Public Roadmap

This roadmap is a public planning view. It avoids dates unless a release is already published, and it separates stable surfaces from research or deferred maintenance tracks.

Consolidated Open-Item Register

This section is the canonical open-item list. Rows keep completed sub-items as evidence under their parent item, then state the exact remaining scope. Detailed sections below preserve the longer roadmap context without creating a second queue.

Current execution breakdown

This breakdown is the short operational view of the same register. It exists so the continuation cadence can show visible progress without creating another TODO queue.

Track	Current state	Next closure unit
Reactor mode and phase-signal semantics	Release v1.4.1 publishes the review-only technology/diagnostic atlas, producer-readiness register, and diagnostic-plan review boundary across the 22-project diagnostic-plan portfolio. Five configuration-specific physical-evidence requests are now materialised in source control. The atlas distinguishes physical, event-relative, protocol, numerical, bounded, categorical, and unobservable meanings without granting action authority.	Materialise one of the eight remaining accepted-plan requests at a time and qualify only genuine producer-owned physical envelopes with exact clock, calibration/operator, uncertainty, validity, quality, provenance, and observability evidence.
U1 public boundary validation	Many constructor, config, JSON, backend, scalar, matrix, polyglot, monitor, and autotune signal-ingress/pipeline/reward boundaries are already fail-closed with module-specific tests; optional polyglot backend dispatch now demotes only loader/unavailability failures while propagating physics-contract faults; UPDE direct accelerator validators now reject raw-list NumPy boolean aliases before dtype coercion; UPDE, monitor, and coupling Julia loaders plus direct experimental Julia bridges now require juliacall.Main before advertising or side-loading optional Julia bridges; direct Go shared-library loaders now demote host dynamic-loader OSError for unloadable c-shared artefacts to optional-backend ImportError; direct Mojo executable probes now reject non-executable compiled backend artefacts and demote host subprocess-launch OSError before backend payload parsing; direct delay, Doppler, and moving-frame accelerator outputs now replay finite phase-vector, principal-branch, and ballistic kinematic checks after Go/Julia/Mojo return; public market optional-backend outputs now replay finite unit-interval, cardinality, diagonal, and symmetry checks before publication; public and direct envelope amplitude/envelope, window, RMS-output, and modulation-depth boundaries now reject numeric-string aliases before publication while replaying finite, cardinality, non-negative RMS, and bounded modulation-depth checks; public and direct geometric constructor, phase-vector, frequency-vector, flattened coupling, phase-lag, scalar-control, count, and backend-output boundaries now reject numeric-string aliases before publication while replaying finite torus cardinality and [0, 2*pi) phase-domain checks; public and direct simplicial input arrays, shared/public backend outputs, and Julia raw returns now reject numeric-string aliases before publication while replaying finite torus cardinality and [0, 2*pi) phase-domain checks; public PAC optional-backend outputs now replay finite unit-interval scalar/cardinality checks before publication; public and direct basin-stability phase-vector, frequency-vector, flattened coupling, phase-lag, scalar-control, count, and backend-output boundaries now reject numeric-string aliases before publication; public order-parameter optional-backend outputs now reject boolean scalar aliases before publication; public and direct hypergraph phase-vector, frequency-vector, edge-index, edge-strength, pairwise/phase-lag matrix, scalar-control, count, order-parameter, backend-output, and Julia raw-return boundaries now reject numeric-string aliases before publication while replaying finite torus cardinality and [0, 2*pi) phase-domain checks; public inertial optional-backend outputs now replay finite (theta, omega_dot) cardinality and [0, 2*pi) phase-domain checks before publication; public and direct swarmalator constructor, position, phase, frequency, scalar, count, order-parameter, optional-backend, and Julia raw-return boundaries now reject numeric-string aliases before publication while replaying finite position cardinality plus non-boolean torus phase cardinality and [0, 2*pi) checks before publication; public and direct spatial-modulator position, base-coupling, scalar-control, count, decay-form, backend-output, and Julia raw-return boundaries now reject numeric-string aliases before publication while replaying finite real cardinality and zero-diagonal coupling checks; public spectral optional-backend outputs now replay finite real non-boolean eigensystem cardinality, non-negative sorted eigenvalue, and non-zero non-trivial Fiedler-vector checks before publication; public Lyapunov and direct Go/Julia/Mojo boundaries now reject boolean, complex/object-complex, numeric-string, non-finite, wrong-cardinality, non-zero-diagonal, and unsorted-spectrum aliases before publication; public and direct NPE phase-vector and phase-distance boundaries now reject boolean, complex/object-complex, numeric-string, non-finite, wrong-cardinality, asymmetric, non-zero-diagonal, and out-of-range aliases before publication; public and direct ITPC phase-vector, backend-output, persistence-scalar, and exact-reference boundaries now reject numeric-string aliases before publication; public and direct recurrence boundaries now reject numeric-string trajectory, backend-output, and exact-reference aliases before publication; public and direct chimera phase-vector, coupling-matrix, and backend local-order boundaries now reject numeric-string aliases before publication; public and direct embedding signal, trajectory, scalar, and backend-output boundaries now reject numeric-string aliases before publication; public and direct entropy-production phase-vector, frequency-vector, coupling-matrix, scalar-control, and backend-output boundaries now reject numeric-string aliases before publication; public and direct Poincare trajectory, phase-history, normal-vector, scalar-control, result-record, and backend-output boundaries now reject numeric-string aliases before publication; public and direct winding phase-history, scalar-control, and backend-output boundaries now reject numeric-string aliases before publication; public twin-confidence backend divergence pairs and public/direct phase/order windows now reject boolean, complex/object-complex, and numeric-string aliases before publication; public and direct Strang-splitting phase-vector, frequency-vector, coupling-matrix, phase-lag, and backend-output boundaries now reject boolean, complex/object-complex, and numeric-string aliases before publication while preserving finite real numeric-object arrays; public Ott-Antonsen reduction optional-backend outputs now replay finite non-boolean scalar, OA unit-disk, R == |z|, and psi == atan2(Im(z), Re(z)) checks before publication.	Continue one coherent public boundary surface at a time until the residual broad constructor/config sweep is exhausted.
U1 stateless-UPDE boundary addendum	Public fixed-frequency and frequency-schedule arrays, scalar controls, and counts now reject boolean, complex, and numeric-string aliases before dispatch; Python and optional-backend phase returns replay finite real-vector cardinality before publication, with Julia raw dtype preserved until validation.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 Ott-Antonsen boundary addendum	Empirical frequency samples reject boolean, complex, and numeric-string aliases before Lorentzian fitting; the direct Rust runner validates scalar inputs before coercion, and optional Rust steady-state output must be finite, real, and inside [0, 1].	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 order-parameter boundary addendum	Public global-order, debiased-order, PLV, and layer-coherence phase inputs plus shared/public backend scalar outputs reject numeric-string aliases before float coercion; Mojo stdout remains explicit parsed protocol text.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 cellular-sheaf boundary addendum	Public phase, frequency, restriction-map, and drive-reference arrays reject boolean, complex, and numeric-string aliases before conversion while preserving real numeric object arrays; optional Rust phase output replays one-dimensional N * D cardinality, finiteness, and torus-domain checks, and its adaptive timestep must be positive and finite before last_dt publication.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 sparse-Rust boundary addendum	Optional Rust sparse step/run output replays exact oscillator cardinality, finite real dtype, and [0, 2*pi) torus-domain checks before publication; the backend adaptive timestep must be positive and finite before the public last_dt diagnostic is updated.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 adjoint boundary addendum	Finite-difference and optional JAX adjoint paths share fail-closed finite real state/frequency/coupling/lag shape and zero-diagonal checks before execution; positive step counts and perturbation/timestep scalars are validated before arithmetic or backend import.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 Bayesian-UPDE boundary addendum	Direct phase/frequency/coupling/lag arrays, Gaussian parameters, posterior-fit data, and custom distribution samples reject boolean, complex, and numeric-string aliases before conversion while preserving real numeric-object arrays; drive controls must be finite real scalars before Monte Carlo execution.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 prediction boundary addendum	Forward and variational phase, frequency, predicted-state, observed-state, and precision vectors reject boolean, complex, and numeric-string aliases before conversion while preserving finite real numeric-object arrays; malformed conversion payloads fail before prediction, free-energy arithmetic, or state mutation.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 JAX-engine boundary addendum	Public Kuramoto and Stuart-Landau JAX state, frequency, growth, coupling, amplitude-coupling, and phase-lag arrays reject boolean, complex, and numeric-string aliases before host conversion or device dispatch while preserving finite real numeric-object arrays.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 twin-confidence output addendum	Direct Go, Julia, and Mojo (js, w1) backend evidence rejects boolean, complex/object-complex, and numeric-string aliases before float coercion while preserving finite real numeric-object pairs; shape, finiteness, Jensen–Shannon, and Wasserstein bounds are replayed before publication.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 public twin-confidence output addendum	The public dispatcher preserves raw optional-backend (js, w1) source types until boolean, complex/object-complex, and numeric-string aliases are rejected; finite real numeric-object pairs remain compatible, and existing shape, finiteness, Jensen–Shannon, and Wasserstein bounds remain enforced before publication.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 public Strang-splitting array addendum	Public phase, frequency, coupling, phase-lag, and optional-backend phase arrays reject boolean, complex/object-complex, and numeric-string aliases before float coercion while preserving finite real numeric-object arrays; shape, finiteness, zero-self-coupling, and torus-domain checks remain enforced.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 CouplingBuilder Rust-output addendum	Raw Rust K_nm and alpha returns reject boolean, complex/object-complex, and numeric-string aliases before conversion and use the deterministic NumPy fallback; finite real numeric-object matrices remain compatible and all physical matrix invariants are replayed.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
U1 geometric Julia output addendum	The direct Julia torus bridge preserves raw output dtype until shared validation rejects boolean, complex/object-complex, and numeric-string aliases while accepting finite real numeric-object phase vectors; cardinality, finiteness, and [0, 2*pi) bounds remain enforced before publication.	Continue the residual broad public constructor/config validation sweep from the internal U1 scope.
R1 coverage debt closure	The local coverage guard passes, and recent work has added focused behaviour tests for the residual source areas listed in the internal coverage inventory.	Reduce remaining source debt against a fresh CI coverage artefact; keep tests module-specific and regression-driven.
R7 benchmark and validation leadership	Reference-suite metadata, public snapshot pages, enforced benchmark regression gates, Strogatz/Acebrón Kuramoto analytic acceptance, Stuart-Landau/Pikovsky Hopf acceptance, Petri-net exact reachability acceptance, chimera/dimension/embedding/entropy-production/Hodge/ITPC/Lyapunov/NPE/order-parameter/recurrence/spectral/transfer-entropy/twin-confidence/winding polyglot parity gates, shared simulate() backing for spo run, evaluate_binding_spec, audit replay evidence, and the scenario-driven orchestration-uplift benchmark, plus domain benchmark surfaces exist, but broader public head-to-head validation remains incomplete.	Add reproducible head-to-head benchmarks against reviewed domain tools and open datasets, then publish physics-fidelity artefacts only with measured evidence.
S7 CI optimisation	CI already validates roadmap status, reference suite, security scans, and scoped feature tests.	Evaluate unified Python jobs, FFI coverage merge, and Hypothesis profile reductions without weakening gates.
V2 typed NumPy signatures	Several public helper, SAF/Laplacian JAX, PAC/market/reduction/simplicial/splitting/swarmalator-backend, and accelerator surfaces now use element-typed or scalar-typed boundary contracts.	Continue scoped module-by-module signature sweeps as files are touched.
JSON deserialisation hardening	Named Gaian heartbeat and Prometheus response boundaries are fail-closed with focused module tests.	Closed for the named Gaian/Prometheus scope; future adjacent JSON boundaries are tracked under public boundary maintenance when the owning module is touched.
One-click SPO Studio	The operator prototype covers loading, binding review, live metrics, deployment manifests, recovery reports, and export flows.	Turn Studio into a deployable operator dashboard with digital-twin sync, TE/Hodge anomaly root-cause support, one-click imprint plasticity rules, and real FPGA or neuromorphic evidence.
Auto-binding and data-driven discovery	Review-only proposal builders, SINDy/coupling evidence, auto_initial_k, and benchmark-gated fixture thresholds are implemented.	Validate against private or partner live datasets under review-only acceptance thresholds.
Guided deployment path	Readiness, package, materialisation, hardware target, verified evidence, connector handoff, hashes, parity, and blocked-reason records exist.	Attach real target evidence.
Dynamic higher-order topology adaptation	Foundation, demos, Lyapunov mutation validation, and policy workflow validation are implemented.	Extend to additional reviewed partner domainpacks.
Causal intervention engine	Counterfactual rollout, causal-graph learning surface, and several attribution demos are implemented.	Add larger causal-model learners and more attribution demos.
RL/autotune layer	Replay-only proposal generation, differentiable objectives, N-channel optimisation, benchmark gates, and Lyapunov/STL/safety-cost constrained replay acceptance are implemented.	Complete full trained PPO/SAC or Bayesian knob-policy experiments with baselines, larger replay corpora, and publication artefacts before any live actuation claim.
FEP / predictive-coding supervisor	Predictive supervisor foundation and hierarchy proofs exist.	Integrate deeper predictive-coding world-model support.
Full N-channel algebra	Runtime policy records, audit/report exposure, delayed/uncertain channels, supervisor execution, and replay-only optimisation exist.	Add deeper learner-backed optimisation.
Hierarchical and distributed orchestration	Parent orchestration, bounded escalation, edge/cloud envelopes, adapter boundaries, demos, gossip replay, and phase-vector gossip exist.	Deliver nested SPO instances with bounded escalation, phase-gossip, deeper FEP/active-inference meta-supervision, owned live transports, transport smoke gates, and broader multi-machine demos.
Digital-twin binding standard	Contract export, adapters, no-I/O hardware boundary, live/replay evidence, observability bundles, and dashboard/playbook artefacts exist.	Attach real hardware evidence and continue operator productisation.
Formal verification export	Petri-net, policy, STL, package, checker-command, readiness, Promela, SMT-LIB, smoke CI execution, eleven safety-domain SPIN/Z3 CI packages, deterministic non-actuating runtime-control certificates, warning-clean Lean fixed-point supervisor proofs with placeholder/linter-suppression rejection, a Lean PHA-C acceptance replay certificate that binds spatial, phase, and moving-frame equation provenance, an optional Rust supervisor FFI readiness probe, and certificate-bound policy CBF admission with SMT-LIB admission artefact hashes exist.	Export fuller supervisor contracts across Petri, policy, STL, runtime coherence monitors, CBF admission evidence, Rust supervisor smoke evidence, and certificate consumers; refresh measured benchmark snapshots after remote formal-checker and reference-suite publication runs; keep adding warning-clean Lean mirrors whenever new reviewed safety-critical supervisor, projector, transition, or actuation contracts land.
STL runtime verification	Monitor, policy YAML, PRISM linkage, automata, non-actuating candidates, projection, closed-loop plans, deterministic runtime actuation-gate validation, and reference gates exist.	Maintain runtime-stack parity as live actuation backends and operator approvals expand.
Symbolic-to-binding compiler	Compiler, retrieval evidence, confidence factors, notebook, preflight evidence, ranking diagnostics, and reference gates exist.	Expand symbolic plus learning compilation from natural language and data into reviewed supervisor policies, extractors, and dynamic topology proposals, integrated with causal discovery and larger live-doc/domainpack corpora.
Cross-domain meta-transfer	Replay proposals, nested corpora, package export, entry points, non-publishing evidence, and pre-publish enforcement exist.	Validate larger private or partner audit-history corpora and decide optional package publication.
Plugin ecosystem	Registry, catalogue, Rust-facing metadata, approval-bound execution requests, storage, revocation, lifecycle, scheduler, retry, and dashboard artefacts exist.	Build a curated signed domainpack and extension store with reputation, audit scores, revocation, provenance, operator UX refinement, and adapter-family onboarding.

