Skip to content

Roadmap

v0.1.0-alpha.3 — current closed-beta candidate

  • ✅ Repo scaffold, license, docs
  • ✅ Shared schemas (JSON Schema + Pydantic)
  • ✅ FastAPI backend with encrypted evidence storage, best-effort filtering where implemented, rules engine, Ollama text classifier, vision classifier, multimodal merge
  • ✅ SQLite with startup schema initialization and idempotent alpha patches
  • ✅ Windows agent (Python source — process/window detection, visible-screen screenshot capture + perceptual-hash dedup, tray, watchdog)
  • ✅ Screenshot-based collection with server-side OCR (replaced the earlier MV3 browser extension, now removed)
  • ✅ Dashboard (React + Vite + Tailwind) — login, dashboard, devices, risk feed, alert detail, settings
  • ✅ Linux server installer: install.sh + systemd + Docker Compose
  • ⚠️ Windows server installer (Inno Setup; source-tested, current build needs clean-machine requalification)
  • ⚠️ Windows child-device/all-in-one installer (Inno Setup; source-tested, unsigned, current build needs requalification)
  • ✅ Family-CA HTTPS, short-lived trust bundles, and CA pinning for separated mode
  • ✅ Broker-owned credentials/queue and authenticated per-session capture launch
  • ✅ Versioned parental consent, withdrawal/deletion, guided onboarding, child requests, and metadata-only daily digest
  • ✅ Parent-confirmed bounded Windows commands with audit/status reporting
  • ✅ Responsive alert-first dashboard with automated Chromium/axe journeys
  • ⚠️ Wine-based cross-build for Windows installers on Linux
  • ✅ GitHub release workflow with source archive and public alpha installer artifacts

v0.2 — Hardening + real-world alpha testing

  • [ ] First wave of family alpha testers (10–20 households)
  • [ ] False-positive / false-negative tracking dashboard
  • [ ] Improved filtering/redaction patterns based on alpha feedback
  • [ ] OCR region tuning for current Roblox, Discord, Minecraft UIs
  • [ ] Better on-screen-text coverage for TikTok, Snapchat web (where possible), Instagram web
  • [ ] SignPