Roadmap
Last updated: 2026-08-23 (Windows conversion channel added to Q3 + Q4 after wootc v0.1.0-alpha.1 shipped 08-22 — #1988) | Maintainer: tuna-os (hanthor)
Mission
Bring a modern, cloud-native experience to the Enterprise Linux Desktop. tunaOS provides OCI-based, image-mode Fedora/AlmaLinux desktops with out-of-the-box developer tooling, GPU support, and immutable infrastructure patterns.
Current Status (August 2026)
Active Variants
| Variant | Base | Desktops | Status |
|---|---|---|---|
| Yellowfin | AlmaLinux Kitten 10 | GNOME, KDE, COSMIC, Niri, XFCE | Stable |
| Albacore | AlmaLinux 10 | GNOME, KDE, COSMIC, Niri, XFCE | Stable |
| Skipjack | CentOS Stream 10 | GNOME, KDE, COSMIC, Niri, XFCE | Beta |
| Bonito / Bonito Rawhide | Fedora 44 / Rawhide | GNOME, KDE, COSMIC, Niri | Beta |
| Sailfin | openSUSE Tumbleweed (rolling) | GNOME, KDE, Niri, XFCE | Beta |
| Guppy | Gentoo Linux (source-based) | GNOME, KDE, Niri, XFCE | Beta |
| Grouper | Ubuntu 26.04 | GNOME, KDE, Niri, XFCE | Beta (RFC 010) |
| Marlin | Arch Linux (rolling), CachyOS overlay | GNOME, KDE, COSMIC, Niri, XFCE | Beta |
| Flounder / Flounder Sid | Debian 13 Trixie / Sid | GNOME, KDE, COSMIC, Niri, XFCE | Beta |
| Hummingbird | Fedora Hummingbird (container-native bootc) | Base, GNOME, COSMIC | Experimental (see #1341) |
| Gurnard | Ubuntu 24.04 Noble | Base, Pantheon | Experimental (see #1341) |
| Wahoo | Fedora ELN (EL11 preview, rolling) | Base, GNOME, KDE, COSMIC | Experimental, dispatch-only — base/GNOME/KDE Gate-green and published 08-27; COSMIC builds but Promote is held behind a Gate blocked by an AWS GPU vCPU quota of 0. No working H.264/H.265 on this base (fedora-eln/eln#214, desktops #2048) |
Status terms follow VARIANT-LIFECYCLE.md: Stable
means GA, Beta means published for testing on tunaos.org/download. This
table is the canonical per-variant status; tunaos.org wiki and blog copy must
track it. Notably Bonito is Beta (GA tracked in #272) — it is neither "Production" nor "Experimental".
Stable is an all-cells claim: every advertised desktop, edition, and
supported architecture for that variant must have the evidence ledger required
by VARIANT-LIFECYCLE.md. A passing GNOME/default cell
does not promote the other cells. Promotion or a deliberate narrower support
claim must link the per-cell boot-gate, LUKS-E2E, desktop-contract, and
user-install evidence in its PR.
Experimental (per maintainer #1315): Hummingbird and Gurnard/Pantheon are configured in
.github/build-config.ymland building, but predate the admission gate in VARIANT-LIFECYCLE.md (#1196) — they have no named owner or acceptance criteria yet. They are tracked in #1341; the 2026-08-22 Q3 checkpoint (#1299) decides staff vs. descope. README coverage is tracked in #1298. Hardware/kernel profiles (e.g.bonito:gnome-t2, Apple Silicon Asahi, HWE) are in-scope under the admission gate (#1270).