Latest U1 closure: the session-start gate is now fail-closed on malformed evidence. A wrong-sized engine seed fails the gate instead of silently skipping the coherence check; phase and imprint vectors must be one-dimensional real numeric arrays with finite entries (boolean, complex, text, object, non-finite, and wrong-dimensional evidence is rejected); extractor quality values must be finite floats in the unit interval before any scoring or collapse decision; and an invalid oscillator count raises instead of reporting.

Parent item	Completed evidence consolidated here	Remaining open scope
Public boundary validation sweep	focused constructor/config guards cover QueueWaves service config, UPDE/Stuart-Landau/Sparse/Sheaf/Torus/Inertial/Hypergraph/Simplicial/Swarmalator engines, strict real-numeric stochastic sweeps, monitors, HDL knobs, bridges, extractors, reporting, PAC heatmaps, and audit replay boundaries; adapter dataclass boundary guards now harden Gaian mesh peer state, Remanentia coherence snapshot, Synapse agent state, and Synapse coupling snapshot constructor invariants with dedicated boundary tests; distributed phase-gossip config/message constructors now reject bool/integer alias misuse and negative wall-clock timestamps; audit stream event constructors now enforce canonical payload hash consistency and signed/unsigned signature metadata contracts; gRPC fallback request/response dataclasses now fail closed on non-positive step/stream counts, negative timing/count fields, and malformed layer payloads; runtime observability metric snapshots now enforce UPDE-state type, regime non-emptiness, non-negative finite latency, and strict step-index contracts at construction time; additional U1 guard slices now harden ActionProjector constructor and runtime previous-value boundaries (including action payload type), KnmTemplateSet registration and lookup boundaries (including non-empty descriptions, floating dtypes, trimmed lookup names, normalised tab-wrapped storage keys, and canonicalised stored template names), BoundaryObserver constructor and observe runtime boundaries (including EventBus attachment, bool/non-numeric value rejection, and bool step/bound fail-close contracts), AuditLogger constructor/header/step/event boundaries (including path-type and event-stream contracts, seed/metadata type checks, UPDEState and action-list contracts, step-index guards, channel_runtime payload type validation, strict log_event event/data payload contracts, and finite epsilon payload enforcement), SSGF GeometryCarrier constructor/decode/update/reset boundaries (including callback and seed contracts plus constructor/reset bool-seed and update-epsilon rejection), SSGF cost public and Rust FFI real-valued/finite/weighted-term validation, CyberneticClosure constructor/step/run boundaries (including boolean phase-vector and outer-step rejection), the topological-integration observable observer constructor/runtime phase-vector boundaries (including bool-alias constructor guards and boolean/non-array/non-vector/empty phase-vector rejection), PetriNetAdapter mapping/context boundaries (including non-empty mapping, normalised regime names, strict context metric name/value validation, and a fully executed fixed 36-item U1 constructor/config closure checklist), incomplete Gaian mesh peer heartbeat payload rejection, Prometheus decoded-response shape/value validation, Synapse channel decoded hub-message validation, Remanentia decoded response payload validation, Neurocore Rust backend rate-vector validation, Redis finite JSON number enforcement, audit-stream finite JSON canonicalisation, QPU artifact finite JSON metadata/handoff enforcement, audit replay finite JSONL parsing plus hash verification, audit-signing keyring finite JSON enforcement, binding-loader finite numeric config enforcement, symbolic-binding report finite JSON hash enforcement, audit-logger finite JSONL hash-chain enforcement, meta-transfer finite and duplicate-key JSON package/replay ingestion enforcement, K_nm handshake spec finite and duplicate-key JSON enforcement, phase-gossip wire finite and duplicate-key JSON enforcement, Prometheus response finite and duplicate-key JSON enforcement, Synapse hub wire finite and duplicate-key JSON enforcement, Stuart-Landau real-numeric state/backend-output plus non-negative amplitude-coupling strength enforcement, UPDE zero self-coupling diagonal enforcement, Stuart-Landau zero phase/amplitude self-coupling diagonal enforcement, stateless UPDE dispatcher zero self-coupling enforcement, K_nm template zero self-coupling enforcement, K_nm handshake zero self-coupling enforcement, Lyapunov guard/spectrum and polyglot backend zero self-coupling diagonal enforcement, order-parameter direct Go/Julia/Mojo typed phase, PLV-pair, layer-index, scalar-output validation, finite mean-phase canonicalisation, and Mojo stdout cardinality enforcement, PLV empty/non-empty equal-length enforcement, layer-coherence mask bounds enforcement, finite coherence-magnitude enforcement, UPDE Rust-output phase-domain enforcement, UPDE Mojo stdout cardinality enforcement, Strang-splitting accelerated-backend phase-domain enforcement and Mojo stdout cardinality enforcement, envelope Mojo stdout cardinality enforcement, market Mojo stdout cardinality enforcement, simplicial Mojo stdout cardinality enforcement, hypergraph Mojo stdout cardinality enforcement, geometric Mojo stdout cardinality enforcement, inertial Mojo stdout cardinality enforcement, swarmalator Mojo stdout cardinality enforcement, spectral Mojo stdout cardinality enforcement, Hodge decomposition Mojo stdout cardinality enforcement and boolean-alias rejection, AttnRes Mojo stdout cardinality enforcement, plasticity complex-alias rejection, non-negative zero-diagonal coupling enforcement, bounded eligibility validation, and Rust self-edge zeroing, coupling-lag symmetric zero-diagonal physical-distance, cross-correlation sample-rate, and real-valued object-complex rejection validation, K_nm geometry direct constraint, custom projector output, finite-real-boolean validation, and Rust finite projection validation, spectral coupling/frequency/backend-output boolean and complex-alias rejection, E/I balance numeric-domain validation, universal-prior hyperparameter, seed, and frequency-vector validation, and coupling-inference scalar-config, phase-series, and transfer-entropy score validation, auto-discovery threshold, sample-period, table, time-column, fieldname, and column-identity validation, autotune phase-extraction, DMD frequency-identification, binding-spec pipeline, replay reward/proposal validation, and adaptive policy-search config/evaluator/audit-record validation, replay-learner seed, prior, canonical identity, exact non-actuation, finite audit-metadata validation, coupling-estimator empty-oscillator, boolean/complex alias, and non-finite least-squares fail-closed validation, and Phase-SINDy underdetermined phase-series, boolean-alias, Python/Rust coefficient validation, and TE-adaptive coupling input, score, and Rust-output validation, transfer-entropy complex-input, NumPy-bin, and zero-diagonal backend validation, HCP connectome scalar input plus boolean/complex/numeric-string/negative optional-backend structural matrix validation with finite real numeric-object compatibility, and Bayesian UPDE posterior-fit, distribution, and config boundary validation plus delayed-UPDE boolean-alias and delay-lookup validation plus Ott-Antonsen unit-disk state, frequency-sample boundary validation, and Mojo stdout cardinality/finite-scalar enforcement plus explicit-step numerics config and CFL-boundary validation plus PAC bin-count, non-negative-amplitude, and Mojo stdout cardinality enforcement plus basin-stability Mojo stdout scalar-cardinality/finite-value enforcement, bifurcation real-numeric source-type, shape, finite, zero-self-coupling, and composite Rust output validation, Lyapunov, EVS phase-trial real-valued/object-complex/boolean-alias rejection, sleep-staging timestamp real-valued/object-complex rejection, STL trace signal finite real-valued/object-complex/boolean-alias validation, and Rust stage/ultradian output validation, entropy-production public and direct-adapter shape/finite/real-valued/object-complex/boolean/numeric-string-alias rejection plus Mojo stdout raw-line cardinality enforcement, hybrid-order density-matrix positive-semidefinite validation, self-model phase-residual branch-cut wrapping, strange-loop scalar boolean-alias rejection, morphogenetic topology boolean-alias rejection, sheaf-coherence boolean/complex-alias rejection, topos-policy condition/action identity canonicalisation and contract validation, symbolic-binding topos layer-index contract validation, topos-domain finite example-hash validation, information-geometry boolean- and complex-alias rejection, information-geometry scenario boolean/complex-alias and finite-hash validation, value-alignment direct policy scalar boolean-alias rejection, Poincare trajectory, phase-history, normal-vector, result-record, backend-output numeric-string alias rejection plus backend crossing-count bound and Mojo stdout cardinality, winding phase-history, scalar-control, and backend-output numeric-string alias rejection plus exact wrapped-increment integer preservation, order-parameter, recurrence trajectory/backend-output numeric-string alias rejection plus backend-matrix symmetry/diagonal and exact threshold preservation, transfer-entropy backend boolean-alias rejection plus exact histogram-estimator scalar and matrix preservation, and dimension backend boolean-alias rejection, dimension numeric-string/real-valued/object-complex trajectory/epsilon/pair-index/spectrum and backend-output validation plus exact correlation-integral and Kaplan-Yorke reference preservation, NPE phase, radius, score, distance-matrix real-valued/object-complex/boolean-alias rejection, exact circular-distance preservation, and exact entropy preservation, ITPC phase, pause-index, output, persistence, and exact-reference numeric-string/real-valued/object-complex/boolean-alias rejection plus exact estimator and pause-index persistence preservation, chimera phase, coupling, state, backend-output numeric-string/real-valued/object-complex/boolean-alias rejection, and Mojo stdout scalar-cardinality enforcement, embedding signal, trajectory, scalar, backend-output numeric-string/real-valued/object-complex/boolean-alias rejection, exact delay-indexing preservation, integral nearest-neighbour index enforcement, and Mojo stdout cardinality enforcement, and psychedelic phase, coupling, entropy-output, polyglot-adapter numeric-string/real-valued/object-complex/boolean-alias rejection, and Mojo stdout scalar-cardinality enforcement plus PID phase, index, bin-count, and Rust scalar numeric-string/real-valued/object-complex/boolean-alias rejection and integrated-information phase-series, scalar, and matrix real-valued/object-complex/boolean-alias rejection, physiology replay parameter, metric, and partition object-complex/boolean-alias/result validation plus infrastructure replay parameter, metric, and partition object-complex/boolean-alias/result validation plus cyber-industrial replay parameter, metric, and partition object-complex/boolean-alias/result validation, and FusionCoreBridge positive q-profile, non-negative fusion-observable, stability-ratio, and non-empty phase-feedback validation plus PlasmaControlBridge boolean-alias, layer self-coupling, empty phase-snapshot, non-positive q-minimum, and non-negative plasma-ratio validation plus SCPNControlBridge empty, boolean-alias, complex-alias, and zero self-coupling K_nm plus non-empty real-positive omega validation and SNNControllerBridge bounded order-parameter, non-negative spike-rate, and real-valued array validation plus NeurocoreBridge non-negative seed and boolean-alias rate-vector validation plus LSLBCIBridge boolean-sample and timestamp validation plus Hardware I/O boolean/complex sample and simulated-frequency rejection plus Gaian mesh circular phase canonicalisation with focused regression tests plus Multiverse counterfactual object-dtype boolean/complex alias rejection before phase, frequency, coupling, alpha, and topology-mask float coercion plus multiverse domain-scenario phase, frequency, and branch-knob alias rejection plus causal direct-intervention drive-scalar fail-closed validation plus public AttnRes boolean/complex alias rejection, symmetric zero-diagonal K_nm enforcement, projection-seed validation, empty-system preservation, optional-backend output physics validation, and QueueWaves WebSocket keepalive JSON schema, duplicate-key, non-finite token, and UTF-8 byte-limit enforcement plus hierarchy JSONL replay duplicate-key and non-finite-token enforcement plus direct hierarchy sync envelope JSON duplicate-key and non-finite-token rejection plus audit replay JSONL duplicate-key enforcement	finish the residual broad public constructor/config validation sweep from the internal U1 scope
