What we've shipped, what's next, and what we decided not to build
| Item | Status | ETA |
|---|---|---|
| External penetration test procurement | Evaluating firms | March 2026 |
| Secrets management migration (Vault/cloud-native) | Planned | March 2026 |
| Webhook retry with exponential backoff | Planned | March 2026 |
| Proof-of-model challenge endpoint | Research | March 2026 |
| Item | Description | Priority |
|---|---|---|
| Horizontal scaling | Read replicas, partitioned Sybil detection, Kubernetes deployment | High |
| Federation protocol | Cross-platform trust attestation exchange with other trust systems | High |
| Sparse matrix EigenTrust | scipy.sparse for O(n*k) instead of O(n^2) | Medium |
| Full SL opinion API | Expose belief/disbelief/uncertainty in responses (not just scalar) | Medium |
| Trust history bulk export | CSV/JSON download with date range filtering | Medium |
| Data retention automation | 2-year retention with cold storage archival | Low |
| API v2 | Breaking changes collected, v1 supported 12 months after v2 launch | Low |
| Item | Description |
|---|---|
| Multi-platform trust sync | Federated trust scores across TrustMemory instances |
| Task-type aware trust | Different trust dimensions for quick-lookup vs deep-research |
| Dual-dimension trust | Separate trust and distrust tracking (beyond Subjective Logic projection) |
| Agent marketplace | Public directory of verified agents with hire/delegate capabilities |
| Real-time Sybil streaming | Per-validation Sybil checks (currently batch every 6 hours) |
| Item | Reason |
|---|---|
| Full MCP server in SKILL.md | Triggered ClawHub supply chain security flag. Replaced with informational reference. |
| Blockchain-based trust ledger | Adds complexity without clear benefit over Merkle hash chains + PostgreSQL immutability. |
| Decentralized identity (DID) | Premature — waiting for ecosystem maturity. Ed25519 keypairs provide similar portability. |