The Autonomous Systems Platform — organized by Platform Pillars and Official Solution Blueprints.
| Current release | v0.6.3 (evaluation/beta, 2026-07-04) — known limitations |
| Current phase | Next horizon — hardening + adoption toward v1.0 (docs/scope-control.md) |
| Next milestone | v1.0 production positioning — after organizational gates / #51 |
| Last audited | 2026-07-04 — v0.6.3 shipped; Go with documented limitations |
| Feature truth table | docs/feature-status.md |
| Release readiness | docs/release-readiness.md · docs/release-blockers.md |
| Platform overview | docs/platform-overview.md |
Tiers: Stable (tested, non-mock default) · Beta · Experimental · Preview · Stubbed · Mock-backed · Planned · Deprecated — see docs/feature-status.md
Timeline (maturity, not dates): Now · Next · Later · Long Term · Research
Ownership: Core · Package · Provider · Solution Blueprint · Control Center · Optional · Experimental · Future
Spanda is a product ecosystem, not a single repository. Platform components are named products that compose into industry solutions:
Spanda Language
│
Spanda Runtime
│
Spanda Verify ───── Spanda Safety
│
Spanda Readiness ── Spanda Assurance ── Spanda Diagnosis
│
Spanda Recovery ─── Spanda Trust
│
Spanda Control Center
│
Spanda Registry ─── Spanda SDKs
│
Unified Entity Model (all platform objects)
Lifecycle: Build · Verify · Simulate · Deploy · Operate · Observe · Recover · Govern · Audit · Continuously Improve
Cognitive & Resilience Architecture: Functional responsibility domains (reflex & safety, homeostasis, platform immunity, sensory fusion, attention, operational memory, adaptive learning, damage risk) — docs/cognitive-resilience-architecture.md · responsibility-matrix.md. Prior naming: bio-inspired-architecture.md.
Lean-core identity: contracts in workspace crates; vendor SDKs and heavy UI in optional packages.
| Section | Jump |
|---|---|
| Platform Pillars | 8 pillars — language through ecosystem |
| Official Solution Blueprints | 15 industry reference architectures |
| Feature ownership model | Core vs package vs blueprint |
| Dependency map | Pillars → packages → providers → blueprints |
| Roadmap timeline | Now / Next / Later / Long Term / Research |
| Release milestones | v0.4 → v1.0 |
| Repository organization | Docs and code layout recommendations |
| Documentation index | Topic guides by pillar |
| Migration notes | From docs/roadmap.md |
Purpose: Represent every platform object — robots, fleets, humans, devices, providers, packages, missions, facilities — as a typed Entity with shared health, readiness, trust, security, lifecycle, relationships, and graph semantics.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Entity taxonomy | Extensible EntityKind (human, robot, fleet, wearable, provider, package, …) |
Stable | Now | Core |
| Entity record | Common properties (identity, capabilities, location, metadata) | Stable | Now | Core |
| Entity registry | build_entity_registry, ResolvedSystemConfig::entity_registry |
Stable | Now | Core |
| Entity graph | Traversal, impact analysis, dependency chain | Stable | Now | Core |
| Entity relationships | 18 relationship kinds (contains, depends_on, assigned_to, …) |
Stable | Now | Core |
| Entity query language | GET filters + POST /v1/entities/query |
Stable | Now | Core |
| Entity REST API | /v1/entities/* (health, readiness, trust, verify, relationships, graph) |
Stable | Now | Core |
| Control Center Entities tab | Browse, search, graph neighborhood, mutations | Stable | Now | Control Center |
| Runtime mission entities | Project active missions into registry | Stable | Now | Core |
| Graph unification | Align spanda-graph + digital thread with entity IDs; GET /v1/entities/traceability |
Stable | Now | Core |
| Industry extensions | Facility/building/zone TOML, ADAS/medical compliance metadata, package entity kinds | Stable | Now | Core |
| Entity mutation API | Register, tag, relate, sync overlay to TOML with audit | Stable | Now | Core |
| Entity stabilization | CI entity_model_smoke.sh (REST + TS + Python + Rust SDK), SDK 0.4.2 published |
Stable | Now | Core + Control Center |
Design rule: Before introducing a new top-level platform abstraction, determine whether it should be a new Entity kind instead.
Cross-references: Device Registry (Pillar 4) · Human entity model (Pillar 4) · Provider registry (Pillar 2) · Digital thread (Pillar 6) · Trust (Pillar 5)
Topic guides: docs/entity-model.md · docs/entity-registry.md · docs/entity-graph.md · docs/entity-relationships.md · docs/entity-query-language.md
Purpose: Safety-first .sd source — syntax, types, robot primitives, units, triggers, tasks,
concurrency, and developer ergonomics.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Syntax | Lexer, parser, AST | Stable | Now | Core |
| Types | Physical units, structs, enums, typed handler I/O | Stable | Now | Core |
| Generics | Generic modules and functions | Stable / polish Next | Now | Core |
| Traits | module/import, traits |
Stable | Now | Core |
| Contracts | Mission contracts (spanda contract verify) |
Stable | Now | Core |
| Concurrency | spawn, join, select, cooperative tasks |
Stable | Now | Core |
| Triggers | on, every, when, while |
Stable | Now | Core |
| Tasks | Task scheduler, real-time contracts (deadline, jitter, priority) |
Stable | Now | Core |
| Scheduler | Trigger-driven scheduler + telemetry flags | Stable | Now | Core |
| Regex | Regex literals and validation rules | Stable | Now | Core |
| Debugger | DAP debugger (spanda-dap) |
Experimental | Next | Core |
| Testing | expect_compile_error, spanda test --json |
Stable | Now | Core |
| Documentation | mdBook GitHub Pages, API reference | Stable | Now | Core |
| LSP | Hover, SafeAction quick-fix | Stable | Now | Core |
| Formatter | spanda fmt |
Stable | Now | Core |
| Linter | spanda lint |
Stable | Now | Core |
| Robot primitives | robot, sensor, actuator, task, agent |
Stable | Now | Core |
| Safety types | ActionProposal → SafeAction compile-time gate |
Stable | Now | Core |
| Self-hosting subset | Compiler subset in Spanda | Future | Long Term | Core |
| VS Code | Snippets, VSIX CI; Marketplace listing Partial (VSCE_PAT) |
Stable / Partial | Now | Optional |
Foundation: Phases 1–35 complete — docs/lean-core-roadmap.md
Topic guides: docs/spanda-language.md · docs/language-reference/ · docs/triggers.md · docs/concurrency.md · docs/regex.md · docs/testing.md · docs/debugging.md
