Governance Built
Read/write access inventory
Map agents, sessions and identities to resources, distinguish reads from writes and surface permitted-versus-observed drift with explicit confidence.
Public roadmap
Direction, stated without invented dates
A sourced view of what exists, what public product pages already identify as next, and what remains exploratory. Priorities can change; shipped work is recorded in the changelog.
Shipped — Reserved for what the public changelog records. No public release has shipped yet, so this section is empty by design.
Built
Built — publishes with the first release: done in the product today, and recorded as shipped in the changelog once that release exists.
Governance Built
Claude Code session governance
Version managed policy, gate tool calls deny-closed at the local hook and review policy against signals from read-only connectors.
Governance Built
MCP catalog and governance
Catalog servers, skills and tools, map who uses what and keep raw secrets out of managed configuration.
Commercial Built
FinOps controls that can act
Attribute model spend and enforce budgets through deny-closed controls, while keeping model pricing explicitly declared.
Compliance Built
Compliance evidence mapping
Map activity to per-control status and sealed evidence across established framework families — evidence, never certification.
Governance Built
Kill-switch deny gate with dual control
Deny governed actions at estate or agent scope, with instant engagement, dual-control recovery and an audited evidence pack.
Platform Built
Self-hosted control plane
Run the complete product in your environment without mandatory calls home; your estate and data remain under your control.
Next
Work the existing product, trust or pricing pages already identify as the next step.
Governance Next
Live agent-identity federation
Move from today’s read-only graph of operator-declared rules to live federation against GA hyperscaler agent-identity registries.
Platform Next
Real eval sampling and ordered replay
Connect a real session source for sampling and an ordered history source for faithful sandbox replay.
Platform Next
First signed public release
Publish the first tagged artifacts with keyless signatures, SLSA provenance, SBOMs and OpenVEX evidence.
Commercial Next
Commercial self-service availability
Publish final Pro and Business prices and open self-service checkout when commercial launch prerequisites are ready.
Exploring
Directions under consideration, without a committed scope or date.
Platform Exploring
Private model registry and fine-tuning
Post-v1 exploration of workflows for an organization’s own trained or hosted models; not available today.
Commercial Exploring
Managed cloud offering
A hosted, multi-tenant control plane remains planned as a separately priced offering; the current product is self-hosted.
Compliance Exploring
Formal assurance and certification work
SOC 2 Type II and ISO 27001 are planned; ISO 42001 remains readiness-mapped and not certified unless a formal engagement begins.
Platform Exploring
Broader connector coverage
Extend the open connector ecosystem through the Apache-2.0 SDK while keeping every catalog row tied to source evidence.
The changelog is the factual record
Roadmap status describes direction. Shipped is reserved for what the public changelog records; Built means done in the product and publishing with the first release. Trust posture and current service availability remain separate factual surfaces.