Sovereign Edge — Roadmap
Version: 0.2.12 · Last updated: 2026-09-04
Chronological task index. Full task detail lives in docs/epics/. Decision record behind this phasing: research 0001.
Phased so the foundation is built once and widened without rework — see CONCEPT.md's "Phasing" section. Mobile (iOS + Android together) is the primary track from Phase 1; Desktop is secondary and picked up only after Phase 1 ships.
Mobile (iOS + Android)
Phase 1 — MVP/POC: offline chat + built-in Search connector
Goal: prove the core trust proposition end to end — fully offline chat, plus one explicit-permission connector reaching outside — on both platforms. No connector store, no third-party anything, no monetization yet.
| Version | Task | Status | Scope | Epic task |
|---|---|---|---|---|
| 0.1.1 | Repo scaffold | ✅ | Mobile | 0.1 |
| 0.1.2 | CI pipeline | ✅ | Mobile | 0.2 |
| 0.1.3 | Native build tooling | ✅ | Mobile | 0.3 |
| 0.1.4 | Model asset pipeline | ✅ | Mobile | 0.4 |
| 0.1.5 | llama.rn integration and inference wrapper | ✅ | Mobile | 1.1 |
| 0.1.6 | Model manager | ✅ | Mobile | 1.2 |
| 0.1.6a | Native SHA-256 hashing | ✅ | Mobile | 0.5 |
| 0.1.7 | Native theme tokens | ✅ | Mobile | 7.1 |
| 0.1.8 | Core component set | ✅ | Mobile | 7.2 |
| 0.1.9 | App scaffold, navigation, and settings | ✅ | Mobile | 8.1 |
| 0.1.10 | Offline chat UI | ✅ | Mobile | 1.3 |
| 0.1.11 | Writing-assist modes | ✅ | Mobile | 1.4 |
| 0.1.11a | Remember the chosen model | ✅ | Mobile | 1.6 |
| 0.1.12 | Zero-network enforcement and audit | ✅ | Mobile | 1.5 |
| 0.1.13 | Connector manifest schema (Tier 1) | ✅ | Mobile | 2.1 |
| 0.1.14 | Permission and consent model | ✅ | Mobile | 2.2 |
| 0.1.15 | Tool-routing / intent-detection layer | ✅ | Mobile | 2.3 |
| 0.1.16 | Connector runtime host | ✅ | Mobile | 2.4 |
| 0.1.17 | In-chat connector provenance | ✅ | Mobile | 2.5 |
| 0.1.18 | Default Search connector | ✅ | Mobile | 3.1 |
| — | Configurable meta-search endpoint | ✅ merged into 3.1 | Mobile | 3.2 |
| 0.1.19 | Explicit Search mode | ✅ | Mobile | 3.3 |
| 0.1.20 | Store release setup | 📋 | Mobile | 8.2 |
Phase 2 — Fully agentic layer, default connectors
Goal: add the Sovereign Tasks connector (scenario 3), the first Tier 3 (on-device) connectors — Calendar and Device Utilities — and real connector-management UI. Still first-party only.
| Version | Task | Status | Scope | Epic task |
|---|---|---|---|---|
| 0.2.1 | Tier 3 connector scaffolding | ✅ | Mobile | 2.6 |
| 0.2.2 | Calendar connector (mobile) | ✅ | Mobile | 10.1 |
| 0.2.3 | Device connector — brightness | ✅ | Mobile | 11.1 |
| — | Device connector — torch | ✅ | Mobile | 11.2 |
| 0.2.4 | Sovereign Tasks connector | 📋 | Mobile | 4.1 |
| 0.2.5 | Instance URL and API token setup flow | 📋 | Mobile | 4.2 |
| — | Calendar connector (desktop, macOS only) | ✅ | Shared | 10.2 |
| — | Calendar connector (desktop, Windows/Linux) | 📋 | Shared | 10.3 |
| 0.2.6 | Warm palette + shared token source of truth | ✅ | Mobile | 7.3 |
| 0.2.7 | Icon system | ✅ | Mobile | 7.4 |
| 0.2.8 | Chat: icons, provenance receipts, multiline composer | ✅ | Mobile | 7.5 |
| 0.2.9 | Models: sections, progress bar, fit badge | ✅ | Mobile | 7.6 |
| 0.2.10 | Settings segmented control + Connectors restructure | ✅ | Mobile | 7.7 |
| 0.2.11 | Release assets: app icon + splash screen | ✅ | Mobile | 7.8 |
Knowledge base (epic 16)
Prioritised ahead of the Sovereign Tasks connector (0.2.4/0.2.5) on the developer's explicit direction — the same reprioritisation epics 10 and 11 received before it. Decided in research 0012: on-device first, a remote knowledge base deferred to a second phase. 16.1 gates the rest — if a second resident context turns out not to be viable on a mid-range Android device, this whole sequence changes shape.
