.ciagent/ROADMAP.md

@@ -2,14 +2,15 @@
 
 ## Overview
 
-Placeholder roadmap for the `coreci-chat` project. The full phase breakdown will be produced by the roadmapper once the project specification is supplied in a follow-up session and the specify → clarify → research stages complete. The current milestone is `v0.1` (branch `milestone/v0.1-bootstrap`); phase 0 is in progress on `phase/00-pre-execution`.
+Roadmap for the `coreci-chat` project. M1 (Read-Only Diagnostic MVP) and M2 (MCP Layer & Day 1 Adapters) are complete and shipped. The current milestone is `v0.3` — M3: Chat, Orchestration, Hardening (spec `steer-m3-spec.md` v1.2 Final, locked 2026-08-25; M3 phase rows groomed in at kickoff 2026-10-23 via MR per the standing M3 order — coreci-chat#1).
 
-Milestone type: **NFR** (placeholder — to be re-evaluated by `getMilestoneType()` once phases are defined). Tags will run on the previous minor's patch line: phase 0 → `v0.0.1` (no prior tags exist, so the v0.0.x line is seeded here).
+Milestone type: **NFR** (placeholder — to be re-evaluated by `getMilestoneType()` once phases are defined). Tags will run on the previous minor's patch line: M3 phases → `v0.2.x`; M3 milestone ship → `v0.3.0` (the v0.0.x/v0.1.x lines were seeded by M1/M2).
 
 ## Milestones
 
 - [x] **v0.1 — M1: Read-Only Diagnostic MVP** (COMPLETE, shipped v0.0.1..v0.0.7). All 17 M1 REQs (001-014, 038, 039, 040) pass. 189 tests green. Verified in `.ciagent/M1-REVIEW.md`.
 - [x] **v0.2 — M2: MCP Layer & Day 1 Adapters** (COMPLETE, shipped v0.1.0..v0.1.6). All 13 M2 REQs (015-027) pass. 656 tests green. Verified in `.ciagent/M2-REVIEW.md`.
+- [ ] **v0.3 — M3: Chat, Orchestration, Hardening** (IN PROGRESS — kickoff). 15 REQs (028-037, 041-045) per `steer-m3-spec.md` v1.2 Final. Engineering kickoff gate = first green CI run post-retarget (coreci-chat#1).
 
 ## Phases
 
@@ -33,12 +34,22 @@ Milestone type: **NFR** (placeholder — to be re-evaluated by `getMilestoneType
 - [x] **Phase 5: Wave J — SSE integration + LLM smoke + adapter UI** - SSE consumer in Test-Call UI, `packages/llm-mock` CI-only LLM smoke (two-track: Track A mock-path P0 gate + Track B real-GitHub allow-failure, G-018/G-019), Settings → Adapters UI + Test-Call UI, CI/CD pipeline (`.gitea/workflows/ci.yml`, G-011/G-022) (REQ-017 integration, gate item 8) (SHIPPED v0.1.5)
 - [x] **Phase 6: Final — Review + Audit + Ship** - Multi-persona code review, project health audit, M2 gate verification (15 items), milestone ship (SHIPPED v0.1.6 ← M2 milestone release)
 
+### v0.2.x — M3: Chat, Orchestration, Hardening
+
+- [ ] **Phase 0 (M3): pre-execution + kickoff groom** - M3 spec locked v1.2 Final (`steer-m3-spec.md`, 2026-08-25); ROADMAP M3 phase rows landed via kickoff MR (never silently rewritten); CI armed (`ci.yml` retarget PR #4 merged 2026-10-23T00:18:22Z; registration-lag F-1 consumed the merge push - the next push to main fires the pipeline, sre c12346)
+- [ ] **Phase 1 (M3.a): Chat inline + citation + history** - chat UI surface; natural-language input (<=4000 chars, `chat.session.created`); streamed response with inline citations + `usage` block; streamed tool traces; conversation history data model (`chat_sessions`/`chat_turns`; soft-close 30-min idle, hard-close 7d); planner via tenant BYOM with `llm.inference.*` audit events and `visible=false` intermediates (REQ-028..033)
+- [ ] **Phase 2 (M3.b): Orchestration + durability** - multi-step workflows through the broker adapter router; <=20-step inline limit with auto-promote at step 21 (`workflow.promoted`; degraded-mode halt + `workflow.promotion_failed`); durable execution via Trigger.dev (`workflow_events`, 24h hard TTL, `workflow_id` idempotency); rejoin protocol (`Last-Event-ID` replay + tail; background-workflows dashboard fallback) (REQ-034..037)
+- [ ] **Phase 3 (M3.c): Hardening + metering** - SOC2 posture page + live control probes (5-min default; `control_state` write-through cache); Vanta evidence sync (1h default; SecretProvider; no signed attestations); usage metering (1-min aggregation) + tenant usage dashboard; Redis-backed rate aggregation (gateway + workers share buckets; fail-closed 503) (REQ-041..045)
+- [ ] **Phase 4 (M3): Final — Review + Audit + Ship** - multi-persona review; M1+M2 non-regression suite green; M3 acceptance gate (all 15 REQs PASS; >=80% coverage on new packages `orchestrator`/`chat`; INV-1..INV-8 preserved as written); milestone ship v0.3.0
+
 ## Milestone Status
 
 **v0.1 — M1: Read-Only Diagnostic MVP: COMPLETE.** All 17 M1 REQs (001-014, 038, 039, 040) pass their acceptance criteria. 189 tests green across 7 TS packages + 1 Go package + install script. M1 acceptance gate (spec §2.3) verified in `.ciagent/M1-REVIEW.md`.
 
 **v0.2 — M2: MCP Layer & Day 1 Adapters: COMPLETE.** All 13 M2 REQs (015-027) pass their acceptance criteria. 656 tests green (618 unit/integration + 38 conformance/LLM smoke) across 9 TS packages + 1 Go package. M2 acceptance gate (spec §6, 15 items) verified in `.ciagent/M2-REVIEW.md`. MCP capability broker gateway + 4 Day-1 adapters (Proxmox, SSH/Linux, GitHub, Gitea) + SSE streaming + token-bucket rate limiting + LLM tool-calling smoke + CI/CD pipeline (Postgres 16 RLS). All 12 GRILL binding fixes (G-011..G-022) applied. M1 non-regression holds.
 
+**v0.3 — M3: Chat, Orchestration, Hardening: IN PROGRESS (kickoff).** Spec v1.2 Final locked 2026-08-25 (`steer-m3-spec.md`); scope = REQ-028..037 + REQ-041..045 across M3.a (chat inline + citations + history), M3.b (orchestration + durability), M3.c (hardening + metering); INV-1..INV-8 hold as written (Q5 session-batched Merkle additive to INV-4). New packages: `packages/orchestrator`, `packages/chat`; new schemas: `chat_sessions`, `chat_turns`, `workflow_events`, `control_state`. Engineering kickoff gate = first green CI run post-retarget (coreci-chat#1); no REQs claimed complete yet.
+
 ## Phase Details
 
 ### Phase 0: pre-execution