Roadmap

wardn is built complete, hardened and reviewed before any product adopts it.

Milestone	Status
M0 Design	✓ Design document, threat model
M1 Secure foundation	✓ CI security gates, dependency allowlist, signed commits
M2 Core engine	✓ Policy, evaluation rules, scopes, time windows
M3 Storage	✓ PostgreSQL, MySQL, MariaDB, SQLite; conformance suite
M4 HTTP and tooling	✓ Middleware, route audit, CLI, signed releases
M5 Custom roles	✓ Runtime roles, escalation guard, audit, expiry
M6 Completeness	✓ MongoDB, Redis cache
M7 Hardening	✓ Internal security review, fault injection, mutation testing, fuzzing
M8 Proof and documentation	✓ This site; ✓ four reference applications; ✓ benchmarks; usability test to come
M9 v1.0	✓ API review; ✓ stability promise, checked on every change; ✓ v1.0.0 released; announcement after the usability test
v1.1 First adoption	✓ Changes inside your own transaction; ✓ CheckEach for filtering lists; ✓ row-level security guide. All found while adopting wardn in the first product.
v1.2 pgx	✓ RunInTx, clearer permission errors, community discussions; ✓ store/pgx: a PostgreSQL store for pgx applications, sharing the SQL store’s tables, with changes in your own pgx.Tx.
M10 Open source	✓ Public repository, Apache-2.0 licence, CodeQL code scanning; launch post and talk to come

Possible future modules

Each will be added only when a real product needs it:

• Maker-checker: four-eyes approval for sensitive actions.
• Conditions: simple attribute rules on permissions, such as amount limits.
• Router helpers for Gin and Echo.
• A server mode for services not written in Go.