Coverage debt closure	historical fixes added behaviour coverage for five modules, local coverage guard passes, focused Studio/CLI/supervisor behaviour tests cover residual service-manifest, auto-coupling CLI, formal-readiness, policy-branching, and hierarchy-ingestion paths, focused quantum/causal/meta/autotune/reporting/QPU tests cover residual adapter validation, deterministic manifests, malformed-input rejection, and artefact parsing paths, focused QueueWaves/binding/monitor tests cover residual runtime, config, digital-twin, semantic, recurrence, and ITPC fallback boolean-alias rejection paths, focused coupling/UPDE/supervisor/plugin tests cover residual spectral, Hodge, attention-residual, market, bifurcation, plugin, sheaf, alignment, predictive, Byzantine, and topology edge paths, focused visualisation/reporting/SSGF/imprint/adapter tests cover residual rendering, summary, streamer, free-energy, carrier, PGBO, imprint, Redis-schema, Modbus, QPU artefact, and hybrid co-compiler boundaries, focused CLI/formal/binding/UPDE/monitor tests cover audit-stream sidecars, watch validation, fail-closed checker manifests, binding-loader validators, derived-channel errors, backend dispatch, RK45 fallback, delayed Rust dispatch, and transfer-entropy backend routing, focused Studio/supervisor/autotune/quantum-control tests cover stable UI payloads, policy diagnostics, hierarchy/topology/predictive/Byzantine audit determinism, learner fallback alternatives, replay-learner seed/prior/audit-metadata validation, reward component ordering, quantum bridge validation, and blank cross-channel rejection, focused gRPC/audit/TE/SSGF tests cover compatibility aliases, fail-closed audit keyring parsing, optional Rust dispatch contracts, Langevin/Boltzmann/temperature Rust paths, and TE-adaptive Rust routing, and focused coupling/EVS tests cover least-squares failure fallback plus non-numeric, non-finite, boolean-alias, and result-invariant monitor rejection	reduce residual source coverage debt versus the historical CI baseline, then refresh the internal coverage inventory from current CI artefacts
Rust benchmark coverage	reference-suite benchmark metadata, public benchmark snapshot, many feature gates, and Lyapunov Rust/Mojo/Julia/Go/Python parity benchmark records are in place	add dedicated benchmark files for the remaining Rust modules where measured, reproducible benchmark value exists
CI optimisation	current CI validates the public roadmap, reference suite, security scans, and scoped feature tests	evaluate unified Python jobs, FFI coverage merge, and Hypothesis profile reduction without weakening gate quality
Typed NumPy signatures	visualisation helpers, SAF/Laplacian JAX public arrays, EVS public phase-trial arrays, sleep-staging timestamp arrays, STL fallback trace arrays, strange-loop helper arrays, symbolic extractor integer-compatible signal contracts, UPDE public return documentation, Lyapunov, transfer-entropy, NPE, fractal-dimension, recurrence, embedding, Poincare, winding, ITPC, chimera, psychedelic, Hodge, spectral, AttnRes direct polyglot backend validation helpers, UPDE direct Go/Julia/Mojo backend boundary helpers, basin-stability direct Go/Julia/Mojo backend boundary helpers, envelope direct Go/Julia/Mojo backend boundary helpers, geometric direct Go/Julia/Mojo backend boundary helpers, hypergraph direct Go/Julia/Mojo backend boundary helpers, inertial direct Go/Julia/Mojo backend boundary helpers, Strang-splitting direct Go/Julia/Mojo backend boundary helpers, Swarmalator direct Go/Julia/Mojo backend boundary helpers, Ott-Antonsen direct reduction backend boundary helpers, and simplicial direct Go/Julia/Mojo backend boundary helpers have scoped element-typed annotations; latest coupling/monitor, autotune/adapters/reporting/supervisor, and UPDE/oscillator sweeps found no residual loose source signatures, and monitor plus direct accelerator boolean/complex alias helpers now use parameterised generic ndarray payload annotations instead of runtime-only np.ndarray annotations	maintain parameterised NDArray annotations as new public APIs and backend adapters land
JSON deserialisation hardening	GaianMeshNode rejects incomplete decoded heartbeat payloads before peer insertion and canonicalises finite circular psi values; PrometheusAdapter validates decoded response object/data/result/sample structure, rejects duplicate object keys and non-finite JSON constants, and enforces finite non-negative sample timestamps plus finite metric values before returning range arrays or instant scalars; SynapseChannelBridge rejects non-finite hub JSON constants and duplicate object keys before decoded sender/type/payload fields can update phase-channel state	done for the named Gaian/Prometheus/Synapse scope; future adjacent JSON boundaries are handled under public boundary maintenance
One-click SPO Studio	Streamlit operator prototype covers domainpack loading, raw-source import, binding review, beginner guidance, canvas review, live metrics, replay tuning, hierarchy monitor, connector plans, runtime boundary validation, deployment/package/materialisation manifests, hardware evidence packages, recovery reports, and Docker/WASM/project exports	make Studio a finished standalone product and attach real FPGA/neuromorphic evidence
Auto-binding and data-driven discovery	deterministic proposal builders, sample-rate inference, sparse derivative evidence, SINDy selection, graph inference, transfer-entropy coupling export, extractor proposals, auto_initial_k, and benchmark-gated domain thresholds are implemented	validate on private or partner live datasets under the same review-only threshold contract
Guided deployment path	deployment readiness, package, materialisation, hardware target, verified evidence, connector handoff, hashes, parity status, blocked reasons, and operator commands are implemented	attach real target evidence
Dynamic higher-order topology adaptation	foundation, plasma-control demo, traffic-flow/network-security transfer-entropy demos, Lyapunov mutation validation, off-diagonal topology input validation, pairwise-support policy hardening, and multi-domain Lyapunov policy workflow validation are implemented	extend to additional partner domains when new reviewed domainpacks land
Causal intervention engine	counterfactual rollout foundation, finite real-valued counterfactual, direct-intervention drive-scalar, and lagged-trace boundary validation, live causal-graph learning surface, and cardiac/power-grid/traffic-flow/network-security attribution demos are implemented	add larger causal-model learners and more attribution demos
RL/autotune layer	reward evaluation, replay ranking, offline candidates, proposal records, replay-only/adaptive search, PPO-like/SAC-like/hybrid-physics proposal generators, differentiable Equinox supervisor objective, N-channel optimisation surface, and multi-scenario benchmark gates are implemented behind non-actuating replay gates	run real trained PPO/SAC experiments, baselines, and publication artefacts
FEP / predictive-coding supervisor	predictive supervisor foundation, finite real-valued predictive/FEP hierarchy boundary validation, reusable hierarchy assessment, and power-grid/cardiac hierarchy proofs are implemented	integrate deeper predictive-coding world-model support
Full N-channel algebra	channel algebra summary, resolved-config integration, audit/report exposure, delayed/uncertain classification, runtime policy records, supervisor execution, and replay-only channel-weight/cross-coupling optimisation are implemented	add deeper learner-backed optimisation
Hierarchical and distributed orchestration	reduced-summary parent orchestration, bounded escalation, edge/cloud sync envelopes, strict non-socket runtime validation, JSONL/REST/frame adapter boundaries, domainpack transport demos, offline gossip replay, and phase-vector gossip are implemented	deliver owned live transports, transport smoke gates, and broader cross-machine deployment demos
Digital-twin binding standard	binding contract export, transport-neutral validation, JSONL replay, in-memory adapter, manifest compatibility, REST/gRPC/Kafka adapters, no-I/O hardware boundary, and shared live/replay operator evidence are implemented	attach real hardware evidence and continue digital-twin operator productisation
Formal verification export	Petri-net/policy/STL exports, package manifests, checker command manifests, checker-readiness audits, runtime-control certificates, non-executing CLI package export, reviewed Promela/SMT-LIB package artefacts with SPIN/Z3 command-readiness manifests, smoke CI execution, safety-domain packages for cardiac rhythm, chemical reactor, power grid, PLL clock, autonomous vehicles, satellite constellation, power-safety N-channel, traffic flow, swarm robotics, manufacturing SPC, and robotic CPG, Rust supervisor FFI readiness auditing, certificate-bound policy CBF admission with SMT-LIB admission artefact hashes, plus Lean fixed-point supervisor proof mirrors are implemented	refresh measured benchmark snapshots after remote formal-checker and reference-suite publication runs; keep adding packages, certificate consumers, runtime monitors, CBF admission evidence, Rust supervisor smoke coverage, and Lean mirrors when new reviewed safety-critical contracts land
STL runtime verification	robustness monitor, policy YAML integration, PRISM linkage, monitoring automata, non-actuating controller candidates, policy-gated projection, closed-loop plans, deterministic non-actuating runtime actuation-gate validation, and reference gates are implemented	maintain parity as live actuation backends and operator approvals expand
Symbolic-to-binding compiler	compiler foundation, domainpack/docs retrieval evidence, confidence factors, generated review notebook, preflight evidence, retrieval diagnostics, and reference gates are implemented	expand optional corpus with larger live-doc/domainpack corpora
Cross-domain meta-transfer	replay-backed proposals, multi-audit fitting, nested audit corpora, package/export manifests, CLI export, entry-point evidence, pre-publish enforcement, and manifest-readiness gates are implemented	validate against larger private or partner audit-history corpora and decide optional package publication
