# OSVx Project Roadmap

This document tracks the high-level goals and future development milestones for the OSVx platform.

## Phase 0: TYR Policy Engine
- [x] Scaffold TYR repo structure.
- [x] Commit & deploy initial default-deny policy bundle.

## Phase 1: TYR Service Identity (SPIFFE/SVID)
- [x] Deploy step-ca
- [x] Bootstrap SPIRE
- [x] Establish Binary Authorization Infrastructure

## Phase 2: Network Hardening & Perimeter Defense
- [x] Establish GCP VPC Service Controls (VPC-SC) perimeter.
- [x] Configure Private Service Connect (PSC) for all Google APIs.
- [x] Enforce IAP-only SSH and restrict Cloud Run ingress.

## Phase 3: Memory Bank & Project Management
- [x] Implement `read_memory_bank` and `write_memory_bank` MCP tools.
- [x] Implement `build_and_deploy_service` MCP tool.
- [ ] Implement `get_project_status` and `append_project_task` MCP tools.

## Phase 4: Autonomous Operation
- [ ] Implement proactive project status reporting.
- [ ] Develop agentic workflows for self-healing and automated deployment.