RFC index
Status at a glance for all Sovereign RFCs. Open the individual file for the full proposal, motivation, and impact. Keep this table in sync when an RFC's status changes or a new one lands.
Still an open-ended question with no concrete design yet? Start in docs/research/ instead — RFCs are for proposals ready to commit to a design.
Proposing one? Copy TEMPLATE.md to NNNN-short-slug.md, fill it in, and add a row below. See CONTRIBUTING.md for the full process.
| RFC | Title | Status | In plan |
|---|---|---|---|
| 0001 | Overlay shell variant | Implemented | Yes — Task 0.5.10 (shipped) |
| 0002 | Cross-plugin data sharing | Implemented | Yes — Task 0.5.11 |
| 0003 | Plugin monetization | Accepted | Yes — Task 0.8.0 |
| 0004 | Per-plugin database | Implemented | Yes — Task 0.8.1 |
| 0005 | Activity log | Implemented | Yes — Task 0.5.13 |
| 0006 | Deployment & upgrade strategy | Implemented | Yes — Task 0.5.14 |
| 0007 | User data export & portability | Implemented | Yes — Task 0.5.15 |
| 0008 | Security & encryption architecture | Accepted | Yes (phased) — Task 0.5.16 + Task 1.0.1 |
| 0009 | Internal package codenames | Withdrawn (deferred) | No |
| 0010 | Test file organization | Implemented | Yes — Task 0.5.17 |
| 0011 | Icon system (Lucide) | Implemented | Yes — Task 0.5.18 |
| 0012 | Passkeys & TOTP multi-factor auth | Implemented | Yes — Task 0.5.27 |
| 0013 | Mobile responsiveness & PWA hardening | Implemented | Yes — Task 0.5.26 |
| 0014 | Minimal shell mode | Implemented | Yes — Task 0.5.25 |
| 0015 | Notification Center | Implemented | Yes — Task 0.7.0 |
| 0016 | Web Push notifications | Implemented | Yes — Task 0.7.1 |
| 0017 | Plugin starter template & examples | Implemented | Yes — Task 0.5.28 |
| 0018 | Plugin-scoped environment variables | Implemented | Yes — Task 0.5.23 |
| 0019 | Test setup & seeding | Implemented | Yes — Task 0.5.24 |
| 0020 | Production dev-mode & diagnostics | Implemented | Yes — Task 0.8.3 |
| 0021 | Platform roles & capabilities | Implemented | Yes — Task 0.6.0 |
| 0022 | Plugin-declared capabilities | Implemented | Yes — Task 0.6.1 |
| 0023 | SDK distribution & plugin isolation | Implemented | Yes — Task 0.5.21 |
| 0024 | Plugin compatibility & versioning | Implemented | Yes — Task 0.5.22 |
| 0025 | Accessibility (WCAG 2.1 AA) | Implemented | Yes — Task 0.5.29 |
| 0026 | Non-Docker production deployment | Accepted | Yes (phased) — Task 0.5.30 (Phase 1) + epic task 0.13 (Phase 2) |
| 0027 | White-labeling (instance identity) | Implemented (Phases 0, 1, 2, 3 shipped; Phase 4/9.13 rejected) | Yes (phased) — epic tasks 9.8, 9.9, 9.10 |
| 0028 | Operator fork model & upstream sync | Accepted | Yes — epic task 3.14 |
| 0029 | Internationalization / localization | Accepted | Yes — epic tasks 11.1 + 11.2 (scheduled at 0.9.4 + 0.9.5) |
| 0030 | Privacy-first analytics | Accepted | Yes — epic tasks 6.1 + 6.2 [post-v1] |
| 0031 | Email template system | Implemented | Yes — epic task 9.9 (alongside RFC 0027 Phase 2, workstream 0013 leg 3) |
| 0032 | Instance identity rename | Implemented | Yes — epic task 9.8 (completed) |
| 0033 | User data deletion (right to erasure) | Implemented | Yes — epic task 1.7 (completed) |
| 0034 | Notification Center — pluggable transport (pub/sub) | Implemented | Yes — epic task 4.3 (completed) |
| 0035 | Progressive user verification | Implemented | Yes (phased) — epic tasks 1.8 + 1.9 (both completed) |
| 0036 | Per-plugin database dialect selection | Accepted | Yes — epic task 3.15 |
