Roadmap

The execution roadmap is maintained in the root TODO.md checklist. This file is the public summary of its delivery order.

In Progress

Delivery and security baseline: Docker, CI baseline, Argon2id, origin checks, local storage, WAL, and verified online backups.

Complete account lifecycle security: reset tokens, verification, optional TOTP, and auth-related end-to-end tests.
Build the school policy engine: configurable escalation, holidays, retention, communication locks, quiet hours, and module gates.
Consolidate navigation into canonical module owners and tabbed pages; build role-aware Bento dashboards without duplicate workflows.
Complete academic workflows: template cloning history, fast entry, grading finalization attribution, versioned reports, real PDF and ZIP exports.

Communication policy and notification delivery completion.
Calendar, leave, substitution, and operations consolidation.
Learning Hub governance, AI safety, and exam middleware.
Digital notebook annotation and PWA support.
Emergency signage, compliance automation, and full E2E/accessibility release gates.

See TODO.md for detailed checkboxes, acceptance criteria, and blockers.