Build Health
⚠️ CORRECTION (2026-08-14): the prior "CI pipeline builds are green" claim is stale — all 13 variant workflows were red on 08-14 (#1570, consolidated root-cause diagnosis: yellowfin, albacore, skipjack, bonito, bonito-rawhide, sailfin, guppy, grouper, marlin, flounder, flounder-sid, gurnard, hummingbird). Every failed job maps to a known root cause (no unexplained failures); fixes are fixable but stranded: the hive GitHub App lacks workflows permission (#1557), so every .github/workflows/*.yml fix PR is rejected at push. CI recovery is now the Q3 critical path (strategist #1571) — flavor equality (#1316), NVIDIA family (#1383), and release parity (#1254) staff tests all depend on a green matrix. 08-22 checkpoint decision required: STAFF CI-recovery with first-PR-by-09-01, plus maintainer grant of the App workflows permission.
✅ Downloads VERIFIED WORKING (2026-08-08): tunaos.org/download serves 179 ISOs from R2 (newest 08-07, HTTP 200 GB-scale). ✅ GitHub Releases RESUMED 2026-08-09: gnome-20260809 published 11:38 UTC with assets (incl. SBOM spdx, 52.5 MB) — first release since 07-12; the a4b147f8 fix (build-run selection, not artifact name — see #1106) and the #1147 cadence backstop are confirmed effective. #936 (tacklebox pin) is not a live-boot fix hold: the image-versions.yaml fallback was moved to the live-boot fix (tacklebox 4fa6041) on 07-31 by #937. What is left is a separate, narrower thing — publish-iso-groups.yml sets its own TACKLEBOX_SHA: a105d6d3 (61 commits older, pre-dating the appended-overlay live path), and since publish-isos.yml is disabled that override is the SHA every scheduled ISO is actually built with. Those ISOs boot-gate green (run 30773566969, 08-03), so this is a divergence to close deliberately with its own boot evidence, not a hold to lift.
Community
-
Pre-Q4 Baseline (2026-08): 56 stars, 3 forks (API), 0 GitHub Release downloads, 0 external production adopters (ADOPTERS.md)
-
CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md published (June 2026)
-
Discussions enabled
-
Multi-agent development active (architect, guide, sec-check, quality, CI, outreach)
-
34+ community outreach issues filed; product-readiness gate (#563) resolved
-
⚠️ Adoption metrics untracked — no usage/telemetry data on the 179 downloadable ISOs (#1174); plan published 08-10 (ADOPTION-METRICS.md) — first monthly download/usage snapshot targeted 2026-11-01 (Q4 "Mature")
-
🟡 ROADMAP coverage improving — 16/37 active authorized repos now carry a ROADMAP.md (2026-08-14): tunaos, tromso, tacklebox, docs, xfce-linux, bluefin-cli, Tavern, corral, tunaos-packages, bootc-installer (ROADMAP moved to default branch via PR #14, 08-14 — #1361 resolved), bootc-migrate, dualcut, gtk-office-suite, iso-builder, protota, wootc; template merged into .github project-starter (#13). Excluded from planning scope: ubuntu + letters (archived 2026-08-12). Still unplanned (21 active): .github, flatpak-index, bootc-installer-asahi, branding, bst-ci, changelog-action, debian-copr, finupdate, fisherman, homebrew-tap, kde-build-meta, mandelbrot, mariner, remora, scoop-bucket, suite-common, suite-common-rust, tuna-installer-cosmic/kde/niri/xfce (#1295)
-
🟡 Per-repo ROADMAP coverage — 16 of 37 active repos (43%), measured 2026-08-14 by
scripts/gen-roadmap-coverage.py. Scope is every non-archived, non-private repo in thetuna-osorg; a repo counts as planned whenROADMAP.mdis at the root of its default branch. Archived repos are out of scope because a read-only repo cannot be planned.Planned (16): bluefin-cli, bootc-installer, bootc-migrate, corral, docs, dualcut, gtk-office-suite, iso-builder, protota, tacklebox, Tavern, tromso, tunaOS, tunaos-packages, wootc, xfce-linux.