| Version | Task | Status | Scope | Epic task |
|---|---|---|---|---|
| 0.2.13 | Embedding model spike and catalog entry | 📋 | Mobile | 16.1 |
| 0.2.14 | Settings: opt-in, status, and purge | 📋 | Mobile | 16.3 |
| 0.2.15 | Conversation archive store | 📋 | Mobile | 16.2 |
| 0.2.16 | Chunking and the index | 📋 | Mobile | 16.4 |
| 0.2.17 | Retrieval and context injection | 📋 | Mobile | 16.5 |
| 0.2.18 | In-chat retrieval provenance | 📋 | Mobile | 16.6 |
| 0.2.19 | User content: plain text and markdown | 📋 | Mobile | 16.7 |
| 0.2.20 | PDF text-layer extraction | 📋 | Mobile | 16.8 |
| — | Desktop port | 📋 | Desktop | 16.9 |
Phase 3 — Open connector ecosystem
Goal: open the connector layer to third-party developers, add the in-app store, and turn on monetization.
| Version | Task | Status | Scope | Epic task |
|---|---|---|---|---|
| 0.3.1 | Connector SDK | ✅ | Shared | 5.1 |
| 0.3.2 | Connector plugin template | ✅ | Shared | 5.2 |
| 0.3.3 | First-party example connectors | ⏳ | Shared | 5.3 |
| 0.3.4 | Public connector registry and submission process | ✅ | Shared | 5.4 |
| 0.3.5 | In-app Connector Store | ✅ | Shared | 5.5 |
| 0.3.6 | Tier 2 sandboxed script runtime | 📋 | Shared | 5.6 |
| 0.3.7 | Entitlement model | ✅ | Shared | 6.1 |
| 0.3.8 | Mobile in-app purchase integration | 📋 | Shared | 6.2 |
Desktop
Secondary, optional. Still sequenced after mobile in principle, but epic 12 (Desktop Core Port) was picked up and completed ahead of mobile's own remaining Phase 1 item (0.1.20) — see core-port.md's own status. Shell technology was decided first — task 9.1 was deliberately pulled forward as a scoping/planning pass, on the developer's explicit instruction, ahead of 0.1.20 closing out Phase 1: see research 0010 (Tauri v2, over Electron and a React Native desktop shell). Epic 9 (Desktop Shell) held only that decision and is closed; epic 12 (Desktop Core Port) held the rest of the desktop work, broken into 11 tasks (12.1–12.7, plus 12.7a split out from 12.7, plus 12.8–12.10) sized to match mobile's own epic granularity — all done: a Tauri v2 app with real on-device inference, per-connector credential storage, a Tier 1 + Tier 3 connector runtime, grammar-constrained tool-calling, a minimal offline chat UI exercising all of it, (12.8) the same six writing-assist modes mobile has — brainstorm, grammar-fix, tone rewrite, and draft, plus forced-Search mode — closing the single largest UX gap a feature audit found between the two apps, (12.9) a debug-only runtime offline tripwire (net_guard.rs) closing a defense-in-depth asymmetry the same audit found — mobile had a live runtime network guard, desktop had only structural guarantees — and (12.10) real unit test coverage for models/{manager,verify,store,catalog,device}.rs and engine/adapter.rs, closing a later audit's top-ranked finding that these Rust ports had none where mobile's TS equivalents are thoroughly mocked and tested. See desktop-network-audit.md for exactly what it does and does not cover. Epic 13 (Desktop App Shell) is also all done: real navigation, a model manager screen, a connectors/permissions screen, and general settings, extracted from what task 12.7's chat screen used to do inline; see app-shell.md. Epic 14 (Desktop Distribution & Signing) is in progress — real signed/notarized installer artifacts and a self-update mechanism, since desktop ships with no app store to piggyback signing/distribution/updates on (research 0010's own flagged, previously-unanswered question). Task 14.1 (real installer artifacts) is done: explicit bundle.targets, a real macOS .app/.dmg built and installed/launched outside the build tree, plus real Linux .deb/.AppImage built and verified via a native (non-cross-compiled) Docker container. Task 14.3 (update mechanism) is done: tauri-plugin-updater + a real Ed25519 signing keypair, hosted via GitHub Releases — proceeding deliberately without task 14.2 (code signing, still skipped for lack of an Apple Developer ID certificate), since the two signing schemes are independent. Task 14.4 (release pipeline) is done too: a workflow_dispatch GitHub Actions workflow that bumps versions, tags, builds, signs, and publishes real macOS/Windows/ Linux artifacts in one run — closing 14.1's Windows gap for real via a windows-latest runner, and adding a second, x86_64 Linux artifact alongside 14.1's local arm64 one. v0.1.5 is published — the first real desktop release, and the first real proof task 14.3's updater actually works end to end (releases/latest/download/latest.json resolves to it). See distribution.md.
