Roadmap and progress

Phased releases, each one usable and gated by its tests

The first usable release, R1: Workspace and Policies, targets Jan 2027, and 1.0 targets Oct 2027. Today 62 of 135 epics are done.

62of 135 epics done
8in progress
31/32R1 epics done
288automated E2E scenarios

Generated from scripts/build_tracker.py when this site was built. Tracker last updated . Dates are indicative; a release ships when its end-to-end gate passes. "Active" marks releases with epics in progress. Earlier phases can show open items, such as research and reviews, that don't block later work.

P0Nov 2026Gate G1

Spikes + G1 + design system

SP-01…SP-10, ADRs, tokens, CI + E2E harness smoke

10 done0 in progress4 not started14 epics

Epics in P0
  • BPMS-001User interviews (12+, startup/SME/MNC × HR/IT/Fin/Compliance/Admin) + synthesisNot started
  • BPMS-002Model 5 reference processes in IR on paperDone
  • BPMS-003SP-01…SP-06 runtime spikes (native vs Temporal vs Operaton)Done
  • BPMS-004SP-07 licence/SBOM review of candidate depsDone
  • BPMS-005SP-08 expression language (dsntk FEEL vs CEL, incl. WASM)Done
  • BPMS-006SP-09 Cedar + RLS + sqlx pool + partial evalDone
  • BPMS-007SP-10 audit chain 10M events: append + explorerDone
  • BPMS-008Clickable prototype of Wave-1 flows + 5-user testNot started
  • BPMS-009G1: accept ADR-0010/0011/0015; freeze IR v1Not started
  • BPMS-010Design tokens + core components + visual directionDone
  • BPMS-011Monorepo, CI gates (fmt, clippy, deny, tests, a11y, SBOM)Done
  • BPMS-012Threat model reviewNot started
  • BPMS-013E2E harness: Playwright + compose.e2e (PG, SeaweedFS, Valkey, Mailpit, ClamAV), seed A/B, personas, __test clock/drain/fault (feature-gated)Done
  • BPMS-014AGENTS.md/CLAUDE.md contract, PR template (spec id + E2E id), CODEOWNERS for protected areasDone
R1Nov 2026 – Jan 2027Gate G-R1

Workspace & Policies

System console, auth+MFA, roles, settings, DataGrid, SOP/policy library, campaigns, announcements, files, audit, dashboard

31 done0 in progress1 not started32 epics

Epics in R1
  • BPMS-020System plane: bootstrap, system roles, workspaces lifecycle, quotasDone
  • BPMS-021Local auth (Argon2id), email verify, lockout, sessionsDone
  • BPMS-022MFA TOTP + WebAuthn, recovery codes, step-upDone
  • BPMS-023Memberships, invites, directory (departments/groups/positions/managers), CSV importDone
  • BPMS-024Permission catalogue, role templates, custom roles, grants, scopes, preview → CedarDone
  • BPMS-025Forced RLS + repository WsCtx + CI cross-workspace sweepDone
  • BPMS-026Audit chain append + coverage contract testDone
  • BPMS-027Settings layering, floors, profiles, explainerDone
  • BPMS-028Shared DataGrid v1 (sort, filter builder, saved views, export, keyboard)Done
  • BPMS-029Outbox + dispatcher + inbox dedup + idempotency keysDone
  • BPMS-030Key hierarchy: KeyProvider (sealed local, OpenBao, KMS), per-workspace KEKDone
  • BPMS-031App shell, workspace switcher, system console shell, ⌘KDone
  • BPMS-032E2E-R1 pack (R1-01…19 + ISO)Done
  • BPMS-033Valkey cache port (rate limit, session cache, policy/settings cache, SSE fan-out) + cache-off fallbackDone
  • BPMS-034Brand vector masters (SVG symbol/wordmark/lockups, small-size symbol), favicon/PWA icon set from vector, trademark & domain searchDone
  • BPMS-040Artifacts, versions, lifecycle state machine, immutability trigger, SoDDone
  • BPMS-041Landscape, collections, owners, RACI, visibilityDone
  • BPMS-042SOP/policy block editor + renderer (web/PDF)Done
  • BPMS-043Semantic diff across artifact kindsDone
  • BPMS-044Reviews, change requests, effective-date scheduling, renewal date, verification badgeDone
  • BPMS-045Policy library + employee policy portal + applicabilityDone
  • BPMS-046Campaign engine: ack/quiz-lite, audience snapshot, reminders, escalation, new joiners, evidence exportDone
  • BPMS-047Announcements: compose, targeting, schedule/expiry, pin, required ack, approval, analyticsDone
  • BPMS-048In-app notification centre + SMTP email + templates + digestsDone
  • BPMS-049Postgres FTS + trgm, permission-filtered searchDone
  • BPMS-060Files pipeline: resumable upload, hash, sniff, ClamAV, quarantine, signed URLsDone
  • BPMS-061Previews (image/PDF) in sandbox; Office preview spikeDone
  • BPMS-062Workspace Files view, quotas, orphan cleanupDone
  • BPMS-063Workspace overview dashboard + people & access monitorDone
  • BPMS-064Audit explorer, timelines, saved queries, exportDone
  • BPMS-065System console: workspaces grid, quotas, health, system auditDone
  • BPMS-120Pilot workspaces (Starter + Enterprise profile), 3–5 real processes, 4 weeksNot started
R2Jan 2027 – Mar 2027Gate G-R2

