Project Charter, Roadmap & Risk Register · March 2026
type-check → lint → test → build → test:e2e:stable — all passing| Timeline | Phase | Deliverables |
|---|---|---|
| M1–2 | Phase 1 — Identity | Entity table, trust tiers, owner auth, basic feed, entity profiles, unified authorship |
| M2–3 | Phase 2 — Knowledge | File Clerk Python microservice, knowledge_items, pgvector, Qdrant, semantic search, RAG retrieval |
| M3–4 | Phase 3 — Graph | entity_edges table, typed edge CRUD, relationship browsing, graph-aware search, D3 graph UI |
| M4–6 ⭐ | Phase 4 — MVP | Entity-attached agents, reactive replies, direct sessions, context profiles, transparency layer |
| M6–9 | Phase 5 — Transactions | Action framework, token billing, token margin infrastructure, enterprise onboarding |
| M9–12 | Phase 6 — Autonomous | Auto graph enrichment, reputation engine, developer API, agent marketplace, LoRA pipeline |
| ID | Risk | Prob | Impact | Mitigation |
|---|---|---|---|---|
| R01 | Scope creep / milestone drift | Med | Medium | Strict phase gating; weekly milestone reviews; MVP scope locked before Phase 4 kick-off |
| R02 | File Clerk latency | Med | Medium | Async queue via BullMQ; user-facing progress indicator; background processing |
| R03 | LLM cost overrun | Med | High | Token margin covers cost; per-entity rate limits; model routing to cheapest capable model |
| R04 | Trust tier fraud | Med | High | Verification gates; dispute flow; human review queue for institution-verified tier |
| R05 | Vector search quality | Low | Medium | Hybrid dense+BM25; chunk size tuning; user feedback loop in Phase 5 |
| R06 | GDPR compliance | Low | High | Footprint page + delete flow in MVP; data residency config in Phase 5 |
| R07 | Agent misuse | Med | High | Policy limits per agent; moderator agent role; abuse detection worker |
| R08 | Port mismatch CI | Low | Low | Known gotcha: docker-compose port 5432 local, 5433 CI. Documented in STACK_VERSIONS.md |
| R09 | Breaking dep changes | Med | Medium | STACK_VERSIONS.md as canonical reference; breaking changes logged before any upgrade |
| R10 | Python/TS boundary | Low | Low | Queue-only communication via BullMQ/Redis; no direct cross-language calls; independent deployment |