Product Roadmaps

This page tracks seed product work without treating source presence as product readiness.

Stage Meaning
operational current clean seed source checks/builds and has executable gate evidence
foundation a bounded, tested substrate exists, but the complete product loop does not
active an explicitly named roadmap gate is being implemented
cross-link compilation/link evidence exists, but execution is not claimed
planned design or historical source exists without a current operational product

seed is pre-1.0. None of these labels is a general production-readiness claim.

Portfolio

Track Current stage Delivered evidence Roadmap / next boundary
Language and compiler operational, pre-1.0 LLVM compiler Gates 0-23; safe release profiles; ownership, linear resources, regions, structured tasks, packages, LSP, cross-module interfaces Continue hardening and target-specific evidence; macOS arm64 remains cross-link-only
CLI authoring foundation G08 closed: argument/flag classification, owned metadata, fallible help and completion rendering Interactive process execution and polished end-user framework lifecycle
TUI foundation G08 closed: input classification, cell surfaces, layout, widgets, deterministic snapshots Exact terminal owner, raw-mode restore, resize signals, PTY execution and application-level accessibility
Web foundation G12-G16 provide networking, protocol validators, routing/middleware policy and application metadata; integrated runtime/facade remain archived Owned connection-to-response loop, cancellation, shutdown drain, TLS and end-to-end server evidence
Public site internationalization production candidate An immutable five-locale artifact is active in /opt/dev/seed-site; the 210-page core matrix plus five localized diagrams, catalogs, documentation structure, metadata, internal links, anchors, subscription contract, responsive Playwright matrix, and rollback automation pass Promote the exact machine-policy artifact through G8 with human_reviewed=0, then collect post-deployment human language validation without relabeling the promoted artifact
Desktop / adaptive UI foundation UI0-UI4 close the headless core plus the same Gallery on Linux AArch64 X11/AT-SPI and Android API 37 ARM64 UI6 Windows/macOS backends, broader desktop text/IME/clipboard integration, packaging and acceleration
Mobile Android operational slice; iOS simulator/device slices Android API 21/29/37 AVDs and initial API-35 physical device; iOS 26.5 simulator and initial signed iPhone XR; shared lifecycle/services, frame, input, semantics, and accessibility contracts Broader device matrices, IME/accessibility completeness, archive/export, store validation, release signing, and production hardening
Ridge DB completed bounded v0.3 local foundation v0.2 P0-P12 frozen, P13 explicitly waived; v0.3 V3-G0-G25 complete v0.4 replication/failover work has not started; distributed and elastic cluster work remains later
Ridge Admin operational professional preview built-in Local Ridge, loopback web security, local/native-SSH pgwire pools, catalog explorer, SQL workspaces, typed filters, atomic staged data editing, verified backup/offline restore, maintenance, signed packaging, and Chromium UX gates Linux arm64 execution, Windows service/package implementation, privileged macOS lifecycle, screen-reader audit, and long-duration release evidence
Game active foundation Declared P0-P7/P9 plus portable fullscreen/VSync, refresh-adaptive pacing, bounded IME pre-edit/candidate and clipboard state, 16-contact touch and eight-device pen snapshots, controller rumble, nearest/bilinear sampling, pivot-rotated/flipped sprites, owned render targets, explicit bounded layer/material-sorted ordinary/transformed-sprite batches, exact-order retained primitive/sprite/bitmap-glyph/viewport/target plus pre-tessellated path/compound-fill/styled-stroke command replay, deterministic paths with explicit/adaptive curves, fixed or tolerance-adaptive round width/cap/join styles, bounded dash styles, antialiased solid/dashed fringes, bounded compound even-odd/non-zero fills with holes, LF-multiline/width-wrapped Unicode text with ordered font fallback and preserved color glyphs, and a typed shaped-text-to-gfx2d ownership adapter, PCM16/IMA ADPCM WAV, and incremental Ogg Vorbis/Opus plus native FLAC and MP3 extensions provide a backend-neutral ABI and relocatable desktop packages; contract v21 passes headless/macOS/Linux, the focused Windows MinGW/Wine ABI, and all three relocated packages; Seed Garden shares one deterministic model across Android, iOS, and native macOS/Linux/Windows, with 10,044-move stress, OpenSL ES, allocator-instrumented Android lifecycle evidence, Apple AudioQueue simulator callbacks, a complete unsigned iPhoneOS bundle, and bounded mobile metrics Add authored Garden content/audio, paragraph-level bidi/retained glyph atlases, obtain physical Windows fullscreen/VSync/audio/input evidence, physical touch/pen/controller/rumble evidence, physical Android/iOS audio and interaction evidence, physical-device performance/thermal stress, audio interruptions/routes, network audio sources, codec product adoption, advanced tools, and signed distribution
ML / tensor foundation G18-G22 bounded tensor storage, datasets, metadata, tokenizer/config and orchestration contracts Numeric CPU kernels, autograd execution, model inference/training and measured correctness/performance
LLM metadata foundation bounded config, tokenizer/model compatibility, datasets, experiment and evaluation contracts Decoder execution, checkpoints, inference/training loop and reproducible model-quality evidence
SSH protocol foundation bounded crypto/protocol/config/auth packages check under current seed End-to-end owned transport, host-key verification, cancellation and interoperability matrix
Web automation parser/client foundation URL, HTTP, crawler-policy and bounded parsing packages Operational HTTP/TLS client ownership, crawl loop, robots/rate policy and browser automation
Savana OS migration roadmap seed provides freestanding x86-64/AArch64/RISC-V64 compiler boot foundations First LLVM-built Savana x86-64 boot/console gate; historical v0.1 is migration evidence only
WebAssembly object-level / planned runtime wasm32-WASI/object target rows exist Hosted services, browser bindings and execution evidence

