Lot roadmap
French version: ../ROADMAP.md
Kit lots (section 16). Dependency graph: diagrams/roadmap.html. What remains per requirement is generated in STATUS.md and BLOCKERS.md; the phase roadmap served by the API is catalog/roadmap.yaml.
| Lot | Name | Depends on | Present in the repository |
|---|---|---|---|
| L0 | Foundations | - | contracts/, sql/postgres (V001 à V160), catalog/components, tools/traceability, .forgejo/workflows/ci.yml |
| L1 | Manager | L0 | navin-manager/server, agent-go, operator, catalog, packaging, ui |
| L2 | IAM/Governance | L0 | domains/identity, authz, context, delegation, policies, approvals ; deploy/keycloak, spire, policies |
| L3 | Agent/LLM | L2 | domains/agents, llm, finops, mcp ; sdks/python/src/enterprise_ai/loop ; integrations/nats.py, temporal.py |
| L4 | Data/Multimodal | L2 | eai/storage, domains/knowledge, privacy, multimodal, realtime ; deploy/livekit |
| L5 | Observability | L2 | deploy/observability, eai/tracing.py, integrations/opik.py |
| L6 | Audit/SOC | L5 | eai/audit.py, domains/evidence, soc ; deploy/runtime-security |
| L7 | Dev Platform | L3 | sdks/python, typescript, go, java ; contracts/ |
| L8 | Marketplace | L7 | domains/marketplace, packs/hr, packs/finance, packs/templates |
| L9 | Licensing & Release | L1, L7 | domains/licensing, tools/license-issuer, release/ |
| L10 | Enterprise Readiness | L0 to L9 | navin-manager/packaging/offline, deploy/velero, deploy/loadtest |
What remains: every requirement of a lot that is not PASSED in STATUS.md. Real integrations without local Docker (Keycloak, OpenBao, OpenFGA, Qdrant, NATS, Temporal, LiveKit, LiteLLM, vLLM) are tracked in BLOCKERS.md.
Gates G01 to G16 (kit section 15.1)
| Gate | Scope | Implementation |
|---|---|---|
| G01 | manifest/contract schema | contracts/validate.py, services/control-plane/tests/test_core_contracts.py |
| G02 | SPDX/SBOM/dependencies | services/control-plane/tests/test_platform_components.py, tools/components/licence_report.py |
| G03 | Trivy/secrets/signatures | .forgejo/workflows/ci.yml (trivy, gitleaks) |
| G04 | IAM/FGA/OPA | services/control-plane/tests/test_iam_openfga_real.py, test_iam_opa_bundles_real.py, test_iam_fail_closed.py |
| G05 | tenant isolation | services/control-plane/tests/test_core_rls_forced.py |
| G06 | PII/DLP/masking/output | services/control-plane/tests/test_data_privacy.py, test_data_presidio_real.py |
| G07 | tools/MCP/egress | services/control-plane/tests/test_security_egress.py, test_mcp_catalog_real.py |
| G08 | Promptfoo/Ragas eval | services/control-plane/tests/test_data_evaluation.py |
| G09 | retries/cancellation/idempotence/limits | services/control-plane/tests/test_runtime_temporal_durable.py, test_finops_quotas.py |
| G10 | audit/evidence | services/control-plane/tests/test_core_audit.py, test_evidence_gateway.py, test_siem_audit_worm.py |
| G11 | Kill Switch/recovery | services/control-plane/tests/test_soc_ai_sdr.py |
| G12 | business/security approval | services/control-plane/tests/test_approvals_promotion.py |
| G13 | migrations and rollback | services/control-plane/tests/test_core_migrations.py |
| G14 | UI E2E/accessibility | portal/tests (vitest) ; aucun test d'accessibilité ni E2E navigateur trouvé / no accessibility nor browser E2E test found |
| G15 | HA/backup/restore | services/control-plane/tests/test_core_pg_backup.py, navin-manager/server/tests/test_lifecycle_drift_backups.py |
| G16 | offline installation | navin-manager/packaging/offline/verify-bundle.py, navin-manager/packaging/tests/test_bundle.py |