Plugin ecosystem	manifest registry, entry-point discovery, capability declarations, compatibility checks, audit records, marketplace catalogue, Rust-facing registry export, deterministic metadata-only planning artefacts, spo plugins plan-execution output, approval-consumption spo plugins request-execution PLAN_JSON APPROVAL_JSON request artefacts, request-bound runtime invocation with pre-import plan/target/shape revalidation, stored-request hash validation and revocation checks, deterministic request storage manifests with retention and custody metadata, atomic local-file request bundle persistence, spo plugins persist-execution-request operator persistence with revocation-list input, spo plugins revoke-execution-request lifecycle revocation artefacts, deterministic spo plugins revocation-list artefacts, deterministic spo plugins lifecycle-status status records, deterministic spo plugins lifecycle-summary batch review and renewal queues, deterministic spo plugins lifecycle-policy-report operator dashboard action counts, deterministic spo plugins lifecycle-renewal-queue operator follow-up queue output, deterministic spo plugins lifecycle-multistore-dashboard aggregate operator dashboard output, deterministic spo plugins lifecycle-multistore-drilldown per-store provenance output, deterministic spo plugins lifecycle-remediation-orchestration priority-ordered action-plan output, deterministic spo plugins lifecycle-remediation-action-status state transition artefacts, deterministic spo plugins lifecycle-remediation-execution-dashboard closed-loop progress surfaces, deterministic spo plugins lifecycle-remediation-deployment-handoff deployment command handoff surfaces, deterministic spo plugins lifecycle-remediation-scheduler-queue scheduler-ready deployment queue output with strict window-fit validation, deterministic spo plugins lifecycle-remediation-scheduler-telemetry operator telemetry output, deterministic spo plugins lifecycle-remediation-scheduler-adapter-handoff external scheduler adapter queue handoff output, deterministic spo plugins lifecycle-remediation-scheduler-acknowledgement execution acknowledgement artefacts, deterministic spo plugins lifecycle-remediation-scheduler-acknowledgement-replay replay-manifest ingestion output, deterministic spo plugins lifecycle-remediation-scheduler-execution-dashboard live adapter execution aggregation output, deterministic spo plugins lifecycle-remediation-scheduler-control-plan interactive control action planning output, deterministic spo plugins lifecycle-remediation-scheduler-runbook grouped operator runbook output, deterministic spo plugins lifecycle-remediation-scheduler-automation-profile adapter automation profile output, deterministic spo plugins lifecycle-remediation-scheduler-acknowledgement-capture interactive acknowledgement capture output, deterministic spo plugins lifecycle-remediation-scheduler-retry-profile adapter retry/backoff policy output, deterministic spo plugins lifecycle-remediation-scheduler-retry-orchestration retry queue orchestration output, guarded metadata-only Rust handoff manifests, grouped dispatch records, explicit loading-disabled gates, Python-owned opt-in loading gates with manifest compatibility/package-boundary/target-callability checks, deterministic execution audit records, pre-import target-hash approval, operator identity/reference binding to plan_hash and target_hash, runtime policy envelopes that require require_target_hash_approval and a matching approved target_hash for load/execute flags, argument-value-free execution records, and deterministic non-local storage-adapter handoff manifests for object/API deployment stores are implemented	continuous operator UX refinement for adapter families remains iterative productization work
Observability and digital-twin polish	digital-twin operator evidence and runtime Prometheus text exports for accepted/rejected sync counts, adapter health, sequence, residual extrema, status, capabilities, directions, and mismatch reasons are implemented; deterministic spo digital-twin-observability-bundle links operator evidence with scheduler dashboard/replay linkage and Prometheus export text; deterministic spo digital-twin-grafana-dashboard-pack and spo digital-twin-live-deployment-playbook provide adapter-family dashboard packaging plus live rollout gate/runbook artefacts	continue adapter-family UX refinement and site-specific rollout conventions
Self-modelling embodied digital twin	self_model_error monitor, replay-backed review-only reconfiguration evidence, domain scenarios, and reference gates are implemented without live actuation	collect real hardware-in-the-loop rebinding evidence
Evolutionary supervisor policy search	offline replay search, STL/counterfactual filters, richer policy DSL, Petri-net/topology grammars, deterministic review gates, disabled live merge/hot patching, passive Studio panel surfacing, public Studio facade wiring, standalone Studio product-manifest discovery, and spo evolutionary-policy-dsl-search/spo evolutionary-petri-mutation/spo evolutionary-topology-mutation operator CLIs are implemented	continue operator UX refinement as additional evidence corpora land
Information-geometry control	dependency-free Fisher-Rao/Wasserstein primitives, metric tensors, natural-gradient proposals, curvature/geodesic metrics, scenarios, optional JAX-native acceleration with NumPy parity evidence, passive Studio panel surfacing, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented without live actuation	continue operator UX refinement as additional evidence corpora land
Sheaf-cohomology control	supervisor foundation, six heterogeneous domain demos, obstruction summaries, top-residual evidence, review-only sheaf-Laplacian control proposals, passive Studio operator panel surfacing, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented	validate on maintained live-domain operator datasets
Federated meta-orchestrator	policy-gradient aggregation, raw-data rejection, privacy accounting, hash-linked transport envelopes, secure aggregation manifests, DP noise manifests, production-boundary gates, and deployment-preflight gates are implemented	deliver actual live distributed transport, live secure aggregation execution, production DP noise service operation, and operator UI surfacing
Byzantine-fault-tolerant meta-orchestrator	offline three-node BFT consensus manifests verify signed policy proposals, hash-linked audit parents, quorum winners, rejected nodes, and non-actuating review gates	deliver live distributed transport
Quantum-native compiler target	deterministic OpenQASM 3 compiler manifests, Qiskit/PennyLane handoff, co-simulation parity, QPU-disabled readiness audits, and reference gates are implemented	execute against real QPU targets only after evidence, credentials, parity, and operator approval exist
Neuromorphic compiler target	deterministic Lava/PyNN schedules, population/projection/control-action records, simulator parity, hardware-write disabled audits, readiness audits, and reference gates are implemented	execute against real neuromorphic targets only after evidence and approval exist
Hybrid neuromorphic-quantum co-compiler	component-hash linked hybrid manifests, target-readiness audits, operator handoff packages, package hash linkage, and non-executing gates are implemented	execute real hybrid targets
Value-alignment supervisor guard	guard foundation, binding-spec templates, counterfactual reporting, all current domainpack templates, and replay-calibration evidence are implemented	calibrate domainpack-specific prior thresholds against real deployment or replay evidence
Autopoietic lineage sandbox	resource-bounded child-policy manifests, curated multi-domain replay corpus rows, policy diffs, accepted/rejected evidence, passive Studio operator panel, disabled live merge/hot patch/actuation, and reference gates are implemented	expand with larger reviewed replay corpora and live operator evidence packages
Temporal-causal hypergraph experiments	research-only manifests compare time-symmetric hyperedges against a deterministic baseline family covering lagged-linear edges, lagged Pearson, lagged-delta Pearson, pairwise Granger-style residual improvement, and target-persistence null evidence with blocked evidence and reference gates	expand to larger offline causal corpora when reviewed live-domain traces are available
Intergenerational policy inheritance	signed lineage metadata, inherited genomes, replay fitness, HMAC review metadata, deterministic inheritance-history packages, passive Studio operator panel, reviewed-hot-patch-only semantics, and reference gates are implemented	expand with larger reviewed lineage histories and live operator evidence packages
Sheaf-theoretic coherence manifold	obstruction-aware review primitive over a sheaf Laplacian with audit-visible before/after cohomology dimensions, residual-edge triage, passive Studio operator panel surfacing, public Studio facade wiring, and standalone Studio product-manifest discovery is implemented	validate on maintained live-domain operator datasets
Constitutional value-alignment guard	hard value constraints, binding-spec templates, counterfactual violation logs, score-threshold fallback evidence, replay calibration gates, explicit Pareto objective constraints, fail-closed missing-objective evidence, and forced safe fallback paths are implemented	calibrate domainpack-specific prior thresholds against real deployment or replay evidence
Strange-loop meta-orchestrator	strange-loop monitor foundation, deterministic long-run drift scenarios, reference-suite drift/oscillation/over-control gates, non-actuating Studio scenario panel payloads, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented	continue operator UX refinement as additional evidence corpora land
Power-grid dVOC/PRC audit pack	the review-only dVOC chain now detects poorly damped oscillation modes, classifies aperiodic, inter-area, local, sub-synchronous, and super-synchronous mode families, fits a Koopman predictor, proposes convex Koopman-MPC damping offline, re-screens the controlled ringdown, maps before/after evidence to PRC-028-1 / PRC-030-1 workflows, emits one deterministic scpn_dvoc_oscillation_damping_audit_v1 package binding evidence hashes, mode-family counts, damping delta, terminal signal magnitudes, fit residual, and the no-live-actuation claim boundary, screens operator-provided PMU frequency ringdown CSVs into hash-sealed scpn_pmu_ringdown_prc_audit_v1 records, screens operator-provided IBR voltage/frequency ride-through CSVs into hash-sealed scpn_ibr_ride_through_prc029_audit_v1 records, and binds the three artefacts into one strict-JSON, hash-verified scpn_power_grid_prc_audit_bundle_v1 assessor handoff	validate against reviewed operator PMU/ringdown/ride-through datasets and issued compliance obligations with qualified assessor review before any conformity claim
Morphogenetic field topology	field support, off-diagonal graph validation, snapshot visualisation, SVG rendering, eight domainpack demos, benchmark evidence, passive Studio field-panel payloads, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented	continue operator UX refinement as additional evidence corpora land
Integrated-information monitor	monitor foundation, audit-report summary integration, approximation benchmark cases, empirical replay corpus gates, claim-boundary metadata, claim-boundary-preserving Studio panel payloads, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented	continue operator UX refinement as additional evidence corpora land
Topos-theoretic semantic binding	symbolic-binding functor validation, policy-composition category validation, domain obligation examples, proof-boundary gates, passive Studio panel surfacing, and public Studio facade wiring are implemented	optional external categorical proof-tool export remains open
Multiverse counterfactual simulator	vectorised branch rollouts, optional JAX acceleration with NumPy parity evidence, six-domain scenario corpora, fail-closed branch-risk gates, zero-diagonal branch-action graph preservation, reference evidence, passive Studio rollout/risk panel surfacing, and standalone Studio product-manifest discovery are implemented	continue operator UX refinement as additional evidence corpora land
Entanglement-aware hybrid order parameters	dependency-free quantum co-simulation monitor, explicit local NumPy statevector and density-matrix simulator backend contracts, entanglement entropy, participation ratio, classical R/Psi, domain scenarios, passive Studio panel surfacing, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented without QPU execution	continue operator UX refinement as additional evidence corpora land
Multi-language transition	Rust/JAX remain primary; backend fallback and backend review gates are documented; Lean is active for fixed-point supervisor proof mirrors under formal/lean and CI	CEO scope decision remains for Go orchestrator, Julia convenience, Mojo domainpacks, protobuf extension, Apache Arrow distributed state sync, and broader continuous-dynamics Lean formalisation
Safety/research frontier	long-horizon items are tracked but not promoted to active implementation	decide scope for certified safe control, causal discovery/control, neuromorphic deployment bridge, quantum-classical hybrid network, live digital-twin sync protocol, and federated oscillator learning