Language and compiler

The clean compiler under seed/compiler/llvm is the repository launcher and semantic authority. Gates 0-23 are closed for their recorded scopes. Linux x86-64 is the primary executed target; Windows x86-64 passes under required Wine and macOS x86-64 passes natively on Intel. macOS arm64 is implementation/link/ABI complete but has no native execution claim.

Evidence: seed/compiler/llvm/ROADMAP.md, seed/compiler/llvm/tests/GATE*_BASELINE.md, and Current Status.

CLI and TUI

Grove G08 closed a safe portable authoring foundation. It intentionally did not claim interactive terminal or child-process execution: those require exact owners that restore terminal state, wait for children and handle cancellation on every exit.

Evidence: seed/compiler/llvm/tests/GROVE_G08_BASELINE.md.

Web

The current web work is a collection of operational lower layers, not a production framework. Request/response validation, routing rules, middleware policy, networking and buffers exist. The integrated web, web_core runtime and web_runtime facade were archived at G16 until connection ownership, partial I/O, cancellation and shutdown drain are closed end to end.

Evidence: Grove G12, G13 and G16 baselines and Web Stack.

Public site internationalization

The public site currently serves English-only landing, subscription, and documentation pages from the custom seed-site server. The source tree is under /opt/seed-lang/seed-site, the production artifact is under /opt/prod/seed-site, and /opt/dev/seed-site does not yet exist. English keeps the existing unprefixed URLs; Spanish, Brazilian Portuguese, French, and Italian use /es, /pt-br, /fr, and /it. Locale tags remain BCP 47 values (en, es, pt-BR, fr, and it) even when URL segments are lowercase.

