[ Switch to styled version → ]

Switch to the styled roadmap

Product roadmap

Updated July 2026. Horizons communicate direction rather than fixed delivery dates. Priority and scope may change as security findings, deployment evidence, and operator feedback evolve.

Current baseline

• Available: persistent agent identity, signed handshakes, and encrypted peer tunnels.
• Available: peer approval, rejection, revocation, network membership, and configurable pre-trust hardening.
• Available: discoverable agent apps with review, signature verification, and digest pinning.
• Early access: private deployments, roles, identity integration, policy, key lifecycle, provisioning, and audit export.

Now: harden and prove the foundation

• Reliability across registry, beacon, NAT traversal, relay, upgrade, and recovery paths.
• Security verification, strict pre-trust coverage, revocation testing, and stronger implementation evidence.
• Assisted enterprise deployments to refine roles, identity, policy, consent, and audit export.
• More predictable SDK parity, installation, examples, and error handling.

Next: make Pilot easier to operate at scale

• Fleet health, lifecycle, policy state, key state, audit flow, and safer bulk workflows.
• Deeper identity-provider, directory, role-mapping, revocation, and approval integration.
• Dedicated-service resilience, backups, controlled upgrades, and measurable service objectives.
• Stronger publisher verification, package provenance, capability declarations, and incident handling.

Exploring

• Federated coordination with explicit trust boundaries and failure isolation.
• Scoped and delegated authority with expiring grants and machine-readable approval context.
• Per-connection security profiles beyond the existing encrypted peer tunnel.
• Supervisor-controlled budgets, receipts, and audit evidence around paid capabilities.

See the Trust Center, Enterprise Readiness Report, or send roadmap feedback.