Current Stable Surface

Surface	Status
Reactor semantic atlas	34 configuration identities, including two namespaced extensions, mapped to diagnostic context and strict producer-evidence gates; zero physical observations, physical phases, or CONTROL admissions are qualified by the atlas itself
UPDE/Kuramoto engines	Python engine family with optional Rust acceleration
Stuart-Landau amplitude dynamics	documented guide, API reference, examples, and tests
Supervisor and policy DSL	regime management, policy rules, Petri net sequencing, audit trace
Domainpacks	36 bundled domainpacks with README coverage and gallery inventory
Notebooks and demos	21 notebooks, 28 terminal examples, Streamlit tools, CLI demo, WASM demo
API documentation	package-level and detailed MkDocs API pages with public-module autodoc coverage guarded by tests; the artifacts API reference now has a depth guard for QPU artifact schema, safety, hash, JSON, and file I/O contracts; the scaffold API reference now has a depth guard for review-only proposal, provider, validation, audit, and CLI contracts; the Python facade API reference now has a depth guard for import, validation, deterministic run, state, and safety-boundary contracts; the distributed sync API reference now has a depth guard for phase-gossip wire-message, digest, sequence-watermark, bounded-correction, replay, and audit contracts; the coupling inference API reference now has a depth guard for transfer-entropy, orientation, thresholding, backend-failure, audit-record, CLI, and review-boundary contracts; the visualization API reference now has a depth guard for JSON-encoder, streamer, validation, deterministic-rounding, pipeline-wiring, typed-array, and presentation-boundary contracts; the Poincare monitor API reference now has a depth guard for recurrence, result-record, backend-validation, accelerator-parity, fallback, sample-time, and observational-boundary contracts
Deployment docs	production, backend fallback, dependency locks, interactive tools
Audit/replay	deterministic audit trace and replay documentation

Active Documentation Track

Track	Current state	Next useful additions
Onboarding	role-based first-hour handbook exists	keep failure paths and contributor paths linked from every first-run page
Troubleshooting	install, notebooks, docs, FFI, validation, audit replay, and demos covered	add issue templates if repeated failure classes emerge
Notebook operations	execution matrix documents extras and CI expectation	keep matrix updated when notebooks are added or made local-only
API examples	public modules have mkdocstrings coverage; package-level API pages exist	add compact copy/paste examples to subsystem pages that lack them
Domainpack docs	36 README files exist	keep examples and gallery aligned with every new domainpack

Usability Moat Track

This track is the main post-docs priority for lowering the learning curve for control engineers who do not already live in phase dynamics.

Item	Target outcome
One-click SPO Studio web UI	Streamlit operator prototype now covers domainpack load, raw-source import, binding review, beginner-mode guidance with ordered walkthrough, oscillator edit review artefacts, layer/channel canvas review artefacts, canvas layout manifests, canvas topology patch artefacts, validated binding rewrite candidates, signed hash-checked binding apply with backups, deterministic Canvas interaction state for browser controls, live R/Psi/K metrics, replay tuning, hierarchy monitor, connector ownership plans, dry-run records, owned no-I/O runtime boundary validation for REST/gRPC/Kafka/hardware, and localhost service-process manifests with health checks, deployment readiness/package/materialisation manifests, hardware target and verified-evidence package manifests, recovery reports, and Docker/WASM/project export manifests; it is not yet a good standalone product, because real FPGA/neuromorphic evidence remains open
Auto-binding prototype	deterministic proposal builders now infer reviewable binding_spec.yaml records from time-series CSV, event-log JSON, and graph JSON with confidence factors, validation diagnostics, time-column sample-rate inference, sparse-derivative/correlation-graph/clustering evidence, lagged directed graph inference, transfer-entropy coupling audit export, extractor-parameter proposals, validator-accepted auto_initial_k, and benchmark-gated domain thresholds; spo auto-bind exports review-only binding YAML or audit JSON from local raw sources without writing files or enabling actuation; private or partner live-dataset gates remain future work
Guided deployment path	deployment readiness, deployment package, package materialisation, hardware target, and verified hardware evidence manifests now carry target status, required artefacts, export hashes, operator-invoked commands, blocked reasons, safety gates, hardware evidence requirements, SHA-256 checks, parity status, and connector handoff review; real target evidence remains open
Beginner control-engineer mode	beginner-mode guidance now explains reviewed signals, coupling knobs, objectives, supervisor regime, validation state, ordered walkthrough status, and next actions from the current replay

v1.0 Focus

Focus	Acceptance shape
API freeze discipline	top-level public manifest and drift test are in place; future manifest changes must carry compatibility notes
N-channel rollout	P/I/S remains default while additional typed channels are documented and replayable
Benchmark visibility	benchmark pages label commands, environment, and historical snapshot dates
Production hardening	deployment defaults, security scans, dependency locks, and fallback paths remain documented
Docs as entry point	users can move from install to run, validate, replay, and deploy without reading source first

