Add 21 files, update 16 files, rename 1 file

docs/ROADMAP.md

@@ -0,0 +1,31 @@
+# Roadmap
+
+The execution roadmap is maintained in the root `TODO.md` checklist. This file
+is the public summary of its delivery order.
+
+## In Progress
+
+- Delivery and security baseline: Docker, CI baseline, Argon2id, origin checks,
+  local storage, WAL, and verified online backups.
+
+## Next
+
+1. Complete account lifecycle security: reset tokens, verification, optional
+   TOTP, and auth-related end-to-end tests.
+2. Build the school policy engine: configurable escalation, holidays, retention,
+   communication locks, quiet hours, and module gates.
+3. Consolidate navigation into canonical module owners and tabbed pages; build
+   role-aware Bento dashboards without duplicate workflows.
+4. Complete academic workflows: template cloning history, fast entry, grading
+   finalization attribution, versioned reports, real PDF and ZIP exports.
+
+## Later
+
+- Communication policy and notification delivery completion.
+- Calendar, leave, substitution, and operations consolidation.
+- Learning Hub governance, AI safety, and exam middleware.
+- Digital notebook annotation and PWA support.
+- Emergency signage, compliance automation, and full E2E/accessibility release
+  gates.
+
+See `TODO.md` for detailed checkboxes, acceptance criteria, and blockers.