RoadmapLast updated 2026-10-26

Only a phase whose check has passed is called live.

Every phase has a "done when". Phases 3 to 8 are roughly independent; order can shift.

  1. 0

    Skeleton

    Done

    Web on Vercel, API on the droplet, Postgres, deploy scripts.

    Done when the production page shows "API connected · database up".

  2. 0.5

    Determinism spike

    Done (finding published)

    Pick an open-weights code model; test whether batch-invariant kernels give byte-identical output twice and on a second machine.

    Done when byte-identical output both times and both machines, or a written finding of exactly what breaks it.

  3. 1

    MVP, all free

    In build

    Scanner, Shield, Audit v1, wallet accounts (Sign-In-With-Solana), public verify page, badges. Final third-party checks pending.

    Done when a report and verdict come back correct for a known-bad and a known-good mint; a live delegation shows and revokes; a third party re-verifies a published receipt; a wallet signs in and sees only its own jobs.

  4. 2

    Shield live, Audit depth, anchoring

    Planned

    Wallet monitoring and alerts; deeper Audit (Token-2022, Anchor IDL aware); daily Merkle root anchored on Solana; receipt-backed badge.

    Done when a new risky approval on a watched wallet alerts; a published audited badge verifies against the on-chain root.

  5. 3

    Payments

    Planned

    USDC via Solana Pay, then card; per-wallet quotas; token discounts only if the owner provides a token.

    Done when a customer pays for an Audit in USDC and the job runs against that payment.

  6. 4

    Deterministic inference node

    Planned

    Self-hosted open-weights model with batch-invariant kernels; byte-identical replay; model weights hash in the receipt; multi-model deep audit tier.

    Done when a third party re-runs a published Audit on a conforming node and gets the same bytes.

  7. 6

    Gate

    Planned

    Reproducible rebuilds of the top 500 PyPI packages, then npm; a pip/npm proxy that blocks mismatches; the diff-explainer agent.

    Done when replaying LiteLLM 1.107.0 through the proxy is blocked, with a plain-words reason.

  8. 7

    Leash

    Planned

    Hosted agents (patching, deploy, treasury) whose actions are receipted and action-bound.

    Done when every agent action on the public log has a receipt; a copied key cannot act.

  9. 8

    Network

    Planned

    Outside GPUs do the Audit and agent jobs; shares commit to paid job ids; slashing for wrong results.

    Done when shares on unpaid or random work earn nothing.

  10. 9

    Private verify

    Planned

    zk proof of a single tile.

    Done when a closed-source job verifies without revealing the code.

  11. —

    EVM expansion

    Planned (after Phase 2)

    Ethereum and BSC in Scanner, Shield and Audit.

    Done when Scanner and Shield return the same quality of report for an EVM contract as for a Solana one.

Roadmap · ByteGuard