Gate Closure evidence
SITE-I18N-G0 — reproducible development baseline /opt/dev/seed-site is created from a clean, recorded source revision; its binary, static files, documentation tree, configuration schema, and content manifest are reproducible; the English route and form smoke matrix passes there without changing production
SITE-I18N-G1 — locale and route contract One route resolver preserves the current English URLs, serves the four prefixed locale trees, redirects /en/... permanently to the equivalent unprefixed URL, separates query strings before matching, emits the exact Content-Language, and passes home, subscription, documentation, static-asset, API, missing-page, and traversal-rejection cases for every locale
SITE-I18N-G2 — templates and message catalogs Landing, subscription, documentation shell, navigation, footer, form states, countdown units, metadata, and server-visible errors have stable catalog keys; the subscription API returns locale-neutral error codes; the build rejects missing, extra, duplicate, or placeholder-incompatible messages; rendered English retains content parity except for intentional routing and discovery changes
SITE-I18N-G3 — five-locale public pages Home and subscription pages have source-current machine translations for es, pt-BR, fr, and it, canonical English copy, a shared technical glossary, locale-preserving navigation, and an accessible language selector; localized form success, duplicate, invalid-input, server, and network states pass desktop and mobile layout checks; the release manifest discloses whether human language review occurred
SITE-I18N-G4 — localized documentation foundation Locale-specific Markdown roots, localized documentation navigation, per-page titles/descriptions, stable explicit heading IDs, and locale-aware internal-link rewriting pass for the introduction, overview, current status, product roadmaps, Ridge DB overview, and Ridge DB quickstart in all five locales; code, commands, identifiers, and product names remain canonical
SITE-I18N-G5 — complete documentation coverage All 40 public documents have source-current machine translations in the four added locales; every translation records its English source revision, provider, schema, and review state; missing or stale translations cannot publish under the machine policy; a full link crawl finds no accidental cross-locale navigation, .md route leaks, broken anchors, or English prose presented under a localized canonical URL
SITE-I18N-G6 — discovery and sharing Every published page has self-canonical URL, exact lang, complete available-locale hreflang plus x-default, localized title/description/Open Graph metadata, and consistent clean URLs; robots.txt and the generated sitemap enumerate only valid canonical pages and pass duplicate/missing-alternate checks
SITE-I18N-G7 — ancillary public assets The Ridge runtime diagram extracts translatable controls, accessibility labels, statuses, and narrative copy from its data model and passes keyboard/screen-reader smoke checks in all five locales; llms.txt, downloadable archives, and other language-neutral or canonical-English assets have an explicit publication policy instead of silent localized duplication
SITE-I18N-G8 — staged release and production promotion The exact candidate artifact passes the 210-page core route matrix (home, subscription, and 40 documents across five locales), localized subscription integration, sitemap crawl, metadata assertions, missing/stale-translation policy, responsive screenshots, and rollback rehearsal in development; that same immutable artifact is then promoted atomically to production with recorded hashes and a verified rollback target

The gates close in order. The default policy requires human technical review, but an owner-authorized machine policy may close G3-G5 through complete, source-current translations plus the automated content, route, accessibility, responsive, and interaction matrix. Such a release must record translation_policy=machine and human_reviewed=0; human language validation is post-deployment and does not retroactively change that provenance.