Counted on a non-
maindefault branch:bootc-installerondev— these are the repos' own default branches, not strandings.Unplanned (21): .github, bootc-installer-asahi, branding, bst-ci, changelog-action, debian-copr, finupdate, fisherman, flatpak-index, homebrew-tap, kde-build-meta, mandelbrot, mariner, remora, scoop-bucket, suite-common, suite-common-rust, tuna-installer-cosmic, tuna-installer-kde, tuna-installer-niri, tuna-installer-xfce. Tracked by #1295.
-
⚪ "First external contributor" claim retracted (#1317, corrected 2026-08-13): the shimonenator commits (EL10/OBS design fixing #777, image-factory completion gate) are not a human contribution — maintainer confirmed the account is misattributed by GitHub because the Google Antigravity agent is listed as commit author;
git logshowscommit.author.name: antigravityon every one of that account's commits. Superseded 2026-08-14: the first external human contributions landed and merged the same day — docs #234 (QEMU/KVM guide, dchaudhari7177) and docs #239 (Gurnard Pantheon fix, Elonon901001), both verified human GitHub accounts (created 2022, real-name profiles). These are docs-repo contributions, not core-code: bus-factor risk (#1095) for core repos is unchanged, but the onboarding loop (seed → PR → merge) is now demonstrably end-to-end, which materially strengthens the Hacktoberfest seeding case (#1537). -
🟡 Flavor equality mandate (08-11): maintainer directive #1315 — all supported flavors are equal tiers; GNOME-first framing and cadence to be retired (#1316)
Per-repo roadmaps
Every active repo in the tuna-os org is expected to carry its own ROADMAP.md
at the repo root on its default branch. This file plans tunaOS the image; it is
not a place for package, installer, or ecosystem repos to state their milestones.
New repos scaffolded from the .github project-starter template start with one
(tuna-os/.github#13).
Coverage is measured, not asserted. The block in Community is
regenerated by scripts/gen-roadmap-coverage.py
— run it rather than editing the numbers by hand, and see its docstring for the
two rules that decide the count (which repos are in scope, and where the file has
to live). Do not gate pull requests on --check: coverage moves when another
repo gains a roadmap, so a byte-exact gate fails unrelated PRs. --check-structure
catches the thing a PR can actually break — a hand-edit inside the generated block.
See SECURITY.md for vulnerability reporting.
Generated by strategist agent at ACMM L6. Updated 2026-08-11 for flavor equality mandate (#1315) + first external contributor (#1317). Signed-off-by: hanthor-hive-agent[bot] <290068839+hanthor-hive-agent[bot]@users.noreply.github.com>
Q2 2026 (April–June) — "Stabilize" ✅ COMPLETE
Theme: Fix CI, land strategic documentation, ship Redfin alpha.
Result: 11/12 goals completed. ISO publishing regressed (#543). Redfin alpha carried to Q3.
| Goal | Status | Issue |
|---|---|---|
| CI build reliability ≥80% | ✅ Done | #226, #314, #448 |
| ISO E2E tests passing | ✅ Done | #227 (ISOs building) |
| ISO publishing restored | ✅ Done | #229 (⚠️ regressed: see #543) |
| CONTRIBUTING.md published | ✅ Done | #268 (PR #319) |
| SECURITY.md published | ✅ Done | #269 (PR #319) |
| CODE_OF_CONDUCT.md published | ✅ Done | #270 (PR #319) |
| ROADMAP.md published | ✅ Done | #267 |
| Redfin (RHEL 10) alpha | 🟡 Carried to Q3 | — |
| Security hardcoded creds removed | ✅ Done | #318, #359 |
| SELinux enforcing | ✅ Done | #318, #322 |
| ublue-os/packages COPR eliminated | ✅ Done | #436 |
| projectbluefin/actions adopted | ✅ Done | #440–441 |
| arm64 builds passing | ✅ Done | #448 |
Q3 2026 (July–September) — "Expand" 🟡 IN PROGRESS
Theme: Expand variant coverage, harden architecture, grow community.
