Engineering roadmap
What is shipping today versus what we invest in as adoption grows. Roadmap items are discovery and planning signals—not promises of general availability dates.
- Nowopen-coreavailable
Manifest + SBOM/scan/sign + control-plane + external evidence
Shipped: local-first release spine and evidence production.
- Nowbusinessavailable
Evidence-backed policy gates, verify, promote approvals
Shipped Business Edition foundation; licensing UX continues to harden.
- H2 2026open-core
SARIF scan output
GitHub Security tab integration; free adoption driver.
- H2 2026business
Compliance report (markdown/JSON)
Audit-ready package from manifest + evidence.
- H2 2026business
SLSA provenance attestation
Roadmap — not claimed as GA SLSA Level 3 today.
- H1 2027business
rflow audit — CRA evidence bundle
Machine-readable compliance package for EU CRA timelines.
- H1 2027business
Env-specific policy overrides
Staging permissive / prod strict gate profiles.
- H2 2027enterprise
Custom policy-as-code (Rego/CEL)
Enterprise governance flexibility.
