added a TODO list to hacking.md