| 0037 | VitePress public docs site and project landing page | Implemented | Yes — epic tasks 16.1, 16.2 |
| 0038 | Desktop app shell (Tauri, macOS-first) | Accepted | Yes — epic tasks 17.1–17.7 |
| 0039 | Instance identity — instanceId + terminology cleanup | Implemented | Yes — shipped in runtime@0.33.0 |
| 0040 | Sovereign Harness — AI assistant and orchestration layer | Draft — pending revisit (see RFC 0063) | Yes — epic task 18.1 |
| 0041 | User directory and member selection SDK | Implemented | Yes — epic task 1.12 |
| 0042 | Public plugin page routes | Implemented | Yes — epic task 2.14 |
| 0043 | Plugin secret vault | Implemented | Yes — epic task 8.6 |
| 0044 | Plugin file storage | Implemented | Yes — epic task 8.7 |
| 0045 | Plugin events and realtime channels | Implemented | Yes — epic task 3.17 |
| 0046 | Plugin background jobs and schedules | Implemented | Yes — epic task 3.16 |
| 0047 | Plugin tool contracts | Implemented | Yes — epic task 3.18 (completed) |
| 0048 | Messages and notification detail | Implemented | Yes — epic task 4.4 |
| 0049 | Plugin external connections | Implemented | Yes — epic task 3.19 |
| 0050 | Public plugin webhooks | Implemented | Yes — epic task 2.15 |
| 0051 | Cross-plugin references and dependency discovery | Implemented | Yes — epic task 3.20 |
| 0052 | Plugin portability hooks | Implemented | Yes — epic task 8.8 |
| 0053 | Plugin flow handoffs | Implemented | Yes — epic task 3.21 |
| 0054 | Plugin-scoped roles and grants | Implemented | Yes — epic task 1.13 |
| 0055 | Sovereign Council — multi-model deliberation workspace | Draft | Yes — epic tasks 19.1, 19.2 |
| 0056 | Sovereign Guide — first-run guide platform plugin | Draft | Yes — epic tasks 24.1–24.4 |
| 0057 | Plugin external dependency resolution | Implemented | Yes — epic task 3.25 |
| 0058 | Native mobile app shell (Capacitor) | Partially implemented (20.2 shipped; 20.1 substantially implemented; 20.6, 20.7, 20.8 also shipped) | Yes — epic tasks 20.1–20.9 |
| 0059 | Local visual regression testing | Partially implemented (Tier 1 shipped; Linux CI calibration pending) | Yes — epic task 9.14, workstream 0013 leg 2 |
| 0060 | Client-side encryption core | Implemented | Yes — epic task 8.9 |
| 0061 | Sovereign Wallet platform plugin | Draft | Yes — epic tasks 21.1–21.4 |
| 0062 | Email delivery coverage | Implemented | Yes — epic tasks 1.14, 3.26, and 4.5 |
| 0063 | Warden — core assistant platform plugin and harness engine (formerly "Jarvis") | Implemented (tasks 22.4-22.5, 22.8-22.11 all done — see RFC) | Yes — epic tasks 22.4-22.5, 22.8-22.11 |
| 0064 | Git-backed operator backups | Draft | Yes — epic tasks 8.10, 8.11, 8.12 |
| 0065 | User groups and plugin access policy | Implemented | Yes — epic tasks 1.15–1.17, 2.21, 2.23, 3.28, 13.7–13.8, 15.3 |
| 0066 | Sovereign Chat P2P identity and transport | Draft | Yes — epic tasks 23.1–23.12 |
| 0067 | Product-led docs site and instance directory | Implemented | Yes — epic task 16.4 (completed) |
| 0068 | Export completeness hardening | Implemented | Yes — epic task 8.13 |
| 0069 | Bring-your-own database (per-user external Postgres) | Withdrawn (evaluated, not recommended for v1) | No |
| 0070 | Per-user capability grants | Implemented | Yes — epic task 1.16 |
| 0071 | SQLite at-rest encryption (opt-in, single-key) | Retired (shipped, then removed) | Shipped at v0.44.0, retired — see CLAUDE.md changelog |
| 0072 | External OAuth/OIDC provider for non-plugin apps | Implemented | Yes — epic tasks 1.18, 1.24 |
| 0073 | Standalone usage of @sovereignfs/ui outside plugins | Implemented | Yes — epic task 9.17 |
