Feuille de route des lots
Version anglaise : en/ROADMAP.md
Lots du kit (section 16). Graphe de dépendances : diagrams/roadmap.html. Ce qui reste par exigence est généré dans STATUS.md et BLOCKERS.md ; la feuille de route par phases servie par l'API est catalog/roadmap.yaml.
| Lot | Nom | Dépend de | Présent dans le dépôt |
|---|---|---|---|
| L0 | Foundations | - | contracts/, sql/postgres (V001 à V160), catalog/components, tools/traceability, .forgejo/workflows/ci.yml |
| L1 | Manager | L0 | navin-manager/server, agent-go, operator, catalog, packaging, ui |
| L2 | IAM/Governance | L0 | domains/identity, authz, context, delegation, policies, approvals ; deploy/keycloak, spire, policies |
| L3 | Agent/LLM | L2 | domains/agents, llm, finops, mcp ; sdks/python/src/enterprise_ai/loop ; integrations/nats.py, temporal.py |
| L4 | Data/Multimodal | L2 | eai/storage, domains/knowledge, privacy, multimodal, realtime ; deploy/livekit |
| L5 | Observability | L2 | deploy/observability, eai/tracing.py, integrations/opik.py |
| L6 | Audit/SOC | L5 | eai/audit.py, domains/evidence, soc ; deploy/runtime-security |
| L7 | Dev Platform | L3 | sdks/python, typescript, go, java ; contracts/ |
| L8 | Marketplace | L7 | domains/marketplace, packs/hr, packs/finance, packs/templates |
| L9 | Licensing & Release | L1, L7 | domains/licensing, tools/license-issuer, release/ |
| L10 | Enterprise Readiness | L0 à L9 | navin-manager/packaging/offline, deploy/velero, deploy/loadtest |
Ce qui reste : toute exigence d'un lot qui n'est pas PASSED dans STATUS.md. Les intégrations réelles sans Docker local (Keycloak, OpenBao, OpenFGA, Qdrant, NATS, Temporal, LiveKit, LiteLLM, vLLM) sont suivies dans BLOCKERS.md.
Gates G01 à G16 (kit section 15.1)
| Gate | Objet | Implémentation |
|---|---|---|
| G01 | manifest/contract schema | contracts/validate.py, services/control-plane/tests/test_core_contracts.py |
| G02 | SPDX/SBOM/dependencies | services/control-plane/tests/test_platform_components.py, tools/components/licence_report.py |
| G03 | Trivy/secrets/signatures | .forgejo/workflows/ci.yml (trivy, gitleaks) |
| G04 | IAM/FGA/OPA | services/control-plane/tests/test_iam_openfga_real.py, test_iam_opa_bundles_real.py, test_iam_fail_closed.py |
| G05 | tenant isolation | services/control-plane/tests/test_core_rls_forced.py |
| G06 | PII/DLP/masking/output | services/control-plane/tests/test_data_privacy.py, test_data_presidio_real.py |
| G07 | tools/MCP/egress | services/control-plane/tests/test_security_egress.py, test_mcp_catalog_real.py |
| G08 | Promptfoo/Ragas eval | services/control-plane/tests/test_data_evaluation.py |
| G09 | retries/cancellation/idempotence/limits | services/control-plane/tests/test_runtime_temporal_durable.py, test_finops_quotas.py |
| G10 | audit/evidence | services/control-plane/tests/test_core_audit.py, test_evidence_gateway.py, test_siem_audit_worm.py |
| G11 | Kill Switch/recovery | services/control-plane/tests/test_soc_ai_sdr.py |
| G12 | business/security approval | services/control-plane/tests/test_approvals_promotion.py |
| G13 | migrations and rollback | services/control-plane/tests/test_core_migrations.py |
| G14 | UI E2E/accessibility | portal/tests (vitest) ; aucun test d'accessibilité ni E2E navigateur trouvé / no accessibility nor browser E2E test found |
| G15 | HA/backup/restore | services/control-plane/tests/test_core_pg_backup.py, navin-manager/server/tests/test_lifecycle_drift_backups.py |
| G16 | offline installation | navin-manager/packaging/offline/verify-bundle.py, navin-manager/packaging/tests/test_bundle.py |