Roadmap

Shipping toward 1.0, one release at a time

Each minor release has one theme. Items come from the public backlog, numbered so you can follow a discussion from here to the code. Dates are intentions, not promises.

{{ relStatus }}

Shipped since 0.34Live from GitHub releases; the bands below are the plan as written.Full changelog →
0.23 – 0.26Shipped · October 2026Seen, fair and sealed
  • #92
    Distributed tracing ShippedOpenTelemetry spans from the request through the saved query to the database, never holding a value or a row. 0.23.
  • #93
    Security headers on every response ShippedCSP, nosniff, no-referrer and HSTS on all three servers. 0.23.
  • #94
    Per-key limits on concurrency, time and rows ShippedEnforced across instances through Redis. 0.24.
  • #95
    Usage quotas ShippedCalls and rows per day or month, with headers that say what is left. 0.24.
  • #96
    Tamper-evident audit log, streamed to your SIEM ShippedA signed hash chain, verified in one command; syslog over mutual TLS or OTLP. 0.25.
  • #100
    A Helm chart ShippedLocked-down pods, installed and upgraded under load on a real cluster in CI. 0.26.
0.27 – 0.29Shipped · October 2026Run it like the rest of your platform
  • #97
    Configuration as code Shippedconfig export, diff and apply, all or nothing, reviewed in a pull request. 0.27.
  • #98
    Secrets managers and short-lived credentials ShippedFiles, Vault and AWS Secrets Manager; Vault database leases and RDS IAM tokens. 0.28.
  • #101
    Where data goes, and FIPS ShippedEvery place data is kept or sent, a person's data erased on request, FIPS-approved cryptography. 0.29.
0.30 – 0.34Shipped · October 2026Ready to freeze
  • ADR 17
    Eight features graduate ShippedDescriptions, agent usage, quotas, configuration as code, MCP OAuth, Console SSO, agent writes and the Helm chart, each after a security review. 0.30.
  • ADR 18
    Signed releases ShippedImage and chart signed keyless with cosign, with provenance and an SBOM. 0.31.
  • ADR 19
    SIEM stream stable ShippedTested on every push against rsyslog, syslog-ng and the OpenTelemetry Collector. 0.32.
  • ADR 20
    A dedicated event log ShippedEvery run written to its own log with stable ids, kept for a set time; subscription filters and metrics on the events server. 0.33.
  • ADR 21
    Live events and Vault secrets stable ShippedBoth graduate after a security review. AWS secrets stay experimental until tested against AWS. 0.34.
0.35 – 0.42Shipped · October 2026Open, for teams and agents
  • —
    MongoDB graduates ShippedTested against a real server in CI, with streaming exports. 0.37.
  • #99
    Workspaces ShippedSeveral teams on one server, each with its own connections, queries, keys and roles. Experimental. 0.38.
  • —
    Apache-2.0 ShippedOpen source, from FSL-1.1-MIT; the code unchanged. 0.39.
  • —
    MCP for agents ShippedA Console screen for MCP, per-query exposure, describe_table, and semantic search (experimental). 0.40.
  • ADR 26
    Trino ShippedEvery catalog behind a Trino endpoint, Iceberg, Delta and Hive included, as one connection. Experimental. 0.41.
  • —
    Performance ShippedMasked calls as fast as plain ones, and an opt-in metadata cache; measured. 0.42.
0.43 – 0.45Shipped · October 2026Fewer round trips, then Rust, then every run
  • ADR 27
    Fewer round trips per query ShippedOne round trip a call to PostgreSQL with the metadata cache, two to MySQL. 0.43.
  • #102
    A Rust data plane for saved queries ShippedPython decides, Rust serves: about 8× the calls a second per core on lookups, measured. Experimental. 0.44.
  • ADR 29
    A store for runs at that rate ShippedRun history, the event log and usage in ClickHouse: every run recorded at the data plane's rate, 13 bytes each. Experimental. 0.45.
  • —
    Shipping the data plane PlannedThe Docker image, the Helm chart, and which forwarded calls to serve next.
1.0.0-rc1NextThe freeze
  • rc1
    Freeze, then real upgradesExternal users upgrade real stores and report back before 1.0.0.

What 1.0 means

The version number becomes a contract. Everything listed in the compatibility promise freezes; experimental features graduate on written terms or stay labelled.

  • ✓Management API v1 — the last change before the freeze (named administrators) shipped in 0.16.
  • ✓Deprecation policy, experimental label, support matrix — 0.14.
  • ✓Deployment shape decided — one instance, or several on PostgreSQL + Redis, both tested in CI. 0.15.
  • ✓Every 0.x store upgrades or refuses clearly, tested in CI with real fixtures.
  • ✓Graduate or label — MCP OAuth, descriptions, agent usage, quotas, Console SSO, agent writes, configuration as code and the Helm chart graduated in 0.30; the SIEM stream in 0.32; live events and secrets from files and Vault in 0.34. H2, JDBC, MongoDB, tracing and AWS secrets stay labelled experimental.
  • ✓Signed releases — image and chart signed, with provenance and an SBOM. 0.31.
  • ✓Live events graduate — on the dedicated event log (0.33), stable in 0.34.
  • ○AWS secrets tested against AWS, then they graduate or stay labelled.

Further out, and open for discussion

Written up in the backlog with the reasoning for and against. If one of these is what you need, say so on the issue; it moves things.

#77Cloud data warehousesSnowflake, BigQuery, Redshift, Databricks SQL as native types.
#83Lakehouse tablesIceberg and Delta Lake tables read natively, through DuckDB. Today they're served through Trino's catalogs.
#82SnapshotsServe a slow saved query from a scheduled copy of its result.
#60Change data captureGoverned row-change events via Debezium.