| 0074 | Offline-capable plugin routes | Superseded | Shipped ad-hoc at slot 0.45.0; superseded by research 0012 / workstream 0008, epic task 3.36 |
| 0075 | Per-plugin mobile header/footer toggle | Implemented | No roadmap slot — unplanned/urgent, implemented directly on feat/mobile-chrome-toggle |
| 0076 | Design system sizing alignment and new primitives | Draft | No — documentation-first, pending scheduling |
| 0077 | Instance-level corner radius control (None/XS/S/M/L) | Implemented | Yes — token layer, DB migration (both dialects), instance-style.ts delivery, Console Select control, env var/doc parity, Token Gallery all shipped |
| 0078 | Generic offline read+write for plugins | Superseded | Shipped ad-hoc at slot 0.50.1; superseded by research 0012 / workstream 0008, epic tasks 3.36–3.37 |
| 0079 | Mobile PWA layout, overlay, and gesture consistency | Implemented | Yes — epic tasks 9.18, 9.19, 9.20 |
| 0080 | Plugin surface model (sdk.device.*) | Implemented | Yes — epic tasks 3.32–3.33 |
| 0081 | Per-plugin installable PWA | Partially implemented (2.25 shipped, 2.26 open) | Yes — epic tasks 2.25–2.26 |
| 0082 | Focused plugin app shell (single-plugin native apps) | Implemented | Yes — epic tasks 2.27, 20.10–20.12 |
| 0083 | Device bridge and capability contract | Implemented | Yes — epic tasks 3.34–3.35 |
| 0084 | UI-driven backup & restore | Partially implemented (8.16, 8.18 shipped; 8.17 backup half shipped at v0.128.0, restore half pending) | Yes — epic tasks 8.16–8.18 |
| 0085 | Vertical section navigation for overlay-shell plugins (NavRail) | Partially implemented — Account's half fully shipped (tasks 14.5 + 14.6); Console's half superseded by workstream 0022's different, incompatible design | Partially — Console's epic task 9.22 rejected as originally scoped; Account re-scoped as epic tasks 14.5 + 14.6, both ✅ |
| 0086 | Shared-store rate limiting for multi-instance deployments | Partially implemented (task 1.19 shipped; task 2.29 paused) | Yes — epic tasks 1.19, 2.29 |
| 0087 | Sovereign Relay — native push notifications & WebRTC signaling | Implemented | Yes — epic tasks 4.7, 20.5, 4.8, 17.11 |
| 0088 | Mobile header and footer as Design System components | Implemented | Yes — epic tasks 9.23–9.24 |
| 0089 | Fully public plugins (public: true) | Implemented | Yes — epic task 2.30 |
| 0090 | Default privacy policy and terms of service, platform and plugin | Draft | No — documentation-first |
| 0091 | libSQL/sqld as the SQLite driver | Implemented | Yes — RFC-0071-scoped carve-out approved via PR #364; workstream 0009 all 4 legs shipped, sqld now mandatory in Docker Compose |
| 0092 | App-level field encryption (platform-wide by classification) | Implemented | Yes — epic tasks 8.31–8.34, workstream 0011 (leg 1 shipped as v0.79.0) |
| 0093 | Device-only tier: key custody and data-loss recovery, native and web | Accepted | Yes — unblocks workstream 0008 leg 4 (epic tasks 8.21, 20.13, 8.20, 1.22) |
| 0094 | Design-system theme presets | Implemented | Yes — theme-presets.ts, generator script, new tokens, border-width migration, Button press interaction, Storybook toolbar all shipped |
| 0095 | Instance-level theme preset selection | Implemented | Yes — schema/migration (both dialects), instance-style.ts delivery, Console Select control, env var/doc parity all shipped |
| 0096 | Plugin pre-deletion veto hook (amends RFC 0033) | Draft | No — not yet scheduled |
| 0097 | Severing attribution on account deletion (amends RFC 0033) | Draft | No — documentation-first |