Mon Sep 17 00:00:00 2001
From: selfhoster1312 <selfhoster1312@kl.netlib.re>
Date: Mon, 21 Sep 2026 19:30:43 +0200
Subject: [PATCH] docs: More TODO docs

---
 README.md      | 5 +++++
 docs/groups.md | 8 ++++++++
 2 files changed, 13 insertions(+)
 create mode 100644 docs/groups.md

diff --git a/README.md b/README.md
index 17f4974..a37bd15 100644
--- a/README.md
+++ b/README.md
@@ -39,6 +39,11 @@ Compared to lldap, llldap:
 
 We may explore in the future:
 
+- domain mapping (eg. .org/.fr/.onion)
+- optional complete logging of all activity
+- 2-factor auth
+- Shamir's secret sharing social account recovery
+- Permission to create invites on an account
 - i18n domains (punycode)
 - i18n user identifiers (TODO: check compatibility with other tools)
 - RTL languages
diff --git a/docs/groups.md b/docs/groups.md
new file mode 100644
index 0000000..193ef21
--- /dev/null
+++ b/docs/groups.md
@@ -0,0 +1,8 @@
+# Groups
+
+> [!WARNING]
+> This is a design document and does not necessarily reflect the current state
+> of the implementation.
+
+WIP: A group is only valid on a single domain, except for global service groups (eg. `admins`). A group
+has permissions to perform some actions on a domain.
\ No newline at end of file