Mid-quarter update (2026-08-10): Q3 milestone populated; CI green (at the time — see 08-13 correction below); downloads verified working (179 ISOs, newest 08-07). ⚠️ Q3 at risk — checkpoint 2026-08-22 (#1299): 4 open strategic goals (#272 Bonito GA, #1123 Redfin alpha, #1093 RFC governance, #1094 ADR coverage) with zero movement since 08-08 while CI/ops work lands daily. ⚠️ Desktop parity crisis (#1294): tunaos-packages#133 audit shows 24/37 published editions are too small to contain their desktop (non-RPM bases: sailfin/flounder/grouper). GitHub Releases gap fixed 08-08 (#1106/#1147 closed, a4b147f8).
Mid-quarter update 2 (2026-08-11): maintainer filed #1315 — flavor equality mandate (no GNOME-as-primary framing; all supported flavors equal tiers). This reframes desktop parity (#1294) from defect-fix to product strategy; flavor cadence parity (#1254, PR #1314) is its first deliverable. ✅ First deliverable landed 05:22Z: browser ISO catalog parity gate merged (#1322) — catalog generation now fails when any browser/on-demand flavor lacks a published catalog fact (#1281 closed). Community signal: first external contributor (shimonenator, 08-10) — retracted 08-13 (#1317): confirmed an Antigravity-agent account, not a human contributor. #1308's starter backlog stands on its own merit regardless.
Mid-quarter update 3 (2026-08-11): maintainer directive #1319 — package sourcing policy: default to system repos / tideforge; no PPAs/COPRs/OBS/AUR; build in-house what the base lacks, with a small trusted third-party allowlist. Second directive in 24h; elevates the Q2 COPR-elimination win (#436) into org-wide supply-chain policy (#1323).
Correction (2026-08-13): the 08-10 "CI green" note above is stale. Bonito's nightly (build-bonito.yml) has been red for 10/10 scheduled runs, 08-03 through 08-13 — verified via gh run list. Root cause is a cross-variant nvidia-overlay initramfs regression (sr_mod/cdrom/virtio_blk missing, TUNAOS_NVIDIA_CONTRACT_FAIL), independently confirmed also 100% red on Albacore, Marlin, and Yellowfin's nightlies over the same window — not Bonito-specific. Filed as #1499 (previously untracked; distinct from the closed, different-symptom #1118). Separately, base/arm64 jobs are failing on transient runner infra (/libpod_lock exhaustion), unrelated to the nvidia regression.
| Goal | Owner | Tracking | Status |
|---|---|---|---|
| Fix ISO downloads | ci-maintainer | #543, #561 | ✅ Done — downloads verified working (R2, 08-07) |
| Bonito (Fedora 44) GA | ci-maintainer | #272 | 🟡 Progress — T2 bootc profile #1256 merged 08-18; nvidia initramfs regression #1499 closed (fixes #1503/#1523 merged 08-14); still Beta, GA exit per VARIANT-LIFECYCLE.md; staff test at 09-01 checkpoint review |
| Redfin (RHEL 10) alpha | ci-maintainer | #609 (closed, shipped 08-09), #1123 | 🟡 Local-build alpha shipped (systemd auto-update timer units, #609/#1182/#1219) — intentionally not in .github/build-config.yml's CI matrix (RHEL EULA forbids redistribution + no RHSM creds on CI runners, see scripts/get-base-image.sh); build via just build redfin <desktop> or scripts/corral-build.sh, see docs/rhel-setup.md. Remaining: no automated build/publish path is possible by design, so "alpha" here means local-build-verified, not downloadable |
| Ship KDE, COSMIC, Niri, XFCE variants | ci-maintainer | #285 | 🟡 Published but desktop-completeness unverified — 24/37 editions undersized per tunaos-packages#133 / #1294 |
| GitHub Releases page carries ISO assets | ci-maintainer | #1106 | ✅ Verified 08-09 — gnome-20260809 published with assets; cadence resumed |
| Release-cadence health gate (no silent skip) | ci-maintainer | #1147 | 🟡 Root cause fixed 08-08 (a4b147f8 fails on dropped release) — verify no silent skip 08-09 |
| Containerfile deduplication | architect | #305 | ✅ Done |
