Roadmap & History
v0.1.0 Snapshot — All 14 core roadmap items are complete. Speculative directions are explorations for the research community, not commitments.
v0.1.0 — Foundation Complete
Core Infrastructure
- AccessController with principal management, capability registry, grant/revoke
- Quantitative AccessDecision (Granted{n}, Impossible, Denied, Underconstrained)
- 4 computation paths: LR, Localization, Tropical, Matroid
- Operadic composition, stability analysis, pluggable audit sinks
Feature-Gated Modules
serde— Serialization, JSON I/O, roundtrippolicy— TOML policy language with validationwasm— WasmController with JS bindingscrypto— Ed25519 capability tokenskarpal— Type-level proofs (Proven, Rewrite, law checks)karpal-verify— SMT/Lean proof obligations, Certified trust boundarysurreal— RationalSurreal + EpsilonPolynomial trust arithmeticholographic— Minuet cosine-similarity access patterns
Advanced Features
- Context-aware decisions (resource scoping, time-aware trust)
- MultiController with cross-domain capability translation
- Temporal access control (expiry, time-remaining)
- Rate limiting scaled by intersection numbers
- Schubert routing with geometric path computation
- Distributed CRDTs with version vectors
Quality
- 128 unit tests + 18 CLI tests = 146 total
- Zero clippy warnings (all feature combinations)
- 7 example programs
- CI/CD: fmt, clippy, test matrix (5 combos), docs, wasm build, verification
Speculative Directions
These are research explorations, not commitments:
- Persistent backends — SQLite, PostgreSQL, Redis storage layers
- gRPC policy distribution — Wire protocol for multi-node policy sync
- Policy diff engine — Incremental policy updates with minimal recomputation
- Visualization — SVG/WebGL rendering of Schubert varieties
- OpenFGA/Rego bridge — Translation between Schubert policies and standard DSLs
- Holographic persistence — Full Minuet store integration with cosine indexing
- Async runtime — tokio-based async AccessController
- Policy fuzzing — Automated discovery of impossible capability combinations
- Benchmark suite — Standardized workloads with published results
- WASM Component Model — WIT-based interface definitions