Purpose: Parse, typecheck, execute, and optionally codegen programs; load packages and dispatch providers.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Lexer | Tokenization | Stable | Now | Core |
| Parser | AST construction | Stable | Now | Core |
| AST | spanda-ast |
Stable | Now | Core |
| Type Checker | Units, safety, hardware | Stable | Now | Core |
| LLVM | Native codegen (spanda deploy --target native) |
Experimental | Next | Core |
| WASM | spanda-wasm, web playground |
Experimental | Next | Core |
| Interpreter | Tree-walking runtime (primary path) | Stable | Now | Core |
| Runtime | HAL, reliability, watchdogs, recover from |
Stable | Now | Core |
| Package Loader | spanda install / update / publish |
Stable | Now | Core |
| Provider Registry | Trait dispatch, --trace-providers |
Stable | Now | Core |
| World model / fusion | Belief hook | Experimental | Next | Core |
spanda-certify |
Runtime certification gate | Stable | Now | Core |
| Node bindings | spanda-node N-API |
Stable | Now | Core |
Topic guides: docs/platform-architecture.md · docs/architecture.md · docs/compiler-backend-roadmap.md · docs/native-deploy.md · docs/how-packages-work.md · docs/how-providers-work.md · docs/how-runtime-resolution-works.md
Purpose: Prove hardware fit, mission safety, operational readiness, assurance, diagnosis, recovery, trust, and explainability before and during deployment.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Hardware Verification | spanda verify, deploy profiles, --simulate, --json |
Stable | Now | Core |
| Capability Verification | Traceability matrices, requires_hardware |
Stable | Now | Core |
| Mission Verification | Mission achievability, approval verification | Stable | Now | Core |
| Behavioral verify | verify { } assertions |
Stable | Now | Core |
| Readiness | Operational go/no-go scoring (spanda readiness) |
Stable | Now | Core |
| Assurance | Knowledge models, anomaly, prognostics, mitigation | Stable / learned Experimental | Now | Core |
| Diagnosis | Root-cause analysis (spanda diagnose) |
Stable | Now | Core |
| Recovery | recovery_policy, RecoveryPlanner, fleet mesh relay; Recovery Orchestrator (spanda-recovery) |
Stable | Now | Core |
| Mission Contracts | Static contract verification | Stable | Now | Core |
| Trust | Composite program trust, secure-boot attestation | Experimental → Planned hardening | Next | Core |
| Explainability | spanda explain, decision traces |
Stable | Now | Core |
| Traceability | Hardware-to-code mapping, audit trail | Stable | Now | Core |
| Replay | Mission trace record, deterministic playback | Stable | Now | Core |
| Simulation | spanda sim, physics-lite, fault injection |
Stable | Now | Core |
| Digital Twin | twin, mirror fields, replay buffer |
Stable | Now | Core |
| Coverage Reports | Safety coverage, recovery coverage CLIs | Stable | Now | Core |
| Risk Analysis | Mission risk, what-if analysis | Experimental | Next | Core |
| Safety engine | safety { } zones, kill switch, remote_signed |
Stable | Now | Core |
| Certification | spanda certify prove, certification metadata |
Experimental | Next | Core |
| Minimum-hardware safety | Compile-time analysis | Stable | Now | Core |
| Production verify (5+ profiles) | Field hardware profiles | Future | Long Term | Core |
| Hardware adapter codegen | Trait codegen | Future | Long Term | Core |
| Twin cloud SaaS | OSS: spanda-twin-cloud, /v1/twins/*, spanda twin cloud (Stable). Hosted product: deploy/twin-cloud-hosted/ |
Stable (OSS) | Next | Optional |
| Full physics | Gazebo/Isaac class | Out of scope — package bridges | — | Package |
Cross-cutting verification and operations capabilities — full analysis: docs/platform-maturity-roadmap.md
| # | Area | Phase | Priority | Tier | Timeline | Ownership |
|---|---|---|---|---|---|---|
| 1 | AI-assisted development (generate, explain, suggest) |
Build, Operate | Stable (mock-first live paths Experimental) | Next | Core | |
| 2 | Dependency graph visualization | Build, Operate | Stable | Now | Core | |
| 3 | Threat modeling | Verify, Deploy | Stable | Next | Core | |
| 4 | Configuration drift detection | Deploy, Operate | Stable | Next | Core | |
| 5 | Policy engine | Verify, Operate | Stable | Next | Core | |
| 6 | Compliance profiles | Verify, Deploy | Stable | Later | Core | |
| 7 | Explainability reports | Operate, Recover | Stable | Now | Core | |
| 8 | Chaos engineering | Simulate, Recover | Stable | Later | Core | |
| 9 | Mission resource estimation | Simulate, Deploy | Stable | Later | Core | |
| 10 | Readiness trend analysis | Operate | Stable | Later | Core | |
| 11 | Package trust framework | Verify, Build | Stable | Now | Core | |
| 12 | Architecture decision records | Build | Stable | Later | Core | |
| 13 | Mission differencing | Build, Verify | Stable | Next | Core | |
| 14 | Deployment gates | Deploy | Stable | Now | Core | |
| 15 | Autonomous systems scorecard | Operate | Stable | Next | Core | |
| 16 | Hack / tamper detection | Verify, Operate, Recover | Stable (verify-time; runtime hardening Experimental) | Now | Core |
Full analysis: docs/differentiation-roadmap.md
| Capability | Tier | Timeline | Ownership |
|---|---|---|---|
| Safety-Typed AI | Stable | Now | Core |
| Readiness Engine | Stable | Now | Core |
| Continuity & Takeover | Stable | Now | Core |
| Mission Contracts | Stable | Now | Core |
| Trust Framework | Stable | Next | Core |
| Explainability & Audit Trail | Stable | Now | Core |
| What-If Analysis | Stable | Next | Core |
| Mission Risk Analysis | Stable | Next | Core |
| Readiness Forecasting | Stable | Next | Core |
| Trust Graph | Stable | Next | Core |
| Scorecards | Stable | Next | Core |
| Digital Mission Twin | Stable | Later | Core |
| Certification Packs | Stable | Later | Core |
| Mission Time Travel | Stable | Later | Core |
| Human/Robot Teaming | Stable | Later | Solution Blueprint |
| Autonomous Governance | Stable | Later | Core |
| Operational Governance | Stable | Now | Core |
NOW deliverables (v0.5+): spanda-contract, spanda-explain, spanda-decision,
safety/recovery coverage — Stable. Exit: spanda demo differentiation +
scripts/differentiation_smoke.sh.
NEXT deliverables (v0.6): all five NEXT pillars Stable — what-if, risk, readiness forecast,
trust graph, scorecards; Control Center REST/gRPC analytics in differentiation_smoke.sh.
LATER deliverables (v0.7): all five LATER pillars Stable — mission time travel, digital
mission twin, certification packs, human/robot teaming, autonomous governance; exit via
scripts/later_differentiation_stable_promotion_gate.sh.
