47
Database schema on the hosted pilot (23 October 2026)
0
Engine repository releases with prebuilt tools
6
Editor connectors, all test builds
0
Marketplace listings submitted or approved
Roadmap
What is live, what exists only in source, what is being worked on and what comes later. A date appears only where a record gives one; there are no promised release dates. Last reviewed 26 October 2026.
Current status
What production runs, and what has not been published or listed yet.
All items, by state
An item moves to a later state only when a test, deployment or release record shows it.
Running in the hosted pilot
Deployed at application 3fa06fd on database schema 47, activated on 23 October 2026 (UTC) after a verified backup and a rehearsal on a production copy.
15 items
Projects workspace
Invite-only projects, member profiles, multiple files, private drafts per file, change requests, comparisons and history. Uploads are capped at 3 MB while testing.
10 Oct 2026
Historical recovery
Read any retained revision, restore selected blocks, revert or cherry-pick a revision range into a reviewed draft, and download supported native history.
10 Oct 2026
Six editor test builds
Browser sign-in and file approval for Word, Excel, PowerPoint, Google Docs, Sheets and Slides, as downloadable test packages.
10 Oct 2026
Security and runtime safeguards
Revocable sessions, verified snapshots, restricted database credentials, project policy floors, scoped CSP and HSTS, and workload limits.
11 Oct 2026
New public site, GitHub-style Projects and admin console
The rebuilt site, repository-style Projects, profile, command palette, activity feed and read-only Branches tab, and the reorganised admin console.
12 Oct 2026
Issues, labels and stars
Project issues with labels, assignees and immutable comments, and project stars, for invite-only projects (schema 39).
13 Oct 2026
Per-project device-key grants and a review permission (schema 40)
A device key opens only the projects and permissions its owner grants, and approving reviews needs its own permission. Key-file permission hardening ships with the command-line tools.
13 Oct 2026
Receipt-authority rotation (schema 41)
Dual-signed rotation of the receipt-signing authority, a recorded recovery path for a lost or leaked key, and clients that refuse a silent break. No authority is installed yet.
14 Oct 2026
In-house spreadsheet formula engine
Spreadsheet calculation no longer depends on a copyleft library; 458 function names, incremental recalculation and reference rebasing, checked against Excel-evaluated formulas.
14 Oct 2026
Shared-history schema and project-scoped device sessions
Schemas 30 to 38 are deployed: signing keys, storage budgets, private transfers, shared project history, activity read APIs and one-hour project-scoped device tokens. Shared writers stay off and no receipt-signing key is installed, so publishing to shared branches is refused.
12 Oct 2026
Installable web app and small-screen layouts
The workspace can be installed as a web app from a supported browser, and shows a short offline page when the network is missing. Documents and edits are not available offline. Layout and touch fixes for small screens came with it. The web app’s tests also run in Firefox and in WebKit, the engine Safari uses, with phone-sized screens emulated. Real phones and Safari itself have not been tested, and installing on a real operating system has not been tried.
23 Oct 2026
Approvals tied to the version reviewed (schema 45)
An approval counts only for the version of the request the reviewer looked at. If the request changes afterwards, the approval stops counting and a new one is needed. Reopening a declined or withdrawn request does the same. Approvals given before this release keep the older rule.
23 Oct 2026
AI-agent connectors: released but off
The feature exists on the server and is switched off on the hosted pilot, so no agent can connect. Where it is on, a project’s policy decides what an agent may read and whether it may propose changes as a draft, and nothing is allowed by default. A person must submit the draft, and the number of approvals required is set per project (the default is none). The AI-proposals inbox appears only when an agent has proposed something. None has been run with a real AI client.
23 Oct 2026
Pre-alpha 0.0.1b: the desktop app works on its own
The Windows and Linux desktop app starts its own database and engine and keeps your documents and their history on your computer, with no server and no account. It adds an agent that uses your own model provider and key, sign-in to a server with your browser, and syncing a project. Pre-alpha: unsigned, no auto-update, no macOS build yet.
27 Oct 2026
Pre-alpha 0.0.1a: sample workspaces and the desktop app
A sample workspace of your own in the browser, removed after 24 hours, from a small service beside the hosted workspace. An unsigned desktop app for Windows x64 and Linux x64 that connects to the hosted workspace, with engine-cli on its own for the same two platforms. Pre-alpha: expect rough edges. No macOS build yet.
