Governance Shipped
Read/write access inventory
Map agents, sessions and identities to resources, distinguish reads from writes and surface permitted-versus-observed drift with explicit confidence.
Public roadmap
Direction, stated without invented dates
A sourced view of what exists, what public product pages already identify as next, and what remains exploratory. Priorities can change; shipped work is recorded in the changelog.
Built — Built — done in the product and part of v26.8.0, which ships the whole platform; listed as Shipped once the changelog names it.
Shipped
Reserved for what the public changelog records by name; the first entry is v26.8.0 (2026-09-01).
Governance Shipped
Claude Code session governance
Version managed policy, gate tool calls deny-closed at the local hook and review policy against signals from read-only connectors.
Governance Shipped
MCP catalog and governance
Catalog servers, skills and tools, map who uses what and keep raw secrets out of managed configuration.
Commercial Shipped
FinOps controls that can act
Attribute model spend and enforce budgets through deny-closed controls, while keeping model pricing explicitly declared.
Compliance Shipped
Compliance evidence mapping
Map activity to per-control status and sealed evidence across established framework families — evidence, never certification.
Governance Shipped
Kill-switch deny gate with dual control
Deny governed actions at estate or agent scope, with instant engagement, dual-control recovery and an audited evidence pack.
Platform Shipped
Self-hosted control plane
Run the complete product in your environment without mandatory calls home; your estate and data remain under your control.
Platform Shipped
First signed public release
Publish the first tagged artifacts with keyless signatures, SLSA provenance, SBOMs and OpenVEX evidence.
Next
Work the existing product, trust or pricing pages already identify as the next step.
Governance Next
Live agent-identity federation
Move from today’s read-only graph of operator-declared rules to live federation against GA hyperscaler agent-identity registries.
Platform Next
Real eval sampling and ordered replay
Connect a real session source for sampling and an ordered history source for faithful sandbox replay.
Commercial Next
Commercial self-service availability
Publish the final Business and add-on prices and open self-service checkout when the commercial launch prerequisites are ready.
Exploring
Directions under consideration, without a committed scope or date.
Platform Exploring
Private model registry and fine-tuning
Post-v1 exploration of workflows for an organization’s own trained or hosted models; not available today.
Commercial Exploring
Managed cloud offering
A hosted, multi-tenant control plane remains planned as a separately priced offering; the current product is self-hosted.
Compliance Exploring
Formal assurance and certification work
SOC 2 Type II and ISO 27001 are planned; ISO 42001 remains readiness-mapped and not certified unless a formal engagement begins.
Platform Exploring
Broader connector coverage
Extend the open connector ecosystem through the Apache-2.0 SDK while keeping every catalog row tied to source evidence.
The changelog is the factual record
Roadmap status describes direction. Shipped is reserved for what the public changelog records by name; Built means done in the product and part of v26.8.0, not yet named by the changelog. Trust posture and current service availability remain separate factual surfaces.