Topic guides: docs/mission-assurance.md · docs/self-healing.md · docs/mission-continuity.md · docs/readiness.md · docs/replay.md · docs/mission-contracts.md · docs/explainability.md · docs/tamper-detection.md
Purpose: Map logical programs to physical devices, provision fleets, coordinate swarms, and manage continuity.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Device Tree | Logical ↔ physical mapping | Stable | Now | Core |
| Device Registry | Device identity in TOML | Stable | Now | Core |
| Unified Entity Model | Projects registry + fleet + humans into entity graph — entity-model.md | Stable | Now | Core |
| Device Pool | Central inventory, lifecycle, assign/trust/quarantine | Stable | Now | Core |
| Provisioning | Discover → ready workflow (POST /v1/provision) |
Stable | Now | Core |
| Discovery | Subnet, mDNS/BLE/USB/CAN/MQTT/ROS2 + pool ingest | Stable | Now | Package + Core |
| Configuration | Cascading TOML, ConfigResolver, snapshots |
Stable | Now | Core |
| Cascading TOML | base → environment → deployment → robot | Stable | Now | Core |
| Health | health_check, health_policy, fleet require |
Stable | Now | Core |
| Continuity | MissionContinuityManager, checkpoints |
Stable | Now | Core |
| Delegation | Succession planner, delegate CLI | Stable | Now | Core |
| Takeover | Resume, restart, partial, shadow, hot, cold, human modes | Stable | Now | Core |
| Swarm | Quorum, mesh health, spanda swarm coordinate |
Experimental | Next | Core |
| Fleet | In-process + HTTP agents + mesh telemetry | Stable / distributed Experimental | Now | Core |
| OTA | Deploy plan, rollout, rollback, canary | Stable local / remote Experimental | Now | Core |
| Human entity model | Roles, identity, certifications (HRI) | Stable | Next | Core |
| Operator capabilities | Capability verification for humans | Stable | Next | Core |
| ROS2 golden path | rclpy bridge, spanda ros2 check |
Stable / Experimental | Now | Package |
Mission continuity detail:
| Item | Tier |
|---|---|
| Continuity framework, takeover modes, state transfer | Stable |
CLI (continuity, takeover, delegate, succession) |
Stable |
| Durable checkpoint store | Stable |
| Runtime takeover dispatch (interpreter + fleet agents) | Stable |
| Auto-trigger on health faults | Stable |
Package spanda-mission-continuity |
Stable |
spanda demo continuity |
Stable |
Distributed decision architecture detail:
| Item | Tier |
|---|---|
| Four-layer model (reflex / local / fleet / control center) | Stable |
decision_tree, offline_policy, entity local_decision_authority |
Stable |
| Escalation, consensus, conflict resolution | Stable |
| Runtime policy gates + live v3 trace emission | Stable |
CLI (spanda decision list|inspect|simulate|trace|explain|policy|sign-policy|cache|security-audit) |
Stable |
REST /v1/decisions*, /v1/decisions/traces, /v1/decision-policy-cache, SDK methods, Control Center Decisions tab |
Stable |
spanda demo distributed-decisions |
Stable |
Examples examples/showcase/distributed_decisions/ |
Stable |
Cognitive & Resilience Architecture (extends distributed decisions — cognitive-resilience-architecture.md):
| Item | Tier |
|---|---|
spanda-autonomy crate, entity autonomy profile |
Beta |
Entity.attention on autonomy profile |
Beta |
| Reflex architecture (CLI, API, decision layer 0 integration, file-backed traces) | Beta |
| Peripheral autonomy hierarchy | Beta |
| Platform immunity (trust/tamper/quarantine integration) | Beta |
| Sensory fusion + confidence model | Experimental |
| Attention system | Beta (health-mapped scoring) |
| Homeostasis | Beta (health + scheduler telemetry) |
| Operational memory categories | Preview |
| Habituation / sensitization | Experimental |
| Damage-risk model | Beta |
| Adaptive recovery confidence | Experimental |
| Maintenance / sleep mode | Preview |
CLI (reflex, fusion, confidence, homeostasis, immunity, alerts, recovery confidence) |
Beta |
Domain SDK clients (ReflexClient, HomeostasisClient, AttentionClient, FusionClient, ImmunityClient, MemoryClient, RiskClient) |
Beta |
REST /v1/autonomy/* (+ /fusion, /memory), gRPC autonomy RPCs, /v1/entities/{id}/autonomy, SDK methods |
Beta |
| Control Center Cognitive & Resilience tab | Experimental (functional domain panels) |
Self-healing detail:
| Item | Tier |
|---|---|
recovery_policy + RecoveryPlanner |
Stable |
CLI (heal, recover, recovery-report, sim --inject-failure) |
Stable |
| Runtime dispatch + auto-trigger | Stable |
| Operator approval + fleet mesh recovery | Stable |
spanda demo self-healing |
Stable |
Topic guides: docs/device-tree.md · docs/device-pool.md · docs/entity-model.md · docs/configuration.md · docs/health-checks.md · docs/fleet-distributed.md · docs/swarm-health.md · docs/human-interaction.md · docs/distributed-decisions.md
Purpose: Identity, encryption, policy, compliance, and tamper resistance across deploy and operate.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Encryption | AES-GCM wire frames, TLS sessions | Stable | Now | Core |
| Identity | Device and operator identity contracts | Stable | Now | Core |
| Certificates | Signed messages, secure-boot attestation | Stable / Experimental | Now | Core |
| RBAC | Roles + permissions, SPANDA_API_KEY |
Stable | Now | Core |
| Secrets | ManagedSecretVault, rotation, audit |
Stable | Now | Core |
| Tamper Detection | Verify-time and runtime tamper checks | Experimental | Now | Core |
| Trust | Composite trust scoring, package trust API | Stable | Now | Core |
| Threat Modeling | Pre-deploy threat modeling | Experimental | Next | Core |
| Policy Engine | Declarative operational policies | Experimental | Next | Core |
| Compliance | Evidence packs, signed profile catalog | Stable | Later | Core |
| Governance | Audit, provenance, digital thread | Experimental | Later | Core |
| Spoofing detection | GPS/sensor spoofing | Experimental | Next | Package |
| Kill switch | remote_signed, on kill_switch |
Stable | Now | Core |
Topic guides: docs/security-architecture.md · docs/secrets.md · docs/trust-framework.md · docs/threat-modeling.md · docs/compliance-profiles.md · docs/policy-engine.md
Purpose: Observe, alert, report, and operate fleets in production — Spanda Control Center and enterprise operations.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Control Center | spanda control-center serve, React UI, Tauri desktop, Administration (keys/users/alerts), Mission View, Simulation, Replay tabs |
Stable | Now | Control Center |
| Telemetry | Time-series store, OTLP, WebSocket, fleet-push | Stable / Experimental | Now | Core |
| Metrics | Runtime metrics JSON, scheduler traces | Stable | Now | Core |
| Logging | Trace log, correlation IDs | Experimental | Now | Core |
| Alerting | Multi-channel (spanda-ops, webhook/email) |
Stable | Now | Package |
| Dashboards | Operations view, Grafana templates | Stable | Now | Control Center |
| Reports | Markdown/PDF/JSON exports, scheduled webhooks | Stable | Later | Core |
| Readiness Trends | Trend analysis and forecasting | Experimental | Later | Core |
| Observability | OTel traces, spanda-otel-collector |
Stable | Next | Package |
| Incident Reports | SRE incident workflow API | Stable | Next | Core |
| SRE | SLO, MTTR, /v1/sre/summary |
Stable | Next | Core |
| Configuration Drift | 7-dimension operational drift | Stable | Next | Core |
| OTA & Rollback | Canary, blue/green dry-run | Stable | Next | Core |
| Operator Workflows | Approve, takeover, quarantine, mission pause/resume/cancel | Stable | Next | Control Center |
| Digital Thread | Requirement → retirement lifecycle | Stable | Later | Core |
| Operations dashboard | packages/web Operations view |
Stable | Now | Control Center |
| Operational Governance | Autonomy, deployment profiles, certification lifecycle, risk, accountability, standards profiles; live decision enforcement; CLI/API/SDK/Control Center — governance.md · stable-hardening-operational-governance.md | Stable | Now | Core |
Full enterprise analysis: docs/enterprise-operations-roadmap.md · Stable promotion: docs/stable-hardening-enterprise-ops.md
Remaining for Stable (operational gates only):
| Gate | Status |
|---|---|
| Code + docs checklist | Shipped |
| 30-day field soak | Pending — docs/field-soak-gate.md |
| Third-party security audit | Pending — docs/security-audit-third-party.md |
| Production releases | Pending — PyPI, npm, desktop signing |
| Tier promotion | Pending — update feature-status.md after gates |
Phased delivery (E1–E4): all shipped (experimental). Exit:
scripts/enterprise_ops_smoke.sh.