Non-prioritised tasks
Desktop app code — apps/desktop/package.json is now 0.1.5 as of task 14.4's first real release pipeline run, closing the 0.0.0 gap this section used to flag; future bumps happen the same way, via .github/workflows/desktop-release.yml, not by hand.
| Version | Task | Status | Scope | Epic task |
|---|---|---|---|---|
| — | Desktop shell technology spike | ✅ | Desktop | 9.1 |
| — | Tauri app scaffold and build tooling | ✅ | Desktop | 12.1 |
| — | Rust llama.cpp EngineAdapter and model manager | ✅ | Desktop | 12.2 |
| — | SecureStorageAdapter over the OS credential store | ✅ | Desktop | 12.3 |
| — | Connector framework port (Tier 1) | ✅ | Desktop | 12.4 |
| — | Tier 3 native handler registry (Tauri) | ✅ | Desktop | 12.5 |
| — | packages/desktop-ui initial component set | ✅ | Desktop | 12.6 |
| — | Grammar-constrained tool-calling in the Rust engine | ✅ | Desktop | 12.7a |
| — | Minimal offline chat UI | ✅ | Desktop | 12.7 |
| — | Writing-assist modes | ✅ | Desktop | 12.8 |
| — | Debug-only runtime offline tripwire | ✅ | Desktop | 12.9 |
| — | Rust model-management test coverage | ✅ | Desktop | 12.10 |
| — | Navigation shell scaffold | ✅ | Desktop | 13.1 |
| — | Model manager screen | ✅ | Desktop | 13.2 |
| — | Connectors & permissions screen | ✅ | Desktop | 13.3 |
| — | General settings screen | ✅ | Desktop | 13.4 |
| — | Chat screen consolidation | ✅ | Desktop | 13.5 |
| — | Search connector setup screen | ✅ | Desktop | 13.6 |
| — | Cancel an in-flight model download | ✅ | Desktop | 13.7 |
| — | Frontend test coverage (Vitest + Testing Library) | ✅ | Desktop | 13.8 |
| — | Static offline-boundary import-graph check | ✅ | Desktop | 13.9 |
| — | No-hardcoded-color ESLint rule | ✅ | Desktop | 13.10 |
| — | Settings privacy/offline reassurance copy | ✅ | Desktop | 13.11 |
| — | Real installer artifacts per platform | ✅ | Desktop | 14.1 |
| — | Code signing and notarization | 📋 | Desktop | 14.2 |
| — | Update mechanism | ✅ | Desktop | 14.3 |
| — | Release pipeline | ✅ | Desktop | 14.4 |
| — | Icon system | ✅ | Desktop | 15.1 |
| — | Chat screen: icons, provenance receipts, multiline composer | ✅ | Desktop | 15.2 |
| — | Models screen: sections, progress bar, fit badge | ✅ | Desktop | 15.3 |
| — | Settings segmented control + Connectors restructure | ✅ | Desktop | 15.4 |
| — | Release assets: app icon + splash window | ✅ (splash later removed) | Desktop | 15.5 |
| — | Desktop direct-sale flow | 📋 | Shared | 6.3 |