# Roadmap

## Phase 0: Bootstrap

- single CLI
- local daemon
- local store
- local identity
- local CAS
- docs and ADRs

## Phase 1: Iroh Foundation

- Iroh endpoint
- peer cards
- peer discovery
- peer exchange
- basic authenticated peer connection

## Phase 2: Trust And Authorization

- SSH-admin-rooted keychain
- signed keychain ops
- resource auth ops
- grants and revocations
- auth explain
- resource secrets
- bearer invites

## Phase 3: CAS/KV/Pubsub

- iroh-blobs CAS
- iroh-docs KV
- iroh-gossip pubsub
- private topics and encrypted values

## Phase 4: Pipes And SSH Proxy

- dumbpipe-style streams
- TCP and Unix socket forwarding
- SSH proxy over Iroh
- restricted geth admin shell

## Phase 5: DB And Documents

- cr-sqlite sync
- Automerge sync
- resource-attached authorization
- secret-derived encryption

## Phase 6: File Sync And Advanced Local-First Auth

- CAS tree objects
- file roots
- conflict handling
- Keyhive-like convergent capabilities
- BeeKEM/CGKA-inspired group key evolution