Administrator console — planned (not yet shipped):
| Item | Notes |
|---|---|
| External IdP / OIDC sync | Stable — discovery, directory import, authorization-code OAuth (/v1/admin/oidc/authorize-url, /oauth/callback) |
| Slack OAuth setup wizard | Stable — webhook + Slack app OAuth v2 (/v1/admin/slack/oauth-url, /oauth/callback) |
| gRPC server reflection | Stable — tonic reflection on Control Center gRPC port |
Control Center enhancement backlog (depth + integration):
Breadth is shipped (30+ RBAC-gated tabs, REST/gRPC parity). Next work prioritizes wiring playground-only panels, visual ops dashboards, enterprise admin gaps, and richer UX on existing tabs. Full spec: docs/enterprise-operations-roadmap.md §6.1.
| Priority | Item | Tier | Timeline | Notes |
|---|---|---|---|---|
| P1 | Telemetry tab | Stable | Now | Control Center nav tab; WebSocket streams, live signal browser |
| P1 | Readiness trends & forecasting UI | Stable | Now | Trends tab — charts from /v1/analytics/readiness-forecast |
| P1 | Mission continuity console | Stable | Now | Continuity tab — takeover/delegate flows |
| P1 | Fleet map / geospatial view | Stable | Now | Fleet map tab — 2D pins and zones from /v1/fleet/map |
| P1 | Reports tab | Stable | Now | Schedules CRUD, preview, webhook delivery status |
| P1 | Grafana / observability bridge | Stable | Now | SRE tab deep links + embedded Grafana when SPANDA_GRAFANA_URL is set |
| P2 | External IdP / OIDC sync | Stable | Now | Discovery, directory import, OAuth code flow |
| P2 | Slack OAuth setup wizard | Stable | Now | Webhook + Slack app OAuth v2 wizard |
| P2 | gRPC server reflection | Stable | Now | grpcurl/grpcui without bundling proto |
| P2 | Humans — AR/VR/collaboration UX | Stable | Now | Collaboration graph, AR annotate, VR replay links |
| P2 | Smart Spaces floor-plan visualization | Stable | Now | SVG floor map from facilities API |
| P2 | Entity graph explorer | Stable | Now | Default graph view + neighborhood explorer |
| P2 | Analytics visual depth | Stable | Now | Trust graph bars; certification pack download |
| P2 | Config change history | Stable | Now | /v1/config/history + Config tab |
| P3 | Plugin panel loader | Stable | Now | GET /v1/plugins/control-center/{plugin}/bundle + dynamic host |
| P3 | Plugin marketplace browser | Stable | Now | Marketplace tab |
| P3 | Deploy gate checklist modal | Stable | Now | Mission + Config modals via /v1/deploy/gate |
| P3 | Chaos engineering panel | Stable | Now | Chaos tab — /v1/chaos/* |
| P3 | OTA rollout progress UI | Stable | Now | OTA tab progress bars |
| P3 | Bulk device actions | Stable | Now | Devices tab bulk quarantine/trust |
| P3 | Decision policy editor | Stable | Now | Decisions tab policy editor |
| P3 | Desktop — bundled local API | Stable | Now | spawn_control_center_api Tauri command |
| P3 | Desktop — native notifications | Stable | Now | OS notifications for SRE fast-burn via tauri-plugin-notification |
| P3 | Desktop — system tray | Stable | Now | Tray icon with polled fleet health tooltip |
| P3 | Desktop — offline cache | Stable | Now | Last-known dashboard state in web shell |
| P3 | Multi-tenant tenant switcher | Stable | Now | Saved connection profiles (API host + tenant) in auth shell |
| P3 | Twin Cloud usage dashboard | Stable | Now | Twins tab usage meters |
| P3 | WASM playground in Control Center | Stable | Now | Playground tab |
| P3 | Discovery transport wizards | Stable | Now | Guided OPC-UA, Modbus, MQTT, and CAN setup in Discovery tab |
Topic guides: docs/control-center.md · docs/telemetry-store.md · docs/readiness-trends.md · docs/drift-detection.md
Purpose: CLI, APIs, SDKs, editor integration, CI/CD, and onboarding.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| CLI | check, verify, run, sim, fleet, fmt, lint, … |
Stable | Now | Core |
| REST API | spanda-api REST v1, OpenAPI |
Stable | Now | Core |
| gRPC | tonic gRPC (139 RPCs, proto 1.0.9), program-level + admin SDK parity | Stable | Now | Core |
| SDKs | Rust (spanda-sdk), Python (sdk/python), TypeScript (@davalgi-spanda/sdk), WebSocket telemetry |
Stable — published to crates.io, PyPI, npm (0.5.4 — admin/mission/trace clients) | Now | Core |
| GitHub Pages | mdBook docs site | Stable | Now | Core |
| Examples | 9 bundled demos, showcase library | Stable | Now | Core |
| Templates | spanda init, project scaffolds |
Stable | Now | Core |
| Documentation | Guides, man pages, Spanda 101, For Dummies | Stable | Now | Core |
| VS Code | Extension, LSP, snippets | Stable / Marketplace Partial | Now | Optional |
| CI/CD | Golden paths, ci-verify.md, smoke scripts |
Stable | Now | Core |
| WASM playground | Killer demo preset, Check/Run sim | Experimental | Next | Optional |
| AI-assisted dev | generate, suggest |
Experimental | Next | Core |
Bundled demos: rover, safety, verify, fleet, health, readiness, assurance,
self-healing, continuity, differentiation, adas
Topic guides: docs/getting-started.md · docs/ci-verify.md · docs/adoption-path.md · docs/product-strategy.md
Purpose: Extensibility without bloating core — registry, official packages, provider traits, marketplace growth.
| Area | Items | Tier | Timeline | Ownership |
|---|---|---|---|---|
| Official Packages | 38 registry packages (ROS2, MQTT, GPS, vision, …) | Stable scaffolds / live Experimental | Now | Package |
| Community Packages | Publish mirror, community adapters | Future | Later | Package |
| Provider Packages | Trait implementations per protocol | Stable / Experimental | Now | Provider |
| Protocol Packages | CAN, V2X, OPC-UA, Matter, BLE, … | Experimental | Now | Provider |
| Registry | Hosted index, spanda publish mirror |
Stable | Now | Core |
| Plugin system | spanda.plugin.toml, WASM sandbox, Control Center panels, namespaced CLI |
Experimental | Now | Core |
| Marketplace | Curated remote registry growth | Next | Next | Optional |
| Package Trust | Scoring, spanda trust |
Stable | Now | Core |
| Live AI providers | OpenAI, Anthropic, ONNX | Experimental | Now | Provider |
| Live IoT / MQTT | Bridge packages | Experimental | Now | Provider |
| Blockchain / ledger | Community packages only | Future | Out of scope | Package |
| Weighted fusion | spanda-fusion, assurance.fusion |
Experimental | Now | Package |
| Learned anomaly | spanda-anomaly, ONNX backend |
Experimental | Next | Package |
| Sim bridges | Gazebo, Webots scaffolds | Experimental | Later | Package |
Topic guides: docs/packages.md · docs/registry.md · docs/official-packages.md · docs/provider-interfaces.md · docs/live-ai-provider.md
Not platform features. Industry reference architectures that compose platform pillars, packages, and providers. No duplicate implementations — each blueprint links to pillars it uses.
