Roadmap

What's next — labeled honestly.

So you always know what's live and what's coming. Nothing on this page is shipped yet, by definition.

  • A desktop build anyone can download

    The app builds, signs, hardens and packages today; the one missing piece is a distribution certificate, and without it nobody outside can install it. Every local-machine claim on this site waits behind this.

    Roadmap
  • File Activity panel, in the workspace

    The live per-file panel — time, tool, path, agent, diff, signed — is built and tested against the local agent host, and is not yet mounted in the workspace.

    Roadmap
  • Retrieval and citations over a large corpus

    Search by meaning is built and switched off while it is tested. Today the assistant lists and opens files itself, and answers carry no citation line. Citations are not built.

    Roadmap
  • Per-member isolation inside a shared workspace

    Isolation between businesses is enforced by Token Holder. Isolation between members of one business is convention today — a shared home is one vault everyone in it can read.

    Roadmap
  • Dedicated instances, provisioned on demand

    Routing, the endpoint registry and the admin path all exist; standing an instance up is still a manual runbook, and a dedicated tier with nothing registered falls back to the shared pool.

    Roadmap
  • Signed audit bundles for an outside auditor

    Today's export carries a chain, not a signature — read access deliberately cannot request a signed bundle. Bundle-level signing, and an openly fetchable trust root, are what an external auditor needs.

    Roadmap
  • Hosted verify page

    In-browser drag-and-drop verification. The offline verifier script exists on the local agent host; the hosted page is not live.

    Roadmap
  • Mobile + remote (relay) access

    Opt-in outbound relay; on-machine stays the default.

    Roadmap
  • Retention sweep for dormant accounts

    The scheduled sweep is deployed but ships switched off, so material in an account that stops being used can outlive its retention window. The in-request sweep still reaches everyone who keeps using the product.

    Roadmap
  • For the things you keep

    Photograph a thing, tell its story, and choose who sees it. Designed, not built.

    Roadmap
  • For a parent

    You set it up and pay for a block of months; a card arrives in the mail, and she answers in her own words. Designed, not built.

    Roadmap

Everything on this site carries one of two chips: live today, or roadmap. That split is the point — and a claim that stops matching the code now fails a build rather than waiting for somebody to notice.

See what's live