diff --git a/README.md b/README.md
index a58b39a..5a274ce 100644
--- a/README.md
+++ b/README.md
@@ -26,6 +26,11 @@ Key startup guards:
 - `--auto-peer-failover` makes peer hosts hand off startup to the coordinator first, then run local startup only if the coordinator is unreachable.
 - Startup is blocked while UPS is on battery by default (unless `--allow-on-battery` or `coordination.allow_startup_on_battery: true` is set).
 - Startup is blocked when a shutdown intent is active (`/var/lib/hecate/intent.json`).
+- Startup waits for time sync in `strict` or `quorum` mode (`startup.time_sync_mode`, `startup.time_sync_quorum`).
+- Startup can block until storage is healthy (`startup.require_storage_ready` + critical PVC checks).
+- Startup can block until external probes pass (`startup.require_post_start_probes` + `startup.post_start_probes`).
+- Startup refreshes and can use a cached bootstrap manifest set under `/var/lib/hecate/bootstrap-cache` when local fallback paths fail.
+- Vault unseal now falls back to a local cached key file (`startup.vault_unseal_key_file`) if `vault-init` cannot be read yet.
 
 ## Manual install on titan-db