| Blueprint | Status | Timeline | Primary pillars |
|---|---|---|---|
| Warehouse Automation | Experimental | Now | Device & Fleet, Verification, Operations |
| Search & Rescue | Experimental | Next | Verification, Operations, Device & Fleet |
| Connected Healthcare | Experimental (wearable-health scaffold) | Next | Verification, Security, Device & Fleet |
| ADAS & Autonomous Driving | Stable | Now | Verification, Device & Fleet, Security |
| Smart Factory | Experimental | Now | Verification, Device & Fleet, Operations |
| Agriculture | Experimental (scaffold) | Later | Device & Fleet, Verification, Packages |
| Critical Infrastructure | Experimental | Next | Security, Verification, Operations |
| Environmental Monitoring | Experimental (scaffold) | Later | Device & Fleet, Operations, Packages |
| Maritime | Experimental (scaffold) | Later | Device & Fleet, Verification, Security |
| Transportation | Experimental | Now | Verification, Device & Fleet, Security |
| Space | Research | Long Term | Verification, Device & Fleet, Assurance |
| Defense | Experimental | Next | Security, Verification, Operations |
| Research & Education | Stable | Now | Developer Platform, Language |
| Spatial Computing & HRI | Stable | Next | Device & Fleet, Operations, Developer |
| Smart Spaces & Ambient Intelligence | Stable | Next | Verification, Device & Fleet, Operations, Security |
Index: docs/solutions/README.md · Website: website/solutions.html
| Section | Reference |
|---|---|
| Purpose | Autonomous mobile robots, pick-and-place, fleet coordination in logistics |
| Reference Architecture | examples/end_to_end/warehouse_delivery/ · examples/end_to_end/pick_and_place_cell/ |
| Device Tree | docs/device-tree.md · warehouse TOML fixtures in spanda-config/tests/fixtures/warehouse/ |
| Packages | spanda-nav, spanda-fleet, spanda-mqtt, spanda-opencv |
| Providers | MQTT, ROS2 Nav2, vision |
| Mission Examples | examples/showcase/continuity/warehouse.sd · examples/warehouse_robot.sd |
| Health Policies | docs/health-checks.md · fleet require |
| Readiness | docs/readiness.md |
| Assurance | docs/mission-assurance.md |
| Recovery | docs/self-healing.md |
| Control Center | docs/control-center.md |
| Example Projects | examples/end_to_end/warehouse_delivery/ |
| Documentation | solutions/warehouse.md · tutorials/continuity-walkthrough.md |
| Simulation | spanda sim · digital twin |
| Replay | docs/replay.md |
Uses pillars: Device & Fleet Platform · Verification Platform · Operations Platform · Developer Platform · Packages & Ecosystem
| Section | Reference |
|---|---|
| Purpose | Human-robot teams, AR-guided rescue, operator readiness, continuity under failure |
| Reference Architecture | examples/solutions/spatial-computing/search-and-rescue-ar/ |
| Device Tree | Human, wearable, drone, ground robot nodes — docs/human-interaction.md |
| Packages | spanda-gps, spanda-bodycam, spanda-openxr, spanda-mission-continuity |
| Providers | GPS, BLE, ROS2, MQTT |
| Mission Examples | sar_mission.sd |
| Health Policies | Operator + team readiness — docs/human-readiness.md |
| Readiness | docs/readiness.md · human readiness gates |
| Assurance | Anomaly + prognostics for field degradation |
| Recovery | Fleet mesh recovery, takeover to backup agent |
| Control Center | Mission approve, remote expert — docs/remote-expert.md |
| Example Projects | examples/solutions/spatial-computing/ |
| Documentation | docs/solutions/spatial-computing.md |
| Simulation | Scenario fixtures + fault injection |
| Replay | Mission trace for post-incident analysis |
Uses pillars: Verification Platform · Operations Platform · Security Platform · Device & Fleet Platform · Developer Platform
| Section | Reference |
|---|---|
| Purpose | Wearable monitoring, privacy-controlled health signals, medical responder workflows |
| Reference Architecture | examples/solutions/spatial-computing/wearable-health/ |
| Device Tree | Wearable, patient zone, responder nodes |
| Packages | spanda-smartwatch, spanda-industrial-wearables, spanda-ble |
| Providers | BLE, MQTT, HIPAA-oriented compliance hooks |
| Mission Examples | Medical responder capability grants — docs/operator-capabilities.md |
| Health Policies | Opt-in human health monitoring |
| Readiness | Operator certification verification |
| Assurance | Medical compliance profile — crates/spanda-compliance/templates/medical.json |
| Recovery | Delegation to backup responder |
| Control Center | Human dashboards (H4) |
| Example Projects | wearable-health/ |
| Documentation | docs/wearables.md |
| Simulation | Privacy-safe synthetic vitals |
| Replay | Audit trail for clinical review |
Uses pillars: Verification Platform · Security Platform · Device & Fleet Platform · Operations Platform
Status: Experimental — wearable-health/ scaffold; CI via
scripts/spatial_computing_smoke.sh
| Section | Reference |
|---|---|
| Purpose | Lane keeping, adaptive cruise, AEB, sensor recovery, driver takeover, highway pilot |
| Reference Architecture | docs/solutions/adas.md · examples/solutions/adas/ |
| Device Tree | docs/automotive-device-tree.md — nine application variants |
| Packages | Seven automotive registry stubs (CAN, radar, V2X, UDS, …) |
| Providers | ROS 2 automotive bridge, CAN gateway |
| Mission Examples | Lane keeping, AEB, driver takeover, highway pilot |
| Health Policies | docs/adas-readiness.md |
| Readiness | Pre-drive gates, ISO 26262 alignment |
| Assurance | docs/adas-assurance.md |
| Recovery | Sensor recovery policies |
| Control Center | ADAS tab, Grafana dashboard |
| Example Projects | spanda demo adas · ./scripts/adas_smoke.sh |
| Documentation | docs/demo-plan-adas.md · docs/adas-security.md |
| Simulation | Scenario fixtures + sim-recorded golden traces |
| Replay | docs/adas-replay.md |
Uses pillars: Verification Platform · Device & Fleet Platform · Security Platform · Operations Platform · Packages & Ecosystem
Stable promotion (2026-07-02): docs/stable-hardening-adas.md
| Section | Reference |
|---|---|
| Purpose | Industrial arms, pick-and-place cells, OPC-UA/Matter integration, predictive maintenance |
| Reference Architecture | examples/end_to_end/pick_and_place_cell/ |
| Device Tree | Cell, arm, conveyor, safety zone nodes |
| Packages | spanda-opcua, spanda-matter, spanda-moveit, spanda-prognostics |
| Providers | OPC-UA, ROS2, industrial protocols |
| Mission Examples | examples/robotics/predictive_maintenance.sd |
| Health Policies | Machine health + fleet require |
| Readiness | Pre-shift go/no-go |
| Assurance | Prognostics, anomaly on vibration/temperature |
| Recovery | Mode degradation, cell pause |
| Control Center | Executive scorecard, drift detection |
| Example Projects | pick_and_place_cell/ |
| Documentation | solutions/smart-factory.md · robotics-platform.md |
| Simulation | Digital twin of cell |
| Replay | Trace for root-cause — docs/root-cause-analysis.md |
Uses pillars: Verification Platform · Device & Fleet Platform · Operations Platform · Security Platform
| Section | Reference |
|---|---|
| Purpose | Autonomous field robots, precision spraying, crop monitoring, offline connectivity |
| Reference Architecture | Compose GPS, vision, cellular failover — docs/connectivity.md |
| Device Tree | Tractor, implement, drone, base station |
| Packages | spanda-gps, spanda-cellular, spanda-lora, spanda-opencv |
| Providers | GPS, LTE, LoRa |
