Milestones
List view
The committed capability state: the lock/state RFC and its first increment (MCP configuration-class sources — allowlists and host MCP config as reviewable capability deltas), review-surface completion (#428, #325), and public, telemetry-free adoption evidence.
Due by December 31, 2026•0/4 issues closedFour flags — make the verdict portable and the boundary public: one frozen capability schema, the capability delta as an in-toto attestation, replayable incident fixtures, the OWASP Agentic Top 10 mapping, and a generated coverage report of the determinism boundary. Plus the routes that make cold evaluation real: MCP registration-idiom detection (#431) and side-effect-free local review (#326). Release-exit measurement: #312.
Due by November 6, 2026•13/20 issues closedRelease integrity and gate correctness. The final tag requires an approved qualification policy, tagged-source/qualified-wheel binding, deterministic rehearsal and test evidence, a recoverable publication transaction, and a wheel-scoped signed SBOM.
No due date•11/14 issues closed