diff --git a/Codex/Agent/OPEN_ITEMS.md b/Codex/Agent/OPEN_ITEMS.md
index e6f8c3b..68e2811 100644
--- a/Codex/Agent/OPEN_ITEMS.md
+++ b/Codex/Agent/OPEN_ITEMS.md
@@ -17,6 +17,9 @@ Only keep unfinished Agent work here.
 - SSH server install in dev provisioning
 - structured logging for Loki
 - `provisioningComplete` state surfacing in `/status`
+- game/dev template cleanup: remove `node-exporter`, keep Alloy preinstalled, and keep `/etc/default/alloy` fixed to `/etc/alloy/config.alloy` on port `12345`
+- Alloy config label cleanup for game/dev containers: keep the required label contract minimal and consistent with dashboards/discovery (`vmid`, `instance`, `container_type`, optional metadata) and remove redundant labels if they add no value
+- verify automatic Alloy config refresh path on metadata changes after initial `POST /config`
 
 ## Clarified boundary
 - do not add agent-side remote/offsite backup sync if PBS/platform layer is the intended durability path