Requests & Approvals

Runtime core, forms, designer, portal, inbox, delegation, SLA, 6 templates

18 done0 in progress4 not started22 epics

Epics in R2
  • BPMS-080IR v1 model + compiler (§11 checks, diagnostics, semantic diff)Done
  • BPMS-081Expression engine integration (typed, budgeted, WASM build)Done
  • BPMS-082Interpreter: advance loop, tokens, splits/joins, end/terminateDone
  • BPMS-083Jobs + timers + scheduler with leases/fencing; calendars; SLA clocksDone
  • BPMS-084Release bundles + publish integrationDone
  • BPMS-085Work items, assignment strategies, manager chain, DoA matrix, quorum, per-groupDone
  • BPMS-086Delegation, OOO substitution, SoD re-check, send-backDone
  • BPMS-087Rule tables (UNIQUE/FIRST/COLLECT)Not started
  • BPMS-088Incidents, retry/skip/cancel, instance admin opsDone
  • BPMS-089Conformance suite + model-based tests + deterministic simulation harnessNot started
  • BPMS-100Step builder + React Flow canvas + properties + validate/test-run/review/publishDone
  • BPMS-101Form builder + renderer (calc, prefill, repeating, lookups, PDF of submission)Done
  • BPMS-103Request portal/catalogue, start form, request detail, comments/@mentions/watchersDone
  • BPMS-105My Work 3-pane inbox (tasks, acks, signatures), bulk with previewDone
  • BPMS-106Template gallery + install wizard + Wave-1 templates (13)Done
  • BPMS-111E2E-R2 pack (R2-01…16 + ISO) + FirefoxNot started
  • BPMS-121Usability round + SUS measurement + fixesNot started
  • BPMS-207Mobile bottom bar for the app shellDone
  • BPMS-209S3-compatible storage backend, EXIF stripping at upload, separate preview originDone
  • BPMS-212Delegate a single work item; send back to an earlier stepDone
  • BPMS-214Request comments, @mentions and watchersDone
  • BPMS-216My work bulk decisions with preview; acknowledgement and signature tabsDone
R3ActiveMar 2027 – May 2027Gate G-R3

Operate & Sign

Admin console, DoA, master data, recall/edit, e-sign v1, 13 templates, PWA, BPMN import

