docs: replace ROADMAP with capability-focused public version#12
Merged
Conversation
keirsalterego
added a commit
that referenced
this pull request
May 23, 2026
Two fixups on top of the foundation rewrite. ROADMAP.md restoration. The foundation PR was deleting ROADMAP.md because the rewrite moved to its own PR. That deletion conflicts with the rewrite branch (docs/capability-roadmap, PR #12). The cleaner shape is for the foundation PR to leave ROADMAP.md alone and let the capability-roadmap PR own both the delete and the create. This restores the file to the origin/main version. README.md heading dedupe. The branch's earlier auto-merge against main left two top-level headings (the old "# Your AI Security Copilot" plus the new "# Vyrox Security") and dropped the project tagline blockquote. This collapses to a single H1 and puts the tagline back.
The previous ROADMAP carried ARR targets, pilot counts, quarterly revenue numbers, and an MSP channel percentage. That material moved to vyrox-design-partners/docs/gtm/INTERNAL_ROADMAP_WITH_TARGETS.md in PR #9 of that repo. This commit lands its replacement. The new ROADMAP is organised by capability, not by quarter or by revenue tier. Sections: - Recently shipped: the sixteen blockers from the May 2026 audits (eight P0 + eight P0.5), each described as a public contract change with the file paths a reader can verify. - In flight: items that touch a public contract, with the actual bottleneck called out (Postgres before tenant 25, retry runner not yet wired into worker entrypoint, etc). - Planned, not started: public OpenAPI spec, customer-side audit verifier binary, EU data region, web operator interface trigger conditions. - Adapter coverage: shipped vendors plus on-demand future adapters. - Compliance and certification: where we are honest about what is in flight versus planned versus not started. - Versioning and release cadence: semver intent for the public repos. - "Intentionally not on the roadmap": SIEM, managed human SOC, web dashboard during alpha, free public ingestion endpoint. Cross-refs to ARCHITECTURE.md, API_REFERENCE.md, AUDIT_CHAIN.md, ADAPTERS.md, SECURITY.md resolve after the foundation and specialty PRs (#8, #9, #10, #11) land.
keirsalterego
force-pushed
the
docs/capability-roadmap
branch
from
6afb8f7 to
23dddf2
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Replaces the previous ROADMAP (ARR targets, pilot counts, MSP revenue %) with a capability-focused version suitable for OSS docs.
The GTM-laden previous content moved to
vyrox-design-partners/docs/gtm/INTERNAL_ROADMAP_WITH_TARGETS.mdin vyrox-design-partners#9.New ROADMAP sections
/audit/export, secret encryption at rest, concurrent triage, retry runner)Why
ARR numbers and customer counts in a public roadmap are competitive disclosure and create false urgency for evaluators. The new shape gives an OSS contributor exactly what they need: what is committed, what is in flight, what is intentionally out.
Depends on / merges after
#8. Cross-refs to other docs resolve once the foundation and specialty PRs (#9, #10, #11) land.
Test plan
vyrox/CLAUDE.mdorvyrox-proxysource