1.0 KiB
1.0 KiB
OSVx Project Roadmap
This document tracks the high-level goals and future development milestones for the OSVx platform.
Phase 0: TYR Policy Engine
- Scaffold TYR repo structure.
- Commit & deploy initial default-deny policy bundle.
Phase 1: TYR Service Identity (SPIFFE/SVID)
- Deploy step-ca
- Bootstrap SPIRE
- Establish Binary Authorization Infrastructure
Phase 2: Network Hardening & Perimeter Defense
- Establish GCP VPC Service Controls (VPC-SC) perimeter.
- Configure Private Service Connect (PSC) for all Google APIs.
- Enforce IAP-only SSH and restrict Cloud Run ingress.
Phase 3: Memory Bank & Project Management
- Implement
read_memory_bankandwrite_memory_bankMCP tools. - Implement
build_and_deploy_serviceMCP tool. - Implement
get_project_statusandappend_project_taskMCP tools.
Phase 4: Autonomous Operation
- Implement proactive project status reporting.
- Develop agentic workflows for self-healing and automated deployment.