2 done1 in progress15 not started18 epics

Epics in R3
  • BPMS-066Retention policy per record class (policy only)Done
  • BPMS-102Master-data tables (CSV import, lookups, versioned)Not started
  • BPMS-104Recall/withdraw, edit-after-submit, request-on-behalf, numberingNot started
  • BPMS-107E-sign v1: PDF, recipients/roles, routing, bulk, fields, consent step, ceremony, certificateIn progress
  • BPMS-108All requests / all work / workload / process health / ops monitorDone
  • BPMS-109PWA (360px) for My Work, requests, acks, signingNot started
  • BPMS-110BPMN 2.0 XML import (subset) + compatibility reportNot started
  • BPMS-112E2E-R3 pack (R3-01…12 + MOB + ISO) + WebKitNot started
  • BPMS-208Server-side tagged PDF, DOCX import (with pictures), variables blocksNot started
  • BPMS-210Encrypted restricted instance data, at-risk SLA state, IANA time zonesNot started
  • BPMS-211Claim/unclaim, round-robin and least-loaded assignment, quorum, DoA matrixNot started
  • BPMS-213Instance admin ops: skip a step, cancel/terminate an instance, migrate versionNot started
  • BPMS-215Template install wizard, role mapping at install, remaining Wave-1 process templatesNot started
  • BPMS-217Process health, email bounces and timer lateness in OperationsNot started
  • BPMS-218Separate preview origin for file previews (own domain/host, cookie-less)Not started
  • BPMS-219Designer next: editable parallel and notify steps, connect on the canvas, owner-chosen approval outcomes (OQ-16), review in the designerNot started
  • BPMS-220Form builder next: form artifacts, calculated fields, repeating groups, prefill, lookups, sections, preview as a role, PDF of submissionNot started
  • BPMS-221Dependents to update: when an SOP or policy a published process pins gets a new version, list the processes to republishNot started
R4ActiveMay 2027 – Jul 2027Gate G-R4

Enterprise Connect

SSO/SCIM, scoped admins, webhooks/API/CLI, email approvals, guests, e-sign v2

0 done4 in progress10 not started14 epics

Epics in R4
  • BPMS-140OIDC SSO, SAML-broker, SSO enforcement, JITIn progress
  • BPMS-141SCIM 2.0 serverNot started
  • BPMS-142Scoped/delegated admins; IP allowlistsNot started
  • BPMS-143Webhooks (Standard Webhooks), HTTP connector via egress proxy, inbound eventsIn progress
  • BPMS-144Public API hardening, OpenAPI, CLI, TS/Python SDKsIn progress
  • BPMS-145Email-actionable approvals, reply-by-email, web pushIn progress
  • BPMS-146Guests + external signers (magic link + OTP); self-serve signing linksNot started
  • BPMS-147E-sign v2: DOCX + merge, anchor tags, conditional fields, delegate, correction, embeddedNot started
  • BPMS-148Public forms (privacy CAPTCHA), save & resume, partials, form signature fieldNot started
  • BPMS-149Subprocesses, reusable sub-flows, duplicate detection, bulk import, env promotionNot started
  • BPMS-150Auto-generated process documentation; policy exceptions; policy templatesNot started
  • BPMS-151Emergency alerts, content validation period, moderation, quizNot started
  • BPMS-152E2E-R4 pack incl. Keycloak, SCIM, webhook receiverNot started
  • BPMS-206KMS / OpenBao root key adapters and yearly automatic root rotationNot started
HRActiveJul 2027 – Aug 2027Gate G-HR

HR time & attendance (0.5)

docs/25: locations + holidays, leave policies + ledger, leave requests, team calendar, shifts, attendance, regularization, month close (owner 2026-10-14)

1 done3 in progress4 not started8 epics

Epics in HR
  • BPMS-2220.5 HR: work locations (IANA zone, work week), holiday calendars with optional holidays, iCal/CSV import; engine calendars follow themIn progress
  • BPMS-2230.5 HR: leave types, policies by audience, accrual and rollover jobs, balance ledger, audited adjustmentsIn progress
  • BPMS-2240.5 HR: leave requests on the engine (day counting, half days, hold/take/release, cancel after approval), Time off pageIn progress
  • BPMS-2250.5 HR: team calendar (who's out, privacy) and org chartDone
  • BPMS-2260.5 HR: shift patterns and weekly rosters (draft, publish, notify), my scheduleNot started
  • BPMS-2270.5 HR: attendance (clock in/out, punch import CSV/API), derived daily statusNot started
  • BPMS-2280.5 HR: regularization requests on the engine (originals kept)Not started
  • BPMS-2290.5 HR: attendance register and reports, month close, payroll-ready exportNot started
R5Jul 2027 – Aug 2027Gate G-R5