v1.x Differentiator Track

Item	Roadmap stance
Dynamic higher-order topology adaptation	foundation, plasma-control demo, traffic-flow/network-security transfer-entropy demos, Lyapunov mutation validation, off-diagonal topology input validation, pairwise-support policy hardening, and multi-domain Lyapunov policy workflow validation are implemented; additional partner-domain validation remains future expansion
Causal intervention engine	counterfactual rollout foundation, finite real-valued counterfactual, direct-intervention drive-scalar, and lagged-trace boundary validation, live causal-graph learning, and cardiac/power-grid/traffic-flow/network-security attribution demos are implemented; larger causal-model learners and additional attribution demos remain open
RL/autotune layer on JAX nn backend	reward evaluation, replay ranking, offline candidate generation, proposal records, replay-only policy search, adaptive replay refinement, PPO-like/SAC-like/hybrid-physics proposal generators, a differentiable Equinox supervisor objective, and deterministic multi-scenario replay learner benchmark gates are implemented behind non-actuating replay gates; real trained PPO/SAC experiments, baselines, and publication artefacts remain open
FEP / predictive-coding supervisor backend	predictive supervisor foundation, finite real-valued predictive/FEP hierarchy boundary validation, reusable hierarchy assessment, and power-grid/cardiac hierarchy proofs are implemented; deeper predictive-coding world-model integration remains open
Full N-channel algebra	channel algebra summary, resolved-config integration, audit-header coverage, report JSON/text exposure, reusable report summary payloads, delayed/uncertain classification, runtime policy records, delayed/uncertain supervisor execution with audit evidence, and replay-only channel-weight/cross-coupling optimisation surfaces are implemented; deeper learner-backed optimisation remains open
Hierarchical orchestration	reduced-summary parent orchestration, bounded escalation audit records, deterministic edge/cloud sync envelopes, strict transport runtime validation, decoded JSONL/REST/frame adapter boundaries, power-grid/cardiac/edge-consensus transport demos, offline gossip consensus replay, and transport-neutral phase-vector gossip for UPDE nodes are implemented; live owned transports and broader deployment remain open
Digital-twin binding standard	deterministic binding contract export, transport-neutral payload validation, JSONL file replay, in-memory reference adapter, adapter manifest compatibility checks, dependency-free REST/gRPC/Kafka boundary adapters, a no-I/O hardware frame boundary, and transport-neutral operator evidence are implemented for timing, layers, actuators, N-channel algebra, sync capabilities, contract hashes, directions, auth posture, topics, registered devices, safety interlocks, sequence checks, residual extrema, mismatch reasons, adapter health, and replay/live parity; real hardware evidence remains tracked separately
Formal supervisor verification	Petri-net and policy surfaces export to PRISM and TLA+; policy rules now also export generated SMT-LIB feasibility models for Z3; PRISM STL label export exists; benchmark-gated deterministic formal verification packages now bind exported artefact hashes, named safety properties, disabled checker execution, external PRISM/TLC/Z3 checker command manifests, and checker-readiness records without invoking tools locally; spo formal-export --export package --include-checker-readiness exposes the same no-execution package manifest plus optional PRISM/TLC/Z3 readiness evidence; non-executing external-checker readiness audits now report executable availability, resolved paths, ready/missing status, and disabled execution; reviewed Promela and SMT-LIB package artefacts now bind SPIN/Z3 command-readiness manifests under the same disabled-execution contract; first SPIN/Z3 smoke execution lane exists in remote CI; safety-domain SPIN/Z3 CI packages now cover cardiac rhythm, chemical reactor, power grid, PLL clock, autonomous vehicles, satellite constellation, power-safety N-channel, traffic flow, swarm robotics, manufacturing SPC, and robotic CPG operator-approval and hard-bound feasibility invariants; optional Rust supervisor FFI readiness auditing now checks spo_kernel PyO3 symbols and deterministic non-actuating regime/boundary/coherence smoke behavior; optional PolicyCBFAdmissionGate now constrains matched supervisor policy proposals through verified neural CBF filters and records deterministic SMT-LIB admission artefact hashes; Lean 4 fixed-point proof mirrors now cover actuator projection and finite-input regime-classification contracts in remote CI; refreshed measured benchmark snapshots remain open
STL runtime verification	robustness monitor foundation, policy YAML stl_monitors integration, PRISM export linkage, builtin monitoring automata synthesis, non-actuating controller-candidate synthesis, policy-gated candidate projection, offline closed-loop synthesis plans, deterministic runtime actuation-gate validation through ActuationMapper, and reference-suite gates for non-actuating plan/runtime quality are implemented; live-actuation parity remains an operator-approval expansion item
Symbolic-to-binding compiler	compiler foundation, domainpack/docs retrieval evidence, confidence factors, generated review notebook, notebook preflight execution evidence, deterministic retrieval ranking diagnostics, and reference-suite retrieval-ranking gates are implemented; optional corpus expansion with larger live-doc/domainpack corpora remains open
LLM-guided domainpack scaffolding	spo scaffold --llm now turns natural-language intent into a strict JSON proposal, deterministic binding YAML, validator-approved domainpack files, and an audit record; live providers must be explicitly configured or an offline proposal file must be supplied
Cross-domain meta-transfer	replay-backed proposals, multi-audit fitting, nested audit-directory corpus loading, benchmark-gated nested corpus proposal quality, training summaries, deterministic JSON package export, scpn-meta packaging-readiness manifests, CLI manifest export, package entry-point metadata, package entry-point release evidence, direct console-entry invocation evidence, non-publishing distribution evidence, pre-publish enforcement, and reference-suite manifest-readiness gates are implemented; larger private or partner real audit-history corpora and actual optional package publication remain open
Plugin ecosystem	manifest registry foundation is implemented for entry-point discovery, capability declarations, compatibility checks, audit records, marketplace catalogue packaging, runnable examples, CLI catalogue export, Rust-facing flattened registry export, benchmark-gated guarded metadata-only Rust runtime handoff manifests/CLI export with grouped dispatch records, target hashes, blocked incompatible entries, mutually exclusive Rust output modes, deterministic hashes, loading disabled by default, Python-owned opt-in runtime loading for approved callable capability targets, opt-in runtime execution with deterministic execution audits, pre-import target-hash approval for production deployment gates, a non-loading planning artefact layer with immutable invocation-shape records (argument values withheld), spo plugins plan-execution operator JSON output, request-consumption spo plugins request-execution PLAN_JSON APPROVAL_JSON artefacts that bind operator identity/reference to plan_hash/target_hash plus reviewed capability matching, request-bound runtime invocation that rejects stale argument shapes before import, request hash revocation for approval rotation, deterministic storage manifests for approved requests, atomic local-file bundle persistence, CLI persistence, CLI revocation artefacts, spo plugins revocation-list, revocation-list-aware persistence, deterministic non-local storage-adapter handoff manifests, spo plugins lifecycle-status, spo plugins lifecycle-summary, spo plugins lifecycle-policy-report, spo plugins lifecycle-renewal-queue, spo plugins lifecycle-multistore-dashboard, spo plugins lifecycle-multistore-drilldown, spo plugins lifecycle-remediation-orchestration, spo plugins lifecycle-remediation-action-status, spo plugins lifecycle-remediation-execution-dashboard, spo plugins lifecycle-remediation-deployment-handoff, spo plugins lifecycle-remediation-scheduler-queue, spo plugins lifecycle-remediation-scheduler-telemetry, spo plugins lifecycle-remediation-scheduler-adapter-handoff, spo plugins lifecycle-remediation-scheduler-acknowledgement, spo plugins lifecycle-remediation-scheduler-acknowledgement-replay, spo plugins lifecycle-remediation-scheduler-execution-dashboard, spo plugins lifecycle-remediation-scheduler-control-plan, spo plugins lifecycle-remediation-scheduler-runbook, spo plugins lifecycle-remediation-scheduler-automation-profile, spo plugins lifecycle-remediation-scheduler-acknowledgement-capture, spo plugins lifecycle-remediation-scheduler-retry-profile, and spo plugins lifecycle-remediation-scheduler-retry-orchestration; continuous operator UX refinement for adapter families remains iterative productization work

Next High-Impact Differentiated Moves

These items are the next product/research moves that would most clearly separate SPO from ordinary simulation or dashboard tooling. They are TODO items until they have implementation evidence, tests, and reproducible docs.

Move	Acceptance shape
Auto-discovery / data-driven binding	raw CSV, sensor logs, and event streams produce reviewable oscillator, channel, initial K, and binding proposals via SINDy, coupling estimation, clustering, and validation diagnostics; zero-config CSV sample-rate inference, sparse-derivative evidence, phase-aware Kuramoto SINDy evidence, residual-scored SINDy library selection, correlation graph evidence, lagged directed graph inference, transfer-entropy coupling audit export, extractor-parameter proposals, validator-accepted auto_initial_k binding, and reference-suite proposal-quality benchmarks are in place; deterministic domain-like fixtures now enforce domain-specific gates for extractor coverage, expected-edge recall, validation errors, sample count, and proposed-edge multiplier before any automatic runtime use; private or partner live datasets remain future work under the same review-only threshold contract
Bayesian UPDE uncertainty	sampled omega and K_nm distributions propagate through the existing UPDE kernel and report posterior-predictive R ± sigma, credible intervals, sampled final phases, and JSON-safe audit diagnostics; Gaussian posterior fitting from observed Kuramoto trajectories is benchmark-gated for residual quality, parameter recovery, uncertainty width, zero-diagonal non-negative coupling, and posterior rollout sample count; reserved NumPyro/BlackJAX sampler names are benchmarked as fail-closed until real validated sampler implementations exist
RL / optimisation on knobs	JAX nn/ and autotune train replay-only or simulator-backed policies for K, alpha, zeta, Psi, channel weights, and cross-channel gains using R_good - penalty(R_bad, safety, regime churn) objectives; nn.supervisor now provides a differentiable closed-loop policy/loss surface, and the reference suite now gates PPO-like, SAC-like, and hybrid-physics replay proposals across deterministic multi-scenario fixtures with explicit Lyapunov, STL robustness, and bounded safety-cost evidence while full PPO/SAC experiments, baselines, and publication artefacts remain open
Hierarchical and distributed orchestration	nested edge supervisors maintain local coherence, exchange bounded aggregate evidence upward, and synchronise UPDE phase vectors through digest-checked, sequence-checked, bounded-correction gossip; live owned transports and transport smoke gates now sit on replay and adapter semantics proof for production ownership
Formal verification export	Petri nets, policy DSL, STL monitors, and supervisor transitions export to PRISM, SPIN, TLA+, SMT, or equivalent proof workflows with reproducible safety artefacts for plasma, power, and medical-style domainpacks; Lean mirrors prove discrete fixed-point supervisor contracts
Neuromorphic and quantum tighter integration	validated phase-control plans emit Lava/BrainScaleS-style schedules and QPU control schedules through partner bridges, with execution disabled until real target evidence, hashes, parity, and operator approval exist
Plugin ecosystem	standard Python and Rust extension interfaces let domain experts add extractors, monitors, actuators, and bridges with schema validation, capability metadata, audit records, compatibility tests, operator-signed approval artefacts that bind operator identity/reference to plan_hash and target_hash, and no core fork
Observability and digital-twin polish	Prometheus/Grafana live-run telemetry, digital-twin residual channels, adapter health, replay linkage, and twin mismatch evidence become first-class operator surfaces; digital-twin sync validations now reduce to a shared live/replay operator evidence record, runtime Prometheus text exports accepted/rejected sync counts, adapter health, latest sequence, residual extrema, status, capabilities, directions, and mismatch reasons from the same record, spo digital-twin-observability-bundle provides deterministic evidence-plus-replay linkage packaging, and spo digital-twin-grafana-dashboard-pack/spo digital-twin-live-deployment-playbook provide deterministic dashboard+rollout operationalisation

