`docs/ROADMAP.md`

29 lines
# Roadmap

| # | Milestone | Window | Headline deliverables |
|---|---|---|---|
| 0 | **Scaffold** (current) | 1–2 days | Express+PG shell, 8-table schema, Gmail OAuth round-trip, receipt extractor v0, sort+density grid UI, dark/light, info@ email, gitified, pm2-supervised |
| 1 | **Foundation** | 6–8 weeks | org/user/admin model, full consent ledger, immutable audit log, doc store with object-store backend, Compliance Guardian middleware, Connector Security Gateway |
| 2 | **Ingestion MVP** | 8–10 weeks | Microsoft Graph (Outlook) connector, calendar connectors, PDF parser, OCR fallback, deduplication, refresh hooks, reminder engine |
| 3 | **Protection MVP** | 8–10 weeks | CPSC + NHTSA + FDA/openFDA + AccessGUDID + DailyMed ingest workers; recall_event normalization; recall_match engine using the canonical scoring pseudocode; warranty parser + coverage_policy; recall dashboard |
| 4 | **Claim MVP** | 6–8 weeks | claim_case + action_queue tables, letter composer with cited rules, evidence-packet PDF render, e-sign integration (DocuSign), merchant/manufacturer/issuer/regulator template library, send-approval flow |
| 5 | **Rights expansion** | 8–12 weeks | card-benefit corpus (Amex/Chase/Visa/Mastercard), airline-rights router (DOT/EU261/UK/Canada APPR/Brazil ANAC + Montreal Convention), service-guarantee graph (FTC + merchant policies), Plaid/Stripe/PayPal connectors |
| 6 | **Medical expansion** | 8–12 weeks | medical_asset + pharma_product tables, DME/HCPCS taxonomy, Medicare supplier-directory join, FDA Drug Safety Communications subscription, separate medical_consent_grant + HIPAA-grade deployment lane, BAA pipeline |
| 7 | **Full autonomy** | 10–14 weeks | standing-consent matrix, partial dispute filing, regulator complaint routing, MCP marketplace for user-supplied tools, mobile (iOS/Android), Apple EventKit, Apple Wallet pass output |

## Definition of done per milestone

- All schema migrations sequenced + applied + reversible
- Golden-file fixtures committed for every parser/extractor
- Adversarial test for prompt-injection on every new external content source
- Audit-log invariant holds (every external action ↔ exactly one audit row)
- Compliance section in `docs/COMPLIANCE.md` updated
- A reviewed-demo-video lands in `~/Videos/shipped-apps/`

## Out of scope (perpetually, until explicitly re-opened)

- Auto-buying anything (warranties, contracts, products)
- Auto-sending to any human without explicit per-action approval
- Scraping social platforms (Reddit / Nextdoor / IG DMs) for personal history
- Acting as a lawyer or a licensed insurance agent — drafts and education only