| Hardcoded registry → configurable | architect | #304 | ✅ Done |
| Justfile modular decomposition | architect | #308 | ✅ Done |
| Migration guide (Silverblue/Kinoite/UB) | guide | #273 | ✅ Done (MIGRATION.md) |
| mdBook → tunaos.org centralized | guide | — | ✅ Done |
| Versioning policy documented | strategist | #274 | ✅ Done (VERSIONING.md, date-based + tiers) |
| External contributor onboarding / Hacktoberfest 2026 | guide / strategist | #1537, #1780, #2304 (#1331 closed) | 🟡 In progress — 09-02 live census: 6 contributable GFI org-wide (tunaos 3, docs 2, spindle 1), below the threshold of 8 and the 10–15 launch target; only 4 carry both good first issue and help wanted. docs fell from 9 to 2 because six curated tasks were closed by the project's own agent PRs (docs#349–352) between 08-30 and 09-02 (#2304); all three tunaos seeds are the same task type. Zero curated GFI in protota, wootc, gtk-office-suite, tunaos-packages, corral and iso-builder; bootc-installer is unblocked (#1531 closed, issues enabled) but unseeded. #1331 is closed; live trackers are #1537 (seeding rate), #1780 (composition) and #2304 (consumption). Dated census in docs/HACKTOBERFEST-2026.md |
| Weekly boot report as build gate | ci-maintainer | #989 | 🟡 In progress |
| Outreach sequencing | strategist | #563 | ✅ Done (gate lifted) |
| Populate Q3 milestone | strategist | #562 | ✅ Done (2026-08-08, 9 issues) |
| User-proven ISO installs roadmap | ci-maintainer | #763 | 🟡 In progress (Phase 1 baseline dispatched #761; GUI gate #577) |
| Apple Silicon (Asahi Linux) support | architect / ci-maintainer | #781 | 🟡 In progress (Bonito & Grouper 36/36 verified #776; D0–D4 installer track active) |
| Desktop parity floor (non-RPM bases) | packaging | tunaos-packages#133, tunaos-packages#323, #1294 (successor tunaos-packages#507) | ⬜ Not started — P0 for Q4 (see #1294) |
| Q3 checkpoint (08-22): staff or descope #272/#1123/#1093/#1094 | strategist | #1299 | 🟡 Date elapsed 08-22 — T-9 refresh 2026-08-23 (evidence updated: nvidia regression closed, Bonito T2 profile merged, wootc shipped); decisions pending maintainer sign-off by 09-01 staff-test deadline |
| Flavor equality mandate (docs wording + cadence parity) | strategist | #1315, #1254 | 🟡 In progress — catalog parity gate merged 08-11 (#1322, #1281 closed); cadence parity pending (#1316) |
| NVIDIA flavor family (6 editions, 0 assets since 07-05) | ci-maintainer | #1383 | 🔴 Broken — nightly overlay regressed 08-12 (#1382); 13/13 variant matrix red 08-14 (#1570) incl. nvidia cells (#1561/#1562/#1564/#1565); staff test: nightly green + gnome-nvidia assets republished by 09-01 (#1376/#1379) |
| Windows conversion channel (wootc) | strategist / wootc maintainer | #1988, #1958, wootc#210 | 🟡 In progress — v0.1.0-alpha.1 shipped 2026-08-22 (five branded installers + deployer artifacts + SHA256SUMS, E2E-gated); nightly auto pre-releases live. wootc's own ROADMAP (refreshed 08-22) carries the v0.1.0-alpha → v1.0.0 ladder with milestone trackers M2–M5 (wootc#210–#213). Gaps closing under #1988: no Windows entry point from this repo (README.md/MIGRATION.md have zero wootc references; user ask #1958 filed 08-22 untriaged), and winget install TunaOS.wootc blocked on the maintainer-only WINGET_TOKEN secret (wootc#221). Next gate: v0.2.0-alpha — proven on real hardware (wootc#210) |
| Package sourcing policy (system-repos/tideforge-first + allowlist) | strategist | #1319, #1323 | 🟡 In progress — PACKAGE-SOURCING.md merged; DNF/COPR audit done 08-13, ahead of the 08-22 checkpoint (2 violations, 6-COPR niri gap, negativo17/rpmfusion allowlist candidates confirmed — #1453); apt/AUR/OBS bases still unaudited, maintainer allowlist sign-off and Phase 2 migration still pending |
Q4 2026 (October–December) — "Mature"
Theme: Enterprise readiness, community governance, ecosystem integration.