25 Oct 2026
Built and tested, not enabled on the hosted pilot
Implemented in the repository and tested there. These are client libraries, opt-in writers and command-line builds that the hosted pilot does not use, and none of it counts as installed-editor acceptance.
9 items
Typed shared storage
Chunked content, typed checkpoints and shared named, deployed and public snapshots, behind opt-in writers (through schema 32).
10 to 12 Oct 2026
Local project repository
A SQLite repository on your device: signed multi-file commits, parents, branches with compare-and-swap, merge bases, comparison, revert and cherry-pick.
12 Oct 2026
Signed receipts and device keys
Signed ref receipts with a separate client trust journal, and account-bound signing keys with permanent revocation (schema 33).
12 Oct 2026
Storage budgets and private transfers
Durable shared-object budgets (schema 34) and account-private object and commit staging with erasure checks (schema 35).
12 Oct 2026
Shared project history
Explicit publication, protected main, reviews bound to the exact base and candidate, and atomic signed receipts (schema 36).
12 Oct 2026
Retention collector and same-file merge (command line)
A read-only retention plan, a collector that removes only staged objects no commit references after you confirm the exact plan, and a merge that applies clean node-level merges of a file edited on both sides. Commits are never pruned.
13 Oct 2026
Encrypted key files and compressed local storage
Passphrase-protected signing keys with optional Windows, macOS or Linux key storage, and transparent compression of objects in the local repository.
14 Oct 2026
Selected-history sync client
Plan, push, fetch and fast-forward pull from the command line, with verified objects and receipts.
12 Oct 2026
Six-platform builds of the command-line tools and engine
The public engine repository builds and tests on Linux, macOS and Windows, on Intel or AMD and on Arm processors, and a release workflow builds the command-line tools for all six. These are automated builds only: the engine repository has published no prebuilt tools, and its binaries would be unsigned. The 0.0.1a pre-alpha release carries engine-cli on its own for Windows and Linux x64, unsigned.
21 Oct 2026
In progress
These come next. They are listed in the order the dependencies run, not as dated commitments.
6 items
Receipt authority and shared writers
Schema 41 is deployed and adds server-side authority rotation and a recorded recovery path, so a lost or leaked key is an incident rather than a rebuild. Shared writers stay off and no signing key is installed until key custody is decided and rotation has been rehearsed on a production copy.
Project-scoped sign-in
Project-scoped sessions, per-project grants and a review scope are live. Passphrase-encrypted key files and operating-system key storage exist in the command-line tools. Hardware keys and memory-hard key derivation remain.
Projects and add-in adoption
A read-only Branches tab is live. Creating, reviewing and merging project-wide branches in the interface, and adoption by the six connectors, remain.
Storage packing and retention
A retention plan, a collector for staged objects and transparent compression of local objects exist. Pack files with shared dictionaries, publication of only changed nodes, and commit pruning with a retention policy do not.
Same-file offline convergence
Clean same-file merges can be applied from the command line. Constraint handling across documents, resolving real conflicts, and tests across restarts and partitions remain.
Installed-editor acceptance
The owner runs a prepared worksheet against real Word, Excel, PowerPoint and Google editors. No results are recorded yet.
Needs earlier work first
Intended, with no date and no promise.
6 items
Marketplace publication
Paused. Listing copy, scopes and a submission checklist are prepared. Nothing has been submitted and no listing exists. No date.
Independent witnesses
External timestamps or gossip, and server key rotation and compromise recovery, so a complete rewrite by the operator can be detected.
Large documents and service scale
Streaming, resumable ingest tested with 100, 250 and 500 MB files, ten collaborators, many teams, and measured capacity and cost.
More formats, lossless structures
RTF, lossless native structures and assets, and background and offline capture in the editors.
Project workspace depth
Creating and merging project-wide branches in the web workspace, project-scoped search and releases. Compare, activity, issues and stars exist.
Desktop app next steps
macOS builds, signed installers, automatic updates, editing document content inside the client, and a faster live mode for large workspaces.
How this page is kept
No capacity claims
Hundreds-of-megabyte files and very large user counts are targets. They are not measured capacity today.
No acceptance claims
Source tests and CI are not installed-editor or marketplace acceptance, and are never reported as such.
No Office parity goal
The web editors stay, but matching Word or Excel feature for feature is not the roadmap.
Changelog
Each change that reaches production or source is described in the changelog.