Deferred Maintenance Track

These items are acknowledged but not the current documentation slice:

Item	Status
Typed NumPy signature sweep	tracked as maintenance; STL fallback robustness, strange-loop supervisor helper arrays, PAC direct backend contracts, financial-market direct backend contracts, Ott-Antonsen direct reduction backend contracts, and simplicial direct backend contracts are parameterised; continue scoped module-by-module sweeps
Visual and batch-heavy features	deferred unless a user-facing workflow needs them immediately
Broad benchmark-file expansion	useful, but benchmark numbers must be measured and reproducible before publication
Thin-test strengthening	long-running maintenance backlog; do opportunistically when touching a module, but do not let broad test-hardening displace active feature/module roadmap work
Superficial assertion audit	initial audit is recorded in the local internal ledger; remediate flagged candidates incrementally as modules are changed by replacing shape/type/existence-only assertions with behavioural, invariant, error-semantic, parity, or pipeline-effect checks
Auxiliary backend review	keep non-primary backends experimental unless measured value justifies maintenance cost

Research And Experimental Track

These areas may evolve behind explicit experimental flags or separate guides:

Area	Roadmap stance
ML-assisted binding proposals	promising, but outputs must remain reviewable binding specs
Learned supervisor policies	differentiable nn.supervisor policy surface exists for replay/simulator training; live use remains research-only until auditability, safety constraints, and benchmark evidence are complete
Distributed edge orchestration	useful for multi-node deployments; keep audit and replay semantics central
Formal verification exports	desirable for safety-critical policies, but separate from normal user onboarding
Neuromorphic and quantum-native backends	bridge work remains experimental unless a maintained workload depends on it

Long-Horizon Research Backlog

These are candidate research tracks. Each needs a proof-of-concept, safety boundary, audit format, and reproducible domainpack demo before it can move into the active roadmap.

Track	First acceptance gate
Self-modelling embodied digital twin	dependency-free self_model_error monitor, replay-backed review-only reconfiguration evidence across power-grid, cardiac-rhythm, traffic-flow, and cyber-industrial scenarios, and reference-suite gates are implemented without live actuation; real hardware-in-the-loop rebinding remains open
Evolutionary supervisor policy search	deterministic offline search now mutates policy genomes over audit-style replay summaries, STL robustness, replay violation, and counterfactual safety-margin filters with operator-review-only outputs; richer policy DSL, Petri-net, topology mutation grammars, passive Studio panel surfacing, public Studio facade wiring, and packaged standalone Studio product-manifest discovery are implemented with deterministic review-only reference gates; operator UX refinement continues as evidence corpora expand
Information-geometry control layer	dependency-free NumPy/JAX-compatible Fisher-Rao and Wasserstein review primitive now emits audit-visible metric tensors, natural-gradient proposals, curvature/geodesic metrics, deterministic domain scenarios, optional JAX-native acceleration with explicit NumPy parity evidence, passive Studio panel surfacing, public Studio facade wiring, standalone Studio product-manifest discovery, and reference-suite gates without live actuation; operator UX refinement continues as evidence corpora expand
Sheaf-cohomology control	supervisor foundation; edge-consensus, power-grid, network-security, cardiac-rhythm, manufacturing-SPC, and traffic-flow heterogeneous-domain demos; obstruction-summary triage; deterministic top-residual evidence; review-only sheaf-Laplacian control proposals; passive Studio operator panel surfacing; public Studio facade wiring; standalone Studio product-manifest discovery; and reference-suite gates are implemented; additional live-domain validation remains open
Federated meta-orchestrator	deterministic review-only federated policy-gradient aggregation now validates clipped node updates, rejects raw time-series fields, accounts privacy budgets, emits non-actuating audit evidence, and has reference-suite gates; offline hash-linked transport envelopes, secure aggregation manifests, DP noise-service manifests, combined production-boundary gates, deployment-preflight gates for owned transport, secure aggregation custody/quorum, and DP noise-service readiness, plus spo federated-transport-preflight, spo federated-secure-aggregation-preflight, and spo federated-dp-noise-service-preflight operator evidence generation are implemented; actual live distributed transport, live secure aggregation execution, and production DP noise service operation remain open
Byzantine-fault-tolerant meta-orchestrator	offline three-node BFT consensus manifests now verify signed policy proposals, hash-linked audit parents, quorum winners, rejected nodes, and non-actuating review gates; live distributed transport remains open
Quantum-native compiler target	deterministic OpenQASM 3 compiler manifests now cover Qiskit/PennyLane handoff with Z-frequency terms, symmetrised XY coupling terms, co-simulation parity evidence, SHA-256 hashes, QPU execution disabled, non-executing target-readiness audits for backend, credential, operator-approval, and stable-hash evidence, and reference-suite gates for blocked/ready target-readiness quality; real QPU target execution remains open
Neuromorphic compiler target	deterministic Lava/PyNN schedule manifests from UPDEState now include population records, projections, control-action review records, simulator parity evidence, SHA-256 coverage, disabled hardware writes, non-executing hardware target-readiness audits, and reference-suite gates for blocked/ready target-readiness quality; real neuromorphic target execution remains open
Hybrid neuromorphic-quantum co-compiler	deterministic hybrid manifests now combine quantum compiler and neuromorphic schedule artefacts under shared N-channel audit semantics, component hashes, parity status, disabled execution gates, non-executing hybrid target-readiness audits that link quantum and neuromorphic readiness hashes before operator handoff, deterministic non-executing operator handoff packages, and reference-suite gates for hash-linked ready/blocked readiness and package evidence; real hybrid target execution remains open
Value-alignment supervisor guard	guard foundation, binding-spec templates, counterfactual violation/score reporting, all current domainpack templates, and deterministic replay-calibration evidence are implemented, including cardiac rhythm, power grid, autonomous vehicle, satellite, power-safety N-channel, network-security, financial-markets, chemical-reactor, manufacturing SPC, robotic CPG, swarm-robotics, traffic-flow, plasma-control, fusion-equilibrium, neuroscience EEG, brain-connectome, sleep-architecture, circadian-biology, epidemic SIR, agent-coordination, quantum-simulation, identity-coherence, PLL-clock, digital-twin N-channel, edge-consensus N-channel, firefly-swarm, QueueWaves, rotating-machinery, laser-array, bio-stub, vortex-shedding, musical-acoustics, gene-oscillator, geometry-walk, metaphysics-demo, and minimal-domain; real deployment calibration remains open
Autopoietic lineage sandbox	deterministic resource-bounded offline child-policy lineage manifests over audit replay summaries are implemented with a curated multi-domain replay corpus, replay-domain gates, review-only policy diffs, accepted/rejected child evidence, passive Studio operator panel surfacing, public Studio facade wiring, standalone Studio product-manifest discovery, disabled live merge/hot patch/actuation flags, and reference-suite gates; larger reviewed replay corpora and live operator evidence packages remain open
Temporal-causal hypergraph experiments	deterministic research-only manifests now compare time-symmetric hyperedge candidates against a conventional baseline family covering lagged-linear graph scores, lagged Pearson, lagged-delta Pearson, Granger-style residual improvement, and target-persistence null evidence, with baseline-beaten evidence, blocked non-winning candidates, disabled production claims, and reference-suite gates; larger offline causal corpora remain open
Intergenerational policy inheritance	signed lineage metadata, inherited policy genomes, multi-objective replay fitness, deterministic inheritance-history packages, HMAC signature rows, passive Studio operator panel surfacing, public Studio facade wiring, standalone Studio product-manifest discovery, and merge-only reviewed hot-patch manifests are implemented with deterministic benchmark gates; larger reviewed lineage histories and live operator evidence packages remain open
Sheaf-theoretic coherence manifold	obstruction-aware control primitive over a sheaf Laplacian with audit-visible cohomology dimensions, residual-edge triage, passive Studio operator panel surfacing, public Studio facade wiring, and standalone Studio product-manifest discovery is implemented; maintained live-domain validation remains open
Constitutional value-alignment guard	hard value constraints, binding-spec templates, counterfactual violation logs, replay calibration evidence, explicit Pareto objective constraints, fail-closed missing-objective evidence, and forced safe fallback paths are implemented; domainpack-specific prior calibration against real deployment or replay evidence remains open
Strange-loop meta-orchestrator	monitor foundation, deterministic long-run drift scenarios, reference-suite drift/oscillation/over-control gates, non-actuating Studio scenario panel payloads, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented; operator UX refinement continues as evidence corpora expand
Morphogenetic field topology	field foundation, dependency-free snapshot visualisation, passive SVG rendering, strict real-valued off-diagonal graph validation, plus swarm-robotics split-flock, power-grid stressed-replay, traffic-flow corridor-spillback, plasma-control edge-localised, network-security lateral-movement, chemical-reactor thermal-stability, manufacturing-SPC tool-wear, robotic-CPG gait demos, passive Studio field-panel payloads, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented with reference-suite gates; operator UX refinement continues as evidence corpora expand
Integrated-information monitor	monitor foundation, audit-report summary integration, expanded deterministic approximation benchmark cases, physiology/infrastructure/cyber-industrial empirical replay corpus gates, claim-boundary-preserving Studio panel payloads, public Studio facade wiring, and standalone Studio product-manifest discovery are implemented; operator UX refinement continues as evidence corpora expand
Topos-theoretic semantic binding	symbolic-binding functor validation, policy-composition category validation, deterministic domain obligation examples, passive Studio panel surfacing, public Studio facade wiring, and reference-suite proof-boundary gates are implemented; optional external categorical proof-tool export remains open
Multiverse counterfactual simulator	deterministic vectorised branch rollouts, optional JAX acceleration with NumPy parity evidence, six-domain scenario corpora, simulator-compatible candidate knobs, zero-diagonal branch-action graph preservation, fail-closed non-actuating branch-risk gates, passive Studio rollout/risk panel surfacing, and standalone Studio product-manifest discovery are implemented with reference-suite evidence; operator UX refinement continues as evidence corpora expand
Entanglement-aware hybrid order parameters	dependency-free quantum co-simulation monitor and scenario fixtures now reject boolean aliases at phase, state, qubit-count, metric, and bipartition boundaries and report bipartition Von Neumann entanglement entropy, normalised entropy, participation ratio, classical R/Psi, deterministic domain scenarios, explicit local NumPy statevector and density-matrix simulator backend contracts, passive Studio panel payloads, public Studio facade wiring, and standalone Studio product-manifest discovery without QPU execution; operator UX refinement continues as evidence corpora expand

