# Roadmap

The execution roadmap is maintained in the root `TODO.md` checklist. This file
is the public summary of its delivery order.

## In Progress

- Delivery and security baseline: Docker, CI baseline, Argon2id, origin checks,
  local storage, WAL, and verified online backups.

## Next

1. Complete account lifecycle security: reset tokens, verification, optional
   TOTP, and auth-related end-to-end tests.
2. Build the school policy engine: configurable escalation, holidays, retention,
   communication locks, quiet hours, and module gates.
3. Consolidate navigation into canonical module owners and tabbed pages; build
   role-aware Bento dashboards without duplicate workflows.
4. Complete academic workflows: template cloning history, fast entry, grading
   finalization attribution, versioned reports, real PDF and ZIP exports.

## Later

- Communication policy and notification delivery completion.
- Calendar, leave, substitution, and operations consolidation.
- Learning Hub governance, AI safety, and exam middleware.
- Digital notebook annotation and PWA support.
- Emergency signage, compliance automation, and full E2E/accessibility release
  gates.

See `TODO.md` for detailed checkboxes, acceptance criteria, and blockers.