Planning started (2026-08-08): Q4 milestone #3 created; tracking issue #1159 open. All 9 Q4 goals now tracked (#1167 branch protection, #1168 governance, #1186 release automation, #1187 package signing/SBOM). Stale dependency refs (#306/#307/#212/#301 closed) still flagged in #1159. Extended 08-08 evening: adoption metrics (#1174) and variant lifecycle policy (#1175) added as strategist-owned goals. Update 08-13: All stale Q4 dependency refs now resolved — Supply chain hardening re-tracked under #1193 (was #212/#301, both closed), Tacklebox decoupling under #1192 (was #306, closed), Upstream snapshot automation under #1194 (was #307, closed). Both #1192 and #1194 already existed and already carried the Q4 milestone — this was a ROADMAP linking gap, not a missing-tracker gap. #1159's recommendation #3 (refresh stale dependency refs) is complete.
Progress note (2026-08-11): keyless Cosign signing + signed SBOM attestations landed 08-10 for published ISOs and container images (#1303, #1305) — first Q4 supply-chain deliverable. Remaining scope for #1187: signed SBOMs for every release artifact across all flavors (blocked on Releases cadence parity #1254) and tunaos-packages artifacts. Package sourcing policy (#1319/#1323) drafted as PACKAGE-SOURCING.md — source inventory feeds the #1187 attestation graph in Q4.
| Goal | Owner | Dependencies |
|---|---|---|
| Tacklebox decoupling | architect | #1192 (tracker; #306 closed) — audited 2026-08-14: of #306's 4 recommendations, 3 already landed (TACKLEBOX_SHA/TACKLEBOX_IMAGE version pinning via scripts/lib/common.sh; tacklebox runs as a ghcr.io/tuna-os/tacklebox container image, not a host-installed binary; the flagged ghcr.io/hanthor/bluefin:lts iso.toml reference no longer exists in this repo's own build path). Real remaining gap: the version pin has no single source of truth — image-versions.yaml (4fa6041, renovate-tracked) diverges from hardcoded overrides in publish-iso-groups.yml (a105d6d3) and luks-e2e.yml (fd95174, the documented floor SHA, not the current pin). Consolidating those onto one pin needs real boot evidence before merging (see Build Health note above on why publish-iso-groups.yml's divergence was left as a deliberate, not accidental, gap) — flagged as the concrete next step, not actioned blind |
| Upstream snapshot automation | ci-maintainer | #1194 (tracker; #307 closed) — live (weekly refresh PRs merging; snapshot-upstreams.yml runs Mondays 09:00 UTC) |
| Branch protection + required CI | strategist | CI health, #1167 — audited 2026-08-13: BRANCH-PROTECTION.md, active main ruleset has no required-status-checks rule; proposed list is lint, lint-summary, unit-tests |
| Supply chain hardening | sec-check | #1193 (tracker; #212/#301 closed) — coordinates with #1187 (package signing/SBOM is the largest hardening item, tracked there in detail) |
| Release automation | ci-maintainer | CI health, VERSIONING.md, #1186 |
| Community governance model | strategist | #1168 — docs/GOVERNANCE.md |
| Flavor equality mandate | strategist | #1315, #1316 (cadence parity #1254) |
| tromso first stable release | ci-maintainer | tromso#83 |
| Issue triage policy (queue actionability) | strategist | #1195 — ✅ Done (TRIAGE-POLICY.md adopted: milestone-only roadmap signal, verify-before-trust closure, tiered SLA) |
