@meta
  v: 1
  route: /roadmap
  generated: 2026-11-02T00:24:17Z
  ttl: 1d

@intent
  purpose: "The public ZipGuard roadmap: what is live in the pilot, what is being built now, what comes before public launch, what comes later, and what will never be built"
  audience: server-owner, moderator, member, ai-agent
  capability: learn, apply, contact

@state
  page: ZipGuard roadmap
  statuses[5]: Live in the pilot, Building now, Planned before public launch, Later, Never
  items[27]{status,item}:
    Live in the pilot,"Join screening from the join event only, every verdict explained rule by rule"
    Live in the pilot,One-click challenge inside Discord for medium risk; hold for a moderator at high risk
    Live in the pilot,"Moderator Approve, Kick and Ban buttons on every log entry; member appeals from inside Discord"
    Live in the pilot,"/my-data, /forget-me and /privacy for every member"
    Live in the pilot,Shadow mode for the first 7 days; per-server thresholds and high-risk action
    Live in the pilot,Anti-nuke: three channel or role deletes by one account inside a minute are reverted and the account loses its roles
    Live in the pilot,"Link defense: lookalike domains, scam wording, the same link in three channels inside a minute (needs the Message Content permission, each server turns it on)"
    Live in the pilot,Weekly scorecard digest in the log channel
    Live in the pilot,"Data statement generated from the database schema, with a deletion test in CI"
    Live in the pilot,Private pilot application form and approval flow
    Live in the pilot,"Raid mode: after a join burst (10 joins in a minute by default), every joiner is held for 10 minutes and invites are paused"
    Live in the pilot,"Right-click moderator actions on a member: show the verdict with its reasons, or hold for review"
    Live in the pilot,"Shared ban list across servers with the same owner, opt-in, stored as salted hashes"
    Live in the pilot,Member reports (/report): three reports from established accounts inside 24 hours hold the member automatically
    Live in the pilot,"Breach notification runbook: every affected server owner, member and Discord told within 72 hours"
    Live in the pilot,Published review of the Discord Developer Policy and Terms against what the bot does
    Live in the pilot,"Encryption at rest: the bot database lives on a LUKS-encrypted volume, and the bot refuses to start without it"
    Live in the pilot,"Read-only dashboard: /zipguard dashboard gives moderators a 24-hour link with counts, rule frequencies and settings, never member data"
    Building now,Terms of service page
    Planned before public launch,"Public repository under the MIT license, after an external security review"
    Planned before public launch,External penetration test and a public bug bounty with real payouts
    Later,"Opt-in trust proofs: a member may link Steam, GitHub or Twitch to skip review; only a salted hash is kept"
    Later,Dashboard rule editing
    Later,"A trained scoring model once moderator overrides exist, with the rules kept as guardrails"
    Later,"A real scam classifier built on Jebadiah decision models (jebadiah.ai) instead of the phrase list, trained without Discord message content unless Discord grants permission"
    Never,"IP addresses, browser or device fingerprints, an external verification page"
    Never,"Ads, a paid tier, data resale, people search"
  source: ROADMAP.md in the repository, rendered at build time

@actions
  - id: read_human_page
    method: GET
    href: /roadmap
  - id: apply_for_pilot
    method: GET
    href: /pilot
  - id: email_support
    method: GET
    href: mailto:help@myagents.email

@context
  > Public and honest. "Live" means running in the pilot today. "Building" means code is being written this week. Nothing here is a promise of a date; the order is the order.
  > 18 items live, 1 being built now.
  > A privacy-first Discord security bot. Checks inside Discord. Explainable decisions. Moderators stay in control. No IP collection, no ads, free for every server.

@nav
  self: /roadmap.agent
  parents: [/.agent]
  peers: [/.agent, /pilot.agent, /data.agent, /policy.agent, /guide.agent]