| Mission Examples | field_patrol.sd, spray_mission.sd, harvest_convoy.sd |
| Health Policies | Connectivity + battery require |
| Readiness | Weather and connectivity gates |
| Assurance | Crop anomaly detection |
| Recovery | Return-to-base on link loss |
| Control Center | Fleet map, readiness trends |
| Example Projects | examples/solutions/agriculture/ (field_patrol.sd scaffold) |
| Documentation | solutions/agriculture.md |
| Simulation | Terrain + weather fault injection |
| Replay | Season trace archive |
Uses pillars: Device & Fleet Platform · Verification Platform · Packages & Ecosystem · Operations Platform
Status: Experimental (scaffold) — CI scripts/solution_blueprints_smoke.sh
| Section | Reference |
|---|---|
| Purpose | Power, water, telecom — high-assurance monitoring, tamper detection, compliance evidence |
| Reference Architecture | examples/showcase/compliance/ |
| Device Tree | Site, sensor mesh, gateway |
| Packages | spanda-opcua, spanda-mqtt, spanda-tamper |
| Providers | OPC-UA, MQTT, TLS discovery |
| Mission Examples | Integrity verification — docs/integrity-verification.md |
| Health Policies | Redundant sensor quorum |
| Readiness | Pre-maintenance windows |
| Assurance | IEC 61508 profile — crates/spanda-compliance/templates/iec61508.json |
| Recovery | Failover chains in Device Pool |
| Control Center | Compliance export, digital thread |
| Example Projects | examples/showcase/compliance/ |
| Documentation | docs/compliance-profiles.md |
| Simulation | Chaos engineering — docs/chaos-engineering.md |
| Replay | Incident timeline reconstruction |
Uses pillars: Security Platform · Verification Platform · Operations Platform · Device & Fleet Platform
| Section | Reference |
|---|---|
| Purpose | Distributed sensor networks, air/water quality, long-life battery, mesh telemetry |
| Reference Architecture | IoT provider contracts — docs/iot.md |
| Device Tree | Sensor node, gateway, cloud ingest |
| Packages | spanda-lora, spanda-mqtt, spanda-cellular, spanda-otel-collector |
| Providers | LoRa, MQTT, cellular |
| Mission Examples | sensor_mesh.sd, gateway_bridge.sd |
| Health Policies | Battery + connectivity require |
| Readiness | Calibration gates — docs/calibration.md |
| Assurance | Drift on sensor baselines |
| Recovery | Mesh relay, OTA firmware |
| Control Center | Telemetry trends, alerting |
| Example Projects | examples/solutions/environmental-monitoring/ (sensor_mesh.sd scaffold) |
| Documentation | solutions/environmental-monitoring.md · telemetry-store.md |
| Simulation | Fault injection on readings |
| Replay | Historical trend replay |
Uses pillars: Device & Fleet Platform · Operations Platform · Packages & Ecosystem
Status: Experimental (scaffold) — CI scripts/solution_blueprints_smoke.sh
| Section | Reference |
|---|---|
| Purpose | Autonomous vessels, port logistics, GNSS-denied navigation, corrosion prognostics |
| Reference Architecture | examples/solutions/maritime/ — harbor patrol scaffold |
| Device Tree | Vessel, payload, shore station |
| Packages | spanda-gps, spanda-radar, spanda-cellular, spanda-prognostics |
| Providers | GNSS, radar, SATCOM |
| Mission Examples | harbor_patrol.sd, convoy_escort.sd, docking_assist.sd |
| Health Policies | Redundant navigation require |
| Readiness | Pre-departure checklist |
| Assurance | Hull/machinery prognostics |
| Recovery | Shore takeover, drift to safe harbor |
| Control Center | Fleet map, incident workflow |
| Example Projects | examples/solutions/maritime/ (harbor_patrol.sd scaffold) |
| Documentation | solutions/maritime.md |
| Simulation | Sea state + GNSS denial |
| Replay | Voyage black box |
Uses pillars: Device & Fleet Platform · Verification Platform · Security Platform · Operations Platform
Status: Experimental (scaffold) — CI scripts/solution_blueprints_smoke.sh
| Section | Reference |
|---|---|
| Purpose | Fleet logistics, V2X, multi-modal hubs — extends ADAS to commercial transport |
| Reference Architecture | ADAS blueprint + fleet orchestration |
| Device Tree | Vehicle, depot, corridor nodes |
| Packages | spanda-v2x, spanda-canbus, spanda-fleet, spanda-ota |
| Providers | V2X, CAN, fleet mesh |
| Mission Examples | Convoy coordination, depot handoff |
| Health Policies | Fleet readiness — docs/fleet-readiness.md |
| Readiness | Route + regulatory gates |
| Assurance | Fleet anomaly correlation |
| Recovery | OTA rollback, vehicle reassignment |
| Control Center | OTA canary, fleet reports |
| Example Projects | examples/solutions/adas/applications/delivery/ |
| Documentation | docs/solutions/adas.md |
| Simulation | Traffic scenario fixtures |
| Replay | Fleet trace aggregation |
Uses pillars: Verification Platform · Device & Fleet Platform · Security Platform · Operations Platform
| Section | Reference |
|---|---|
| Purpose | Orbital robotics, rover operations, radiation-aware assurance, extreme latency |
| Reference Architecture | Research — compose assurance + continuity under delay |
| Device Tree | Spacecraft, payload, ground station |
| Packages | spanda-fusion, spanda-assurance, spanda-mission-continuity |
| Providers | Delay-tolerant transport packages |
| Mission Examples | Research |
| Health Policies | Radiation/degradation models |
| Readiness | Launch/commit gates |
| Assurance | Prognostics, redundancy cases |
| Recovery | Autonomous safe mode, ground takeover |
| Control Center | Delay-aware operations UI |
| Example Projects | Research |
| Documentation | Research |
| Simulation | High-fidelity sim bridges (package) |
| Replay | Deep-space trace buffer |
Uses pillars: Verification Platform · Device & Fleet Platform · Assurance · Operations Platform
Status: Research
| Section | Reference |
|---|---|
| Purpose | Secure autonomous systems, tamper resistance, classified-adjacent compliance, swarm coordination |
| Reference Architecture | Compliance + security assurance rollup |
| Device Tree | Unit, platform, C2 node |
| Packages | spanda-security-audit, spanda-tamper, spanda-ledger |
| Providers | Encrypted transport, attestation |
| Mission Examples | Secure operator command — examples/security/secure_operator_command.sd |
| Health Policies | Tamper + attestation require |
| Readiness | Mission approval queue |
| Assurance | Defense profile — crates/spanda-compliance/templates/defense.json |
| Recovery | Mesh relay, quarantine |
| Control Center | RBAC, audit, compliance export |
| Example Projects | examples/showcase/secure_boot/ · examples/showcase/mission_tampering/ |
| Documentation | solutions/defense.md · security-assurance.md · trust-boundaries.md |
| Simulation | Chaos + spoofing injection |
| Replay | Decision audit trail |
Uses pillars: Security Platform · Verification Platform · Operations Platform · Device & Fleet Platform
| Section | Reference |
|---|---|
| Purpose | Learn Spanda — language, verify, sim, minimal hardware |
| Reference Architecture | Progressive examples ladder |
| Device Tree | Simulated robot profiles |
| Packages | Starter packages from registry |
| Providers | Mock providers (default) |
| Mission Examples | examples/basics/ · examples/showcase/killer_demo.sd |
| Health Policies | Introductory health_check |
| Readiness | Tutorial readiness scoring |
| Assurance | Intro assurance demo |
| Recovery | Self-healing tutorial |
| Control Center | WASM playground |
| Example Projects | examples/showcase/autonomous_rover/ (Stable flagship) |