| Package signing / SBOM | sec-check | Supply chain, #1187 |
| Package sourcing policy (system-repos/tideforge-first + allowlist) | strategist | #1319, #1323 (audit → #1187) |
| Bonito (Fedora 44) GA carryover | ci-maintainer | #272 — nvidia regression closed (#1499), T2 profile merged (#1256); re-scored STAFF at T-9 refresh |
| Redfin (RHEL 10) alpha GA | ci-maintainer | #609 |
| Fedora 45 base readiness | ci-maintainer | #1171 — FEDORA-BASE-POLICY.md adopted 08-13: N+rawhide model, Fedora 45 planning sequenced after Bonito (#272) GA, not parallel |
| Adoption metrics / usage telemetry | strategist | #1174 |
| Adoption evidence (ADOPTERS.md production entries) | strategist | #1348 — zero public production adopters vs "Mature" claim; first entries at 2026-11-01 snapshot |
| Variant lifecycle policy (admission + Beta→Stable exit criteria) | strategist | #1196, #1175, #1270, #1254, #1294 — VARIANT-LIFECYCLE.md |
| Windows conversion channel (wootc) — beta gate + winget | strategist / wootc maintainer | #1988, wootc#211, wootc#221 — Q3 carryover. Q4 scope: full-tier matrix green (wootc#222), BitLocker path (wootc#223), winget package live, and wootc's adoption numbers folded into the #1174 metrics snapshot and #1743 Q4 sequencing. This is the org's only adoption channel that reaches users not already running Linux |
Milestone fidelity (#1307, 2026-08-12): 7 of the 9 goal trackers above were filed without being attached to the Q4 milestone (#3), so the milestone undercounted real progress (e.g. keyless signing landing 08-10 for #1187 while the milestone still showed 0 closed). All 7 (#1174/#1175/#1186/#1187/ #1192/#1193/#1194) are now attached. Going forward: every goal tracker must set its milestone at creation, not as a follow-up sweep — a tracker without a milestone is invisible to milestone-based reporting by construction.
Technical Debt Backlog
Items requiring architectural investment before they become blockers:
| Item | Issue | Priority | Effort |
|---|---|---|---|
| Containerfile deduplication | #305 | P1 | L |
| Hardcoded container registries | #304 | P1 | M |
| Generated workflow cleanup | #311 | P2 | S |
| Scanner debt (#299–#302) | various | P3 | S |
| scripts/ vs build_scripts/ consolidation | #310 | P3 | M |
How to Contribute
See CONTRIBUTING.md for development setup, build instructions, and PR process.
Priorities listed above — pick an issue labeled good first issue or comment on a goal you'd like to own. Contributors are welcome on docs, packaging, and architecture-track issues (#1308 seeds a starter backlog).
Roadmap Governance
This roadmap is maintained by the strategist agent. Updates published after major milestones or quarterly. Propose changes via PR to this file with issue reference.
Roadmap coverage is an organization-level planning signal, not a requirement that every repository use the same milestone structure. The Community inventory above is the source of truth for active-repository coverage; update it when a repository is archived, adopts a roadmap, or moves its roadmap onto the default branch.
See SECURITY.md for vulnerability reporting.
Generated by strategist agent at ACMM L6. Updated 2026-08-11 for flavor equality mandate (#1315) + first external contributor (#1317). Signed-off-by: hanthor-hive-agent[bot] <290068839+hanthor-hive-agent[bot]@users.noreply.github.com>