Roadmap
Foundation — done
Section titled “Foundation — done”Repository, architecture, contracts, design system, CI, security, docs, web shell, local API, and desktop shell.
Phase 1 — first vertical slice — done
Section titled “Phase 1 — first vertical slice — done”Create trip → deterministic Blueprint → add/import reservation → readiness action → redacted brief.
Phase 2 — grounded intelligence — done
Section titled “Phase 2 — grounded intelligence — done”Consent-gated official advice (FCDO) and weather (Open-Meteo) with freshness labels; deterministic, source-returning trip search across documents, confirmed facts, and saved reading; offline city packs (Overture + Wikivoyage, per-layer licenses, CI-built, downloaded per trip with consent); and BYOK AI assist — on-device Ollama plus OpenAI/Anthropic — with a redaction preview, an activity log, and keys kept only in the OS keychain.
Phase 3 — public beta — in progress
Section titled “Phase 3 — public beta — in progress”Shipped:
- Local preservation: a keychain-backed encrypted vault with optional passphrase, portable encrypted backup and restore, per-trip research, workspace search, a source/license register, and redacted print, PDF, and plain-text sharing.
- Planning continuity: confirmed air and surface transport, stays, traveler-authored plans, readiness routes, a source-linked offline Today view, and a deterministic disruption view whose rows return to their local records.
- Deliberate connected context: consent-gated maps, official advice, weather, page fetching, city packs, and verified offline PMTiles basemaps for every catalog pack.
- Optional intelligence: on-device trip chat grounded in local material, guided Ollama setup, validated BYOK cloud setup, exact remote-payload preview, editable prompts, and reviewable drafts. Transcripts remain outside search, sharing, and exports; encrypted workspace backups preserve them with the rest of the local workspace.
- Public operation: English and Spanish interfaces, signed updater artifacts, release checksums and provenance, and parity gates that hold the shipped mock to the deterministic Rust rules without bundling behavioral fixtures.
Remaining: OS-signed and notarized desktop installers, blocked on paid platform certificates and independent of Voyalier’s updater signature; more locales; and incremental expansion of bounded offline-map coverage.
Licensed live inventory, encrypted synchronization, group collaboration, monitoring, and mobile experiences.