Cases & Compliance

Cases, investigations, legal hold, Part 11, reports, AI optional

0 done0 in progress11 not started11 epics

Epics in R5
  • BPMS-160Case types, queues, macros, SLAs, link/merge, restricted casesNot started
  • BPMS-161Investigations: pins, legal hold, signed export, conflict-of-interestNot started
  • BPMS-162Checkpoints, RFC 3161, WORM export, procera-verify CLINot started
  • BPMS-163Attestation campaigns, control mapping, access reviewsNot started
  • BPMS-164Retention disposition + certificates, DSAR template, legal hold engineNot started
  • BPMS-165Part 11 mode, PAdES-LTV, TSA; in-person/kiosk signingNot started
  • BPMS-166Alert centre, custom dashboards, report builder, scheduled reports, KPI goals, usage analytics, CSATNot started
  • BPMS-167Separation mode; break-glassNot started
  • BPMS-168Role-based onboarding/training pathsNot started
  • BPMS-169E2E-R5 pack incl. investigations, Part 11, break-glassNot started
  • BPMS-186AI assistance P1 set (drafting, summaries, translate, Q&A) behind kill switchNot started
GAAug 2027 – Oct 2027Gate G4/G5

1.0 hardening + release

Load/HA/DR, pentest, a11y/VPAT, i18n, docs, full E2E regression

0 done0 in progress8 not started8 epics

Epics in GA
  • BPMS-180Load test at reference load; HA failover; RPO/RTO restore drillNot started
  • BPMS-181External pentest + ASVS L2 self-assessment + fixesNot started
  • BPMS-182WCAG 2.2 AA audit + VPAT 2.5 INTNot started
  • BPMS-1833 UI languages + RTL + pseudo-localeNot started
  • BPMS-184Helm chart, air-gapped bundle, upgrade N-1→N tests, dedicated-DB tierNot started
  • BPMS-185Docs site, admin guide, API reference, trust packNot started
  • BPMS-187E2E-GA regression: 3 browsers × 2 viewports, cache-off, upgrade-path R1→1.0, air-gappedNot started
  • BPMS-190GA release: signed artefacts, SBOM, provenance, runbooksNot started
POSTOct 2027 – Mar 2028Gate Demand

Post-GA expansion

Chat platforms, HRIS/ERP, QES/Aadhaar, BPMN/DMN, mining, AI agents

0 done0 in progress8 not started8 epics

Epics in POST
  • BPMS-200Chat/host-platform connectors (identity, embed, cards, notifications, directory)Not started
  • BPMS-201Chat cards (Slack/Teams), M365/Google, HRIS, ERP connectorsNot started
  • BPMS-202QES via QTSP; Aadhaar eSign via ESP; SMS/IDV providersNot started
  • BPMS-203BPMN view (diagram-js), DMN import/export, migration tool, simulationNot started
  • BPMS-204Event-log export OCEL 2.0 / XESNot started
  • BPMS-205Governed AI agent stepsNot started
  • BPMS-230Future: payroll calculation (components, pay groups, monthly run from closed attendance, country rules as plug-ins, bank file)Not started
  • BPMS-231Future: releasing documents to people (payslips, letters) generated per person, encrypted, batch release, My documents, ack or e-signNot started

An epic is a tracker work item. Each release lists the epics assigned to it; status values are those in the tracker (done, in review, in progress, blocked, not started, deferred). The bars count in review as in progress, and blocked or deferred as not started. Detail lives in the tracker dashboard and docs/07.