Desktop, adaptive UI and game

The Adaptive UI track has a live Linux X11/AT-SPI backend and the shared Android Gallery; Windows and macOS remain UI6. The Game track now has a versioned backend-neutral boundary, an owned window loop with idempotent fullscreen/VSync control, keyboard/mouse/text/touch/pen/controller snapshots, shapes, bounded IME pre-edit/candidate state and dual-motor controller rumble with explicit stop, owned RGBA textures with nearest/bilinear sampling, pivot-rotated/flipped sprites, owned offscreen render targets with feedback rejection, transparent consecutive-sprite/glyph batching, and explicit bounded ordinary/transformed-sprite batches sorted by layer/material with stable same-material order and allocation-free submission. Exact-order retained buffers replay clear, primitive, viewport, render-target, and ordinary/transformed-sprite commands plus paths, compound fills, styled solid/dashed strokes, antialiased meshes, and atomic bitmap-glyph runs across frames without new allocation after whole-stream portable validation. Their caller-bounded mesh and glyph arenas are cleared and reused with the command owner. The track also includes bounded single-contour linear/quadratic/cubic paths with deterministic simple-concave fill and portable width/cap/join stroke styles plus solid/dashed antialias fringes through per-vertex colors, a strict headless host, clipped camera viewports, versioned asset manifests, safe bounded asset reads, a root-scoped capacity-bounded LRU byte cache with observable hit/miss/eviction/reload behavior and synchronous exact-content development refresh, plus a bounded root-scoped polling watcher for creation/change/replacement/removal hints and an independent typed LRU arena for decoded image RGBA, sound PCM, and bitmap-font RGBA, pinned bounded PNG/JPEG plus dependency-free PPM-to-RGBA and SBF bitmap-font decoding, measured ASCII text, plus bounded HarfBuzz and FreeType TTF/OTF Unicode shaping/rasterization. SDL3 execution passes on macOS ARM64 and Linux x86-64; a focused Windows x86-64 backend ABI gate passes under required MinGW/Wine/Xvfb at contract v21. The complete relocated Linux, macOS, and Windows packages rebuild and execute the contract-v21 application. Contract v20, which adds owned IME candidate snapshots to eight-device pen snapshots, 16-contact touch, refresh-adaptive pacing, IME pre-edit/clipboard state, and controller rumble without exposing SDL. Contract v21 adds aligned per-vertex RGBA triangles used by the bounded antialiased-stroke tessellator. Deterministic headless, macOS ARM64 SDL3, complete Linux, focused Windows/Wine, and all relocated package matrices pass the current surface. Shared owned PCM streams now include a bounded owned output-device snapshot, an abstract default route on every backend, SDL3 physical-output names and preferred formats, explicit opening by ephemeral snapshot index, and an owned polling monitor for list/name/format/default changes. Headless and Apple AudioQueue currently expose only the default route. Contract v3 adds owned non-blocking PCM16 mono/stereo capture from SDL3's default recording route; headless and Apple explicitly report it unavailable. Integer-only PCM16/IMA ADPCM WAV decoding, codec-neutral incremental memory- or file-backed Ogg Vorbis/Opus and native FLAC decode, and a bounded frame-driven game mixer cover sound effects, looping compressed music, channels, volume groups, pause/resume, and exact cleanup. Portable fixed-step timing, timers/statistics, backend-neutral precise frame pacing, millihertz refresh queries, and stable-divisor adaptive caps, plus vectors, collision, transforms, deterministic random, and a shared color contract also pass. A relocatable Linux directory and ad-hoc signed macOS application bundle plus a Windows portable directory contain SDL3, the required Seed code, manifests, and assets. The independent seed-game-assets CLI deeply validates packaged manifests and PNG/JPEG/PPM/SBF/TTF/OTF/WAV/Ogg Vorbis payloads without a window or SDL, and deterministically converts accepted WAV input to compact mono/stereo IMA ADPCM, PNG/JPEG/PPM images to RGBA8 PNG, SBF glyph atlases to PNG, and shaped/wrapped TTF/OTF text to PNG. It packs bounded decoded images into a deterministic alpha-preserving shelf atlas with composable stable sorting, transparent trimming, and clockwise tall-sprite rotation. It also imports exact 16x6 PNG/JPEG/PPM bitmap sheets into canonical runtime-validated SBF documents. Versioned seed-atlas 2/3/4 maps have a bounded public runtime parser, and the CLI authors bounded ordered sparse seed-tilemap 1, compact binary dense seed-tilemap 2, sparse binary chunked seed-tilemap 3, and origin-aware chunked seed-tilemap 4 documents consumed by matching runtime parsers; a bounded single-layer Tiled CSV importer and a 1..16-layer, 1..16-tileset finite orthogonal Tiled JSON importer produce the same dense format. Bounded infinite JSON and TMX importers preserve negative coordinates and canonicalize fixed-size chunks into v4. The TMX paths accept finite layers or infinite chunks with