Skip to content

Public roadmap

Direction, stated without invented dates

A sourced view of what exists, what public product pages already identify as next, and what remains exploratory. Priorities can change; shipped work is recorded in the changelog.

Built — Implemented in the product source and accepted: its claim-level acceptance run passed with an evidence receipt. Acceptance is not a published release; the item becomes Shipped only when the public changelog names it.

Shipped

Reserved for what the public changelog records by name; the first entry is v26.8.0 (2026-09-01).

Platform Shipped

First signed public release

Publish the first tagged artifacts with keyless signatures, SLSA provenance, SBOMs and OpenVEX evidence.

Platform Shipped

Release 26.10

A console built around the work, two-factor sign-in, and Business on sale beside Community under a commercial license.

Platform Shipped

Release 0.1

The first two-number release and a fresh installation baseline; the edition table defines what Community includes.

Platform Shipped

Release 0.2

Session activity, slash commands and the skills lifecycle; the access map, the identity inventory and the workspace wiki are Community.

Platform Shipped

Release 0.3

Personal vault, models on your own hardware, sessions in a container and handoff from any tool; the inbound SCIM server and deployment are Business.

Platform Shipped

Release 0.4

One top bar in the console, the last hour of every live session on its home, olivares ui in a terminal, and sessions you can rename, archive or snooze; managed credentials for sessions are Business.

Commercial Shipped

Commercial self-service availability

Business includes the commercial license, signed release channel and four capability families: Regulated Operations, AI Runtime Security, Compliance Packs, Identity & Scale. Nothing is sold separately.

Implemented, not accepted

Present in the measured sources and not yet accepted: the capability is built, its claim-level acceptance run has not been executed, so no evidence receipt backs it yet.

Governance Implemented, not accepted

Read/write access inventory

Map agents, sessions and identities to resources, distinguish reads from writes and surface permitted-versus-observed drift with explicit confidence.

Governance Implemented, not accepted

Claude Code session governance

Version managed policy, gate tool calls deny-closed at the local hook and review policy against signals from read-only connectors.

Governance Implemented, not accepted

MCP catalog and governance

Catalog servers, skills and tools, map who uses what and keep raw secrets out of managed configuration.

Commercial Implemented, not accepted

FinOps controls that can act

In Business, configured FinOps admission can deny actions when enforcing budgets are exhausted or ledger checks fail. The inference proxy can reserve an estimate before forwarding, then attempt to settle reported spend or release the hold. Settlement errors are logged; completed actions are not undone. Coverage depends on the gate and policy; legacy checks, session availability and development execution can allow actions outside that admission. No universal spending cap is promised.

Compliance Implemented, not accepted

Compliance evidence mapping

Map activity to per-control status and sealed evidence across established framework families — evidence, never certification.

Governance Implemented, not accepted

Kill-switch deny gate with dual control

Deny governed actions at estate or agent scope, with instant engagement, dual-control recovery and an audited evidence pack.

Platform Implemented, not accepted

Self-hosted control plane

Operate the control plane in your own environment: a self-hosted boot and licensing path, plus installer, Helm chart and Compose definitions. No install, upgrade or recovery run has yet qualified the supported deployment matrix.

Next

Work the existing product, trust or pricing pages already identify as the next step.

Governance Next

Live agent-identity federation

Move from today’s read-only graph of operator-declared rules to live federation against GA hyperscaler agent-identity registries.

Exploring

Directions under consideration, without a committed scope or date.

Platform Exploring

Broader connector coverage

Extend the open connector ecosystem through the Apache-2.0 SDK while keeping every catalog row tied to source evidence.

The changelog is the factual record

Roadmap status describes direction. Shipped is reserved for what the public changelog records by name. Implementation in the product source and claim acceptance are separate steps, and neither makes an item part of a published release. Trust posture and current service availability remain separate factual surfaces.

Read the changelog Review the Trust Center