| Documentation | docs/spanda-101/ · docs/spanda-for-dummies/ |
| Simulation | spanda sim killer demo |
| Replay | Replay tutorial — docs/replay.md |
Uses pillars: Developer Platform · Spanda Language · Verification Platform
| Section | Reference |
|---|---|
| Purpose | Wearables, AR/VR/XR, collaborative missions, remote expert — composes without core language extensions |
| Reference Architecture | docs/solutions/spatial-computing.md · examples/solutions/spatial-computing/ |
| Device Tree | Human, Wearable, AR, VR nodes |
| Packages | docs/hri-packages.md — OpenXR, ARKit, HoloLens stubs |
| Providers | MQTT/ROS2/WebSocket spatial bridges |
| Mission Examples | Warehouse AR pick, remote maintenance |
| Health Policies | Human readiness — docs/human-readiness.md |
| Readiness | Operator + team gates |
| Assurance | Operator capability verification |
| Recovery | Continuity + remote expert handoff |
| Control Center | Human dashboards (H4) |
| Example Projects | warehouse-ar/, remote-maintenance/, operator-approval/ |
| Documentation | docs/human-interaction-spatial-computing-roadmap.md |
| Simulation | XR overlay replay |
| Replay | VR training replay |
Uses pillars: Device & Fleet Platform · Operations Platform · Verification Platform · Developer Platform · Packages & Ecosystem
Phased delivery (H1–H6): Stable (2026-07-02). Registry vendor SDK packages remain Experimental. Promotion: docs/stable-hardening-human-interaction.md
| Section | Reference |
|---|---|
| Purpose | Safety-first verification, orchestration, readiness, assurance, and trust for intelligent environments (home → city) — not a home automation competitor |
| Reference Architecture | docs/solutions/smart-spaces.md · examples/solutions/smart-spaces/ |
| Device Tree | docs/smart-space-device-tree.md — building, zone, gateway, IoT, robot, energy, human nodes |
| Packages | docs/smart-space-packages.md — Matter, BACnet, KNX, energy, building, HA bridge |
| BMS sidecar | docs/smart-space-bms-bridge.md — Home Assistant REST, MQTT patterns, direct BACnet/KNX |
| Providers | Matter, Thread, Zigbee, Z-Wave, MQTT, BACnet, KNX, Modbus, Home Assistant interop |
| Mission Examples | Night mode, fire response, demand response, patient monitoring, building lockdown |
| Health Policies | Gateway, battery, critical sensor quorum — docs/health-checks.md |
| Readiness | docs/smart-space-readiness.md — pre-mode and emergency gates |
| Assurance | Security, emergency systems, energy, medical device evidence |
| Recovery | Gateway failover, emergency lighting, robot reassignment — docs/mission-continuity.md |
| Control Center | Smart Spaces tab — buildings, occupancy, energy, emergency |
| Example Projects | smart-home/, smart-office/, smart-building/, hospital-at-home/, energy-management/, emergency-response/ |
| Documentation | building-automation.md · ambient-intelligence.md · energy-management.md · smart-space-security.md |
| Simulation | Fire, flood, power loss, gateway failure, HVAC failure, medical emergency |
| Replay | Mode-change and emergency incident timelines |
Uses pillars: Verification Platform · Device & Fleet Platform · Operations Platform · Security Platform · Packages & Ecosystem
Integrates: Connected Healthcare · Spatial Computing & HRI · Environmental Monitoring
Status: Stable (2026-07-02) — CI via scripts/smart_spaces_smoke.sh +
smart_spaces_promotion_gate.sh
Official classification for every roadmap item:
| Class | Definition | Examples |
|---|---|---|
| Core | Workspace crate or language semantic; required for platform identity | spanda-interpreter, spanda verify, readiness engine |
| Package | Optional .sd + manifest in registry; installable |
spanda-ros2, spanda-gazebo |
| Provider | Trait implementation inside a package | MQTT bridge, ONNX inference backend |
| Solution Blueprint | Industry composition doc + example tree; not a crate | ADAS, Warehouse, SAR |
| Control Center | UI/API product surface (spanda-api, @davalgi-spanda/web) |
Dashboards, provisioning UI |
| Optional | Ecosystem add-on; not required for core workflows | VS Code Marketplace, desktop app |
| Experimental | Shipped with caveats; promotion path to Stable | Control Center, drift detection |
| Future | Designed; not shipped | Self-hosting compiler, twin SaaS |
Rule: Blueprints reference core and packages — never reimplement readiness, assurance, or recovery engines.
Detail: docs/enterprise-operations-roadmap.md §2
flowchart TB
subgraph pillars ["Platform Pillars"]
L["Pillar 1: Language"]
C["Pillar 2: Compiler & Runtime"]
V["Pillar 3: Verification"]
D["Pillar 4: Device & Fleet"]
S["Pillar 5: Security"]
O["Pillar 6: Operations"]
DEV["Pillar 7: Developer"]
P["Pillar 8: Packages"]
end
L --> C
C --> V
C --> D
V --> O
D --> O
S --> O
P --> C
P --> V
DEV --> L
DEV --> O
flowchart TB
subgraph core ["Core products"]
LANG["Spanda Language"]
RT["Spanda Runtime"]
VER["Spanda Verify"]
RDY["Spanda Readiness"]
ASR["Spanda Assurance"]
REC["Spanda Recovery"]
CC["Spanda Control Center"]
end
subgraph pkgs ["Official packages"]
ROS2["spanda-ros2"]
MQTT["spanda-mqtt"]
AUTO["spanda-canbus / v2x / radar"]
HRI["spanda-openxr / wearables"]
end
subgraph providers ["Providers"]
RCL["rclpy bridge"]
MB["MQTT live bridge"]
CAN["CAN gateway"]
end
subgraph blueprints ["Solution blueprints"]
ADAS["ADAS"]
WH["Warehouse"]
SAR["Search & Rescue"]
HC["Healthcare"]
end
LANG --> RT
RT --> VER
VER --> RDY
RDY --> ASR
ASR --> REC
RDY --> CC
ROS2 --> RCL
MQTT --> MB
AUTO --> CAN
RT --> ROS2
RT --> MQTT
RT --> AUTO
RT --> HRI
VER --> ADAS
VER --> WH
VER --> SAR
VER --> HC
ROS2 --> WH
AUTO --> ADAS
HRI --> SAR
HRI --> HC
CC --> ADAS
CC --> WH
Every operations pillar routes through the existing platform spine — no duplicate engines:
flowchart TB
subgraph spine ["Platform spine"]
RDY["Readiness"]
ASR["Assurance"]
DIAG["Diagnosis"]
REC["Recovery"]
TRST["Trust"]
HLTH["Health"]
DEV["Device Registry"]
CFG["Configuration"]
TRACE["Traceability"]
AUD["Audit"]
SEC["Security"]
PKG["Packages"]
end
subgraph enterprise ["Operations Platform"]
CC["Control Center"]
DP["Device Pool"]
DISC["Discovery"]
PROV["Provisioning"]
TEL["Telemetry"]
ALT["Alerting"]
OBS["Observability"]
end
enterprise --> spine
Engineering focus after the evaluation/beta release. Organizational gates (soak + audit) run in parallel — see docs/organizational-gates.md.
| Priority | Theme | Representative work | Tier target |
|---|---|---|---|
| P0 | Organizational gates | 30-day field soak, third-party security audit prep + sign-off (#51) | v1.0 blocker |
| P1 | Differentiation hardening | Mission contracts, explainability, decision audit trail — Control Center + REST wired (2026-07-04) | Stable |
| P1 | Control Center promotion | Playground server load, traceability matrix, assurance/diagnosis program APIs, Differentiation + Cognitive & Resilience tabs — partial ship (2026-07-04) | Beta → Stable |
| P2 | Adoption blockers | VS Code Marketplace publish (needs VSCE_PAT) |
Stable (extension) |
| P2 | Live paths | Swarm quorum, live vehicle I/O, env-gated AI/IoT golden paths | Experimental → Stable |
| P2 | Compiler backend | Native codegen golden paths for selected HAL profiles | Experimental → Stable |
| P3 | Solution blueprints | Warehouse, medical, agriculture scaffolds | Experimental |
Phase policy: docs/scope-control.md — fixes, tests, honest promotions, and items above only.