uncompressed CSV. JSON and TMX tilesets are strictly ordered and align the atlas to Tiled's global GID space. Both import paths can resolve named external TSX files relative to the map and derive the atlas size from bounded tile counts. The portable RGBA8 encoder uses a two-pass exact-bit selector between fixed and complete active-alphabet dynamic Huffman DEFLATE, with a deterministic 32 KiB latest-match window and matches up to 258 bytes. Explicit fixed/dynamic block checks and decoder round trips keep the output portable without a platform image encoder. grove-game-test v8 adds deterministic goldens, property corpus, integer and structured byte-buffer shrinking, four-controller replay, and allocation-free versioned SGTR trace capture/playback. grove-game-debug v1 aggregates bounded frame/update/draw/ audio counters and produces deterministic printable-ASCII overlay text. An independent bounded seed-objectmap 1/2/3/4 runtime now validates canonical object layers, signed-thousandth rectangle/point/ellipse/polygon/polyline/tile geometry, vertices, UTF-8 metadata, and typed map/layer/object properties; v2 adds acyclic group hierarchy, layer IDs, cell/millipixel offsets, opacity, and layer visibility, v3 adds object visibility, and v4 adds bounded Tiled text content/font/color, pixel size, wrap/style/kerning flags, and alignment; older versions remain compatible. The JSON and TMX importers now author equivalent nested group/object-layer hierarchies in bounded parent-before-child pre-order with parent links, kinds, layer IDs, cell/millipixel offsets, opacity, visibility, empty layers, scalar properties, exact decimals, deterministic ID sorting, failure-before-output, and byte-identical seed-objectmap 4 results, including hidden and text objects. Bounded non-tile JSON/TMX templates now inherit geometry, metadata, and scalar properties with deterministic instance and same-name-property overrides. Nested class-valued properties use class:<propertytype> and bounded canonical JSON, producing byte-identical JSON/TMX object maps. External-TSX tile templates normalize relative paths, validate local tile indices, and remap into the map's global GID space. Cross-serialization and nested templates remain active. Dynamic-Huffman optimization, Tiled object/group/property/ collision-object import, graphical editors, native event-driven/background decode/reload, and richer structure-aware shrinkers remain tooling work. Seed Garden now consumes this foundation through a deterministic headless rules/progression model and a native desktop adapter. Its relocatable macOS, Linux, and Windows packages execute the same model used by Android. The desktop adapter persists a versioned checksummed progress payload through sync + atomic rename, restores timed attempts across restart, and quarantines corrupt/incompatible files before clean recovery. Mobile and desktop block retries when no attempt remains; the desktop result overlay presents all 15 levels with unlocked best scores, stars, and the next minimum-score-gated level. It also mixes a 96-byte mono IMA ADPCM WAV effect with a file-streamed 7,244-byte Ogg Vorbis music loop and pauses the mixer with the game. Authored production content/audio, physical Android/iOS audio evidence, and physical-device performance/thermal stress remain explicit product work. The Android adapter now retains that mixer in an Activity-generation context, keeps the compact Ogg source compressed in memory, and queues decoded PCM through a bounded OpenSL ES backend. An API-35 ARM64 AVD proves an active 48 kHz stereo track, scoring-move playback, and pause/resume across both the game overlay and Activity background/foreground; physical speaker quality and latency are not claimed. A clean API-37 ARM64 gate adds eight alternating portrait/landscape recreations with all 64 tile semantics, reduced-motion scoring, audio teardown, and bounded startup/frame/PSS metrics. Its dedicated allocator row runs two symmetric eight-rotation lifecycle workloads under guarded bionic malloc_debug; both measured libmemunreachable scans report zero bytes and zero allocations. The iOS 26.5 ARM64 simulator builds the same mobile Garden source and assets. Its reusable application context and atomic private-file persistence survive continuous frames; XCUITest covers 67 stable semantic nodes, pause/resume, rotation, background/foreground, termination, and relaunch. The iOS audio backend uses fixed bounded Apple AudioQueue buffers; the gate requires one active stream with advancing callbacks and also emits an iPhoneOS-identified Garden object plus a complete unsigned application bundle with validated flat assets. This is simulator audio-processing and device packaging evidence, not physical execution, speaker-route, latency, or signing evidence. This is a reusable native foundation, not a shipped game runtime: Codec product/mobile runtime adoption, network input, and capture beyond SDL3, event-driven hot-plug/route notifications, physical Windows/iOS evidence, distribution signing/notarization/installers, and broader mobile adapters remain open.

