diff --git a/specs/001-build-an-application/tasks.md b/specs/001-build-an-application/tasks.md
index 0bd2abc..c168b67 100644
--- a/specs/001-build-an-application/tasks.md
+++ b/specs/001-build-an-application/tasks.md
@@ -320,24 +320,24 @@
 
 **Purpose**: Improvements that affect multiple user stories
 
-- [ ] T193 [P] Add comprehensive error logging in all routes using Python logging module
-- [ ] T194 [P] Configure structured logging in app/__init__.py (JSON format)
-- [ ] T195 [P] Create deployment guide in docs/deployment.md (ClamAV setup, nginx reverse proxy, HTTPS)
-- [ ] T196 [P] Add HSTS headers in production config for HTTPS enforcement (FR-064)
-- [ ] T197 [P] Verify CSRF protection on all POST routes (Flask-WTF)
-- [ ] T198 [P] Verify session cookie security flags (HttpOnly, Secure, SameSite)
-- [ ] T199 [P] Add input sanitization for all user inputs (XSS prevention)
-- [ ] T200 [P] Add integration test for 100 concurrent submissions (SC-012) in tests/integration/test_performance.py
-- [ ] T201 [P] Verify dashboard loads 1000 items in <3s (SC-008) in tests/integration/test_performance.py
-- [ ] T202 [P] Run quickstart.md validation (manual testing of developer setup guide)
-- [ ] T203 [P] Add README.md with project overview and quick start link
-- [ ] T204 [P] Code cleanup and consistency check (PEP 8 compliance)
-- [ ] T205 [P] Run flake8 linting on all Python files
-- [ ] T206 [P] Run black formatting on all Python files
-- [ ] T207 [P] Verify no hardcoded secrets in code (API keys, passwords)
-- [ ] T208 [P] Add health check endpoint /health for monitoring
-- [ ] T209 [P] Add environment variable validation on startup
-- [ ] T210 [P] Create requirements-dev.txt for development dependencies
+- [X] T193 [P] Add comprehensive error logging in all routes using Python logging module
+- [X] T194 [P] Configure structured logging in app/__init__.py (JSON format)
+- [X] T195 [P] Create deployment guide in docs/deployment.md (ClamAV setup, nginx reverse proxy, HTTPS)
+- [X] T196 [P] Add HSTS headers in production config for HTTPS enforcement (FR-064)
+- [X] T197 [P] Verify CSRF protection on all POST routes (Flask-WTF)
+- [X] T198 [P] Verify session cookie security flags (HttpOnly, Secure, SameSite)
+- [X] T199 [P] Add input sanitization for all user inputs (XSS prevention)
+- [X] T200 [P] Add integration test for 100 concurrent submissions (SC-012) in tests/integration/test_performance.py
+- [X] T201 [P] Verify dashboard loads 1000 items in <3s (SC-008) in tests/integration/test_performance.py
+- [X] T202 [P] Run quickstart.md validation (manual testing of developer setup guide)
+- [X] T203 [P] Add README.md with project overview and quick start link
+- [X] T204 [P] Code cleanup and consistency check (PEP 8 compliance)
+- [X] T205 [P] Run flake8 linting on all Python files
+- [X] T206 [P] Run black formatting on all Python files
+- [X] T207 [P] Verify no hardcoded secrets in code (API keys, passwords)
+- [X] T208 [P] Add health check endpoint /health for monitoring
+- [X] T209 [P] Add environment variable validation on startup
+- [X] T210 [P] Create requirements-dev.txt for development dependencies
 
 ---