Maturity-based horizons — not arbitrary calendar dates.
| Horizon | Meaning | Representative items |
|---|---|---|
| Now | Stable or experimental-shipped; CI-backed | Language core, verify, sim, replay, continuity, recovery, bundled demos, differentiation NOW, E1 enterprise ops |
| Next | Experimental hardening or partial ship | Control Center Stable promotion, VS Code Marketplace, swarm quorum, live vehicle I/O, SDKs, HRI H1–H2, warehouse/medical blueprints |
| Later | Designed; experimental code exists | Compliance export polish, digital thread UI, agriculture/environmental blueprints, Gazebo scaffolds, scorecard Stable |
| Long Term | Planned v1.0+ positioning | Production verify on 5+ profiles, native codegen Stable, self-hosting subset (non-primary), twin SaaS |
| Research | Exploratory; no production commitment | Space blueprint, advanced swarm intelligence (out of scope for core), blockchain adapters (community only) |
| Area | Shipped (v0.6.3) | Next (v1.0 path) |
|---|---|---|
| Language | Stable core; typed handler I/O | Generics polish; self-hosting subset (future) |
| Compiler & Runtime | Interpreter LTS; certify gate | Native codegen golden paths (experimental → stable) |
| Verification | spanda verify, capability matrices |
5+ production hardware profiles (v1.0) |
| Safety | ActionProposal → SafeAction stable | Safety Coverage CLI; stricter certify workflows |
| Simulation | spanda sim, twins, replay, telemetry store |
OTLP/fleet aggregation polish; Gazebo/Webots scaffolds |
| Health | health_check, readiness engine | Swarm quorum hardening |
| Fleet | In-process + HTTP agents + mesh telemetry | Distributed orchestration polish |
| Packages | 38 official registry packages | Curated remote registry growth |
| Developer Platform | CLI, 9 bundled demos, CI golden paths | VS Code Marketplace (blocked on VSCE_PAT) |
| Mission assurance | Static analysis + learned anomaly (experimental) | Package-backed ML anomaly backends |
| Mission continuity | Runtime takeover, checkpoints, fleet mesh (Stable) | Field validation; swarm quorum hardening |
| Self-healing | Recovery planner + CLI + runtime dispatch (Stable) | Recovery coverage hardening |
| Platform maturity | 16 areas Stable (Phases A–D) | Live AI / learned anomaly paths Experimental |
| Differentiation | NOW items shipped Experimental | Stable hardening; signature capabilities P1 |
| Enterprise operations | E1–E4 Stable (code) | Organizational soak + audit gates (P0) |
| Solution Blueprints | ADAS, Spatial Computing, Smart Spaces Stable | Warehouse, medical, agriculture scaffolds Experimental |
Version bump policy: docs/versioning.md. Each stream (workspace, SDK, desktop) bumps independently when its area changes.
Theme: Native binaries, ROS2 polish, distributed fleet docs.
Tagged: 2026-06-22.
| Item | Status |
|---|---|
spanda deploy --target native |
Experimental |
spanda compile-native / LLVM golden paths |
Experimental |
spanda ros2 check |
Stable |
| Distributed fleet guide | Stable |
| Mission continuity runtime | Stable (post-v0.4.0 on main) |
| Persistent telemetry + OTLP/fleet aggregation | Stable (post-v0.4.0 on main) |
Theme: Close adoption blockers; differentiation NOW capabilities.
Tagged: 2026-07-02.
Version: 0.5.0 (minor bump from v0.4 deploy path).
| Item | Status |
|---|---|
| Killer demo + CI golden path | Stable |
| Live AI + ROS2 rclpy golden path + CI | Stable |
| Hosted registry (38 packages) + publish mirror | Stable |
| CI verify guide + adoption paths | Stable |
| VS Code Marketplace listing | Deferred — needs VSCE_PAT (manual publisher setup) |
| Mission Contracts, Explainability, Audit Trail, Coverage CLIs | Stable |
Exit criteria: spanda demo differentiation + scripts/differentiation_smoke.sh (CI
Integration job: differentiation-smoke) — met. Marketplace publish remains optional until
VSCE_PAT is configured.
Theme: Credibility over new capability — defect discovery, CI gates, stability honesty.
Tagged: 2026-07-04.
Version: 0.6.3 (patch bump from v0.6.2).
| Item | Status |
|---|---|
| README command smoke + golden harness | Shipped — tests/readme_commands/ |
| Cross-interface consistency (CLI / REST / gRPC) | Shipped — scripts/cross_interface_consistency.sh |
| Security regressions (plugin, package, decision, recovery) | Shipped |
| Property-style parser/manifest/config tests | Shipped |
| Release blockers RB-001–RB-012 (code) | Fixed or mitigated — see release-blockers.md |
| Feature-status honesty (mock-default AI) | Shipped |
| Organizational gates RB-007 | Open — organizational-gates.md |
Exit criteria: release-readiness.md Go with documented limitations — met. Public positioning: evaluation / beta.
Next phase: Next horizon priorities under scope-control.md.
See docs/product-strategy.md and docs/tier-3-priority-plan.md.
Version bump: major → 1.0.0 when code and organizational exit criteria are stable-tier
and tagged.
Organizational gates (required): docs/organizational-gates.md · #51
| Gate | Requirement |
|---|---|
| Field soak | ≥ 30 days via enterprise_ops_field_soak_init.sh + promotion gate |
| Security audit | Third-party sign-off on security-audit-prep.json packet |
| Code blockers | No open P0/P1 release-blockers |
| CI | README smoke, goldens, cross-interface, security regressions green |
| Item | Tier |
|---|---|
| Interpreter + sim as supported LTS runtime | Stable |
| Safety + verify + replay as certified workflows | Stable |
| Native codegen for selected HAL profiles | Experimental → Stable |
Control Center + spanda-api |
Experimental → Stable |
| Device Pool + Provisioning + RBAC | Experimental → Stable |
| Self-hosting compiler subset | Future (not primary) |
| Blockchain / cryptocurrency adapters | Out of scope |
| Advanced swarm intelligence research | Out of scope |
Recommendations to improve discoverability without deleting content. See docs/repository-organization.md for the full audit.
| Area | Current | Recommended |
|---|---|---|
| Roadmap | docs/roadmap.md (monolithic) |
ROADMAP.md (canonical) + docs/roadmap.md redirect |
| Pillar guides | Flat docs/*.md |
docs/pillars/{language,runtime,verification,…}/ — link hubs shipped |
| Solution blueprints | docs/solutions/ + examples/solutions/ |
Keep pair; add docs/solutions/{industry}.md per blueprint |
| Examples | basics/, showcase/, solutions/, end_to_end/ |
Add examples/README.md pillar tags per folder |
| Packages | packages/registry/ + registry/ mirror |
Document single source of truth in packages/registry/README.md |
| Crates | Large flat crates/ |
crates/README.md pillar column (already exists — extend) |
| Website | website/index.html, solutions.html |
Add platform.html, roadmap.html — nav in all pages |
| Overview | docs/overview/ |
Link pillar map from docs/overview/platform-structure.md |
| CI scripts | scripts/*_smoke.sh |
scripts/gates/README.md index by pillar/blueprint — shipped |
| Pillar | Key guides |
|---|---|
| Language | spanda-language.md, language-reference/, triggers.md, concurrency.md |
| Compiler & Runtime | platform-architecture.md, architecture.md, compiler-backend-roadmap.md, lean-core.md |
| Verification | hardware-compatibility.md, readiness.md, mission-assurance.md, self-healing.md, replay.md |
| Device & Fleet | device-tree.md, device-pool.md, mission-continuity.md, fleet-distributed.md |
| Security | security-architecture.md, secrets.md, tamper-detection.md |
| Operations | control-center.md, enterprise-operations-roadmap.md, telemetry-store.md |
| Developer | getting-started.md, ci-verify.md, adoption-path.md |
| Packages | packages.md, registry.md, official-packages.md |
| Blueprints | solutions/README.md · pillars/README.md |
| Deep dives | differentiation-roadmap.md, platform-maturity-roadmap.md, human-interaction-spatial-computing-roadmap.md |
Full index: docs/README.md
| Change | Action |
|---|---|
| Canonical roadmap | Use ROADMAP.md at repository root |
docs/roadmap.md |
Redirect stub — links here; historical anchors preserved in topic guides |
| README | Platform Pillars + Solution Blueprints navigation added |
| Website | Nav sections: Platform, Language, Packages, Solutions, Architecture, Roadmap, Control Center, Documentation, Examples, Community |
| Feature status | Continue updating docs/feature-status.md — tiers unchanged |
| CHANGELOG | Add [Unreleased] entry for roadmap restructure (navigation only; no scope reduction) |
Detail: docs/roadmap-migration.md