Evidence: UI4 baseline, Game P1 baseline, Game P2 baseline, Game P3 baseline, Game P4 baseline, Game P5 baseline, Game audio stream baseline, Game Opus baseline, Game FLAC baseline, Game MP3 baseline, Game P6 baseline, Game P7 baseline, Game P8 Linux baseline, Game P8 macOS baseline, Game P8 Windows baseline, Game P9 baseline, Game test baseline, Game text baseline, Seed Garden portability baseline, and the Game roadmap.

Mobile

Android and iOS are active mobile tracks at explicitly scoped evidence levels. Android packages arm64-v8a and x86-64 through Gradle/Kotlin/CMake/JNI and passes API 21/29/37 AVD plus an initial API-35 physical-device slice. iOS passes the 26.5 ARM64 simulator and an initial signed iPhone XR slice through the Swift/UIKit host. Shared lifecycle/services, bounded input, frame, semantics, rotation, and accessibility contracts are covered; broader hardware, full IME/accessibility matrices, archive/export, store validation, and production release remain open.

See Android Applications.

Ridge DB

Ridge is the most advanced application track. The v0.2 line froze P0-P12 and waived P13 rather than reporting a failed matrix as passing. The bounded v0.3 local foundation completed V3-G0-G25. Replication, failover, sharding, and distributed SQL have not started.

Evidence: Ridge Database, grove/apps/ridge/CAPABILITIES.md, grove/apps/ridge/ROADMAP.md, and grove/apps/ridge/V3_CONTRACT.md.

Ridge Admin

grove/apps/ridge-admin is a Ridge-native browser administration application, not a PostgreSQL compatibility claim. The 0.1.0+contract.3 professional preview owns a loopback-only HTTP boundary, launch/session/CSRF/CSP policy, the built-in Local Ridge profile, secret-free saved profiles, four local or native SSH direct-tcpip pgwire connections, versioned Ridge introspection, SQL workspaces, deterministic data paging, up to four typed parameterized filters, conflict-aware drafts, atomic save/import of up to 10,000 staged changes, server-spooled bounded CSV export, integrity/vacuum operations, verified operator-rooted backup, and non-overwriting offline restore.

Evidence and current release blockers are in grove/apps/ridge-admin/SPEC.md, README.md, RELEASE.md, and the machine-readable runners under grove/apps/ridge-admin/tests/.

ML and LLM

The clean Grove conversion retained bounded, ownership-safe tensor storage, shape/dataset/model metadata, tokenizer/configuration and experiment contracts. It explicitly archived numeric CPU/CUDA kernels, full graph/model execution and LLM runner behavior that lacked safe current owners. The next stage is executable numeric correctness before performance or model-quality claims.

Evidence: Grove G18-G22 baselines.

Savana OS

Savana's historical v0.1 tree is not an operational current kernel. The active roadmap starts by porting a minimal x86-64 boot/console path to the clean LLVM compiler, then builds explicit KAL/HAL/backend contracts. AArch64 and RISC-V64 Savana boots remain future gates even though the compiler itself has freestanding boot fixtures for those architectures.

Evidence: savana/ROADMAP.md.

Status discipline