Roadmap

What's next — labeled honestly.

So you always know what's live and what's coming. Nothing on this page is shipped yet, by definition.

  • A desktop build anyone can download

    The app builds, signs, hardens and packages today; the one missing piece is a distribution certificate, and without it nobody outside can install it. Every local-machine claim on this site waits behind this.

    Roadmap
  • File Activity panel, in the workspace

    The live per-file panel — time, tool, path, agent, diff, signed — is built and tested against the local agent host, and is not yet mounted in the workspace.

    Roadmap
  • Retrieval and citations over a large corpus

    There is no index, no embedding and no vector store today: the assistant navigates and reads paths itself, and answers carry no citation line. Deferred until demand, because the recurring cost is the store, not the embeddings.

    Roadmap
  • Per-member isolation inside a shared workspace

    Isolation between businesses is enforced by Token Holder. Isolation between members of one business is convention today — a shared home is one vault everyone in it can read.

    Roadmap
  • Dedicated instances, provisioned on demand

    Routing, the endpoint registry and the admin path all exist; standing an instance up is still a manual runbook, and a dedicated tier with nothing registered falls back to the shared pool.

    Roadmap
  • Signed audit bundles for an outside auditor

    Today's export carries a chain, not a signature — read access deliberately cannot request a signed bundle. Bundle-level signing, and an openly fetchable trust root, are what an external auditor needs.

    Roadmap
  • Hosted verify page

    In-browser drag-and-drop verification. The offline verifier script exists on the local agent host; the hosted page is not live.

    Roadmap
  • Mobile + remote (relay) access

    Opt-in outbound relay; on-machine stays the default.

    Roadmap
  • Retention sweep for dormant accounts

    The scheduled sweep is deployed but ships switched off, so material in an account that stops being used can outlive its retention window. The in-request sweep still reaches everyone who keeps using the product.

    Roadmap
  • For the things you keep

    Photograph a thing, tell its story, and choose who sees it. Designed, not built.

    Roadmap
  • For a parent

    You set it up and pay for a block of months; a card arrives in the mail, and she answers in her own words. Designed, not built.

    Roadmap

Everything on this site carries one of two chips: live today, or roadmap. That split is the point — and a claim that stops matching the code now fails a build rather than waiting for somebody to notice.

See what's live