diff --git a/TODO b/TODO
index 5c3b6f6382..c9f8bf9b91 100644
--- a/TODO
+++ b/TODO
@@ -130,6 +130,10 @@ Deprecations and removals:
 
 Features:
 
+* consider reworking json_build() to imply a top-level JSON_BUILD_OBJECT(),
+  since that's what we want in 99% of cases. Then provide json_build_any() or
+  so that can build other variant types top-level too.
+
 * rework tpm2_parse_pcr_argument_to_mask() to refuse literal hash value
   specifications. They are currently parsed but ignored. We should refuse them
   however, to not confuse people.