Priority order for the first implementation tranche:

1. ~~Causal intervention engine foundation.~~
2. ~~STL runtime verification foundation.~~
3. ~~Dynamic higher-order topology adaptation foundation.~~
4. ~~FEP / predictive-coding supervisor backend foundation.~~
5. ~~Symbolic-to-binding compiler foundation.~~

Speculative priority order after the first tranche:

1. ~~Strange-loop meta-orchestrator foundation.~~
2. ~~Morphogenetic field topology foundation.~~
3. ~~Integrated-information monitor foundation.~~
4. ~~Sheaf-theoretic coherence manifold foundation.~~
5. ~~Constitutional value-alignment guard foundation.~~

Minor Polish Before v1.0

Item	Required before claiming done
Public benchmark suite	reference-suite metadata, dated JSON, and public snapshot page are in place; broader cross-host/backend comparison coverage remains open
Windows Rust FFI stability	remove the experimental warning only after CI, installation, and parity evidence support it
End-to-end hardware example	at least one real FPGA or neuromorphic output path with documented command, artefact, and verification result

Non-Goals For The Current Docs Track

• Do not present historical benchmark snapshots as current measurements.
• Do not promise release dates for research features.
• Do not hide optional dependency fallback paths.
• Do not add public APIs without corresponding docs and examples.
• Do not make users infer commands from source code when a guide can state them.

Source Of Truth

Use this page for public orientation. Use ROADMAP.md in the repository root for the detailed historical release plan and internal planning notes.

PHA-C spatial coupling status

Item	Current state	Remaining work
PHA-C.1 spatial coupling modulation	Implemented as SpatialCouplingModulator with bounded inverse-plus-one, exponential, power-law, and epsilon-regularised inverse-distance kernels; integrated into the Swarmalator Python reference path; exposed through NumPy plus optional Rust, Go, Julia, and Mojo adapter contracts; public positions, base-coupling matrices, scalar controls, direct counts/forms/flat buffers, optional-backend outputs, and Julia raw returns reject numeric-string aliases before coercion; public optional-backend outputs replay shared finite real-valued cardinality and zero-diagonal validation before publication; documented in the coupling API; and covered by a dedicated polyglot benchmark gate.	Keep benchmark snapshots refreshed as accelerators evolve and reuse the same contract when downstream PHA-C graph lanes consume spatially modulated K_nm.

PHA-C time-varying frequency status

Item	Current state	Remaining work
PHA-C.5 time-varying omega(t)	Implemented in UPDEEngine as configured fixed or callable natural frequencies with omega_current and time diagnostics; callable runs resolve to a finite row-major schedule consumed by Rust, Go, Julia, Mojo, and Python schedule surfaces; documented in the UPDE API; covered by module-specific tests and a polyglot benchmark gate.	Keep benchmark snapshots refreshed as Doppler and moving-frame engines consume this schedule contract.

PHA-C Doppler status

Item	Implemented evidence	Remaining scope
PHA-C.2 DopplerEngine	Implemented as DopplerEngine with graph-weighted relative-velocity correction, scalar and vector velocity reduction, configured fixed/callable omega and velocity schedules, Python plus Rust/Go/Julia/Mojo source surfaces, module-specific Mach-1 counter-propagating lock coverage, and a dedicated polyglot benchmark gate.	Keep benchmark snapshots refreshed as installed optional runtimes are rebuilt and feed this contract into the moving-frame PHA-C.3 lane.

PHA-C moving-frame status

Item	Implemented evidence	Remaining scope
PHA-C.3 MovingFrameUPDEEngine	Implemented as MovingFrameUPDEEngine with absolute axial positions, chamber-frame distance_to_reference, collision/crossing detection, distance-modulated coupling through SpatialCouplingModulator, Doppler-corrected phase dynamics, signed ballistic kinematic residual evidence, explicit final-position/max-velocity/path-length equation replay under KINEMATIC_SUMMARY_REPLAY_TOLERANCE, Python plus Rust/Go/Julia/Mojo source surfaces, module-specific merger and fail-closed coverage, and a dedicated polyglot benchmark gate.	Keep benchmark snapshots refreshed as optional accelerators are rebuilt and feed the position/phase contract into the PHA-C.4 merge-window monitor lane; native moving-frame kernels must preserve the kinematic summary equations.

PHA-C merge-window status

Item	Implemented evidence	Remaining scope
PHA-C.4 MergeWindowMonitor	Implemented as MergeWindowMonitor with wrapped phase dispersion, axial spatial dispersion, signed phase/spatial safety margins, explicit signed-margin equation replay under MERGE_WINDOW_MARGIN_REPLAY_TOLERANCE, consecutive joint-lock gating, named baseline_1x/buffer_3x/review_5x tolerance profiles, JSON-safe MergeReport evidence, Python plus Rust/Go/Julia/Mojo source-contract surfaces, module-specific fail-closed coverage, and a dedicated polyglot benchmark gate.	Keep benchmark snapshots refreshed under the benchmark-isolation protocol as optional accelerators are rebuilt and feed the lock report into downstream PHA-C event/state lanes; native merge-window kernels must preserve the signed-margin equations.

PHA-C event/state handoff status

Item	Implemented evidence	Remaining scope
PHA-C.4 downstream handoff	Implemented as PHACHandoffRecord with merge-window evidence, signed phase/spatial margins, explicit signed-margin equation replay under PHA_C_HANDOFF_MARGIN_REPLAY_TOLERANCE, tolerance-profile provenance, Kuramoto order parameter, source vector digests, source-chain hash, canonical record hash, fixed non-actuating claim boundary, independent hash-replay verification, Rust/Go/Julia/Mojo source-contract parity adapters with explicit non-native provenance, finite non-negative comparator-tolerance validation, raw source-contract record field validation before canonical projection, module-specific fail-closed coverage, public API documentation, and a dedicated local-regression benchmark snapshot.	Trajectory-level event/state consumption is now handled by PHACTimelineRecord; keep handoff benchmark snapshots refreshed under the benchmark-isolation protocol if native handoff kernels are later introduced, and require native handoff kernels to preserve the signed-margin equations and raw field domains.

PHA-C event timeline status

Item	Implemented evidence	Remaining scope
PHA-C.4 trajectory event timeline	Implemented as PHACTimelineRecord with deterministic per-sample handoff chaining, first-lock time/index evidence, final-lock state, lock-loss counts, reset counts, minimum signed phase/spatial margins, explicit signed-margin equation replay under PHA_C_TIMELINE_MARGIN_REPLAY_TOLERANCE, tolerance-profile provenance, time/sample/transition/timeline hashes, fixed non-actuating claim boundary, independent hash-replay verification, Rust/Go/Julia/Mojo source-contract parity adapters with explicit non-native provenance, finite non-negative comparator-tolerance validation, raw source-contract record field validation before canonical projection, module-specific fail-closed coverage, public API documentation, and a dedicated local-regression benchmark snapshot.	Keep benchmark snapshots refreshed under the benchmark-isolation protocol if native timeline kernels are later introduced; downstream MIF/FRC lanes can consume the review-only timeline without raw moving-frame arrays, but native timeline kernels must preserve the signed-margin equations and raw field domains.

PHA-C acceptance-chain status

Item	Implemented evidence	Remaining scope
PHA-C end-to-end acceptance gate	Implemented as PHACAcceptanceRecord with spatial modulation, graph-weighted Doppler correction, moving-frame propagation, signed kinematic residual/path-length/velocity evidence, explicit final-position/max-velocity/path-length equation replay under PHA_C_ACCEPTANCE_KINEMATIC_SUMMARY_REPLAY_TOLERANCE, merge-window timeline conversion, max phase/spatial dispersion and minimum signed margin evidence, explicit signed-margin equation replay under PHA_C_ACCEPTANCE_MARGIN_REPLAY_TOLERANCE, schedule/trajectory/spatial/Doppler/timeline hashes, fixed non-actuating claim boundary, independent hash-replay verification, Lean PHACKinematicProofObligation projection, Rust/Go/Julia/Mojo source-contract parity adapters with explicit non-native provenance, finite non-negative comparator-tolerance validation, aggregate PHA-C subgate benchmark evidence, module-specific fail-closed coverage, public API documentation, a dedicated local-regression benchmark snapshot, and canonical reference-suite integration.	Keep benchmark snapshots refreshed under the benchmark-isolation protocol; native acceptance kernels may be introduced only if they preserve the same review-only hashes, provenance fields, signed-margin equations, kinematic summary equations, kinematic residual fields, formal-obligation fields, and fail-closed boundaries.

PHA-C Lean kinematic safety status

Item	Implemented evidence	Remaining scope
PHA-C.6 Lean 4 kinematic safety lemmas	Implemented as SPOFormal.Kinematic with finite-horizon fixed-point KinematicBounds, sampled continuous-rate SampledRateKinematicBounds, fixed-point PhaseBudgetBounds, a discrete Gronwall-style relative-distance budget, general finite-horizon budget certification with zero-gain linear compatibility, runtime-facing KinematicBounds.budgetCertificate, phase-facing PhaseBudgetBounds.budgetCertificate, Boolean phase-plus-spatial merge-window lock proofs, SPOFormal.Continuous fixed-point continuous-envelope horizon certificates, smoke instantiation under formal/lean/test/KinematicTest.lean, Python PHACKinematicProofObligation manifests derived from verified acceptance records, explicit configured coupling-residual and phase-drift slack provenance, phase_budget_discharged replay against the Lean phase certificate, acceptance kinematic-equation replay provenance, and proof-gate integration that rejects placeholders and linter suppression.	SCPN-MIF-CORE can now specialise the fixed-point assumptions for FRC constants and consume signed PHA-C obligation manifests, including sampled continuous-rate assumptions, configured residual and phase-drift envelopes, continuous horizon-drive envelopes, discrete non-zero Lipschitz envelopes, formal phase-budget certificates, and verified acceptance kinematic-equation provenance. A future optional Mathlib lane may mechanise real-analysis Kuramoto flow properties, but the production PHA-C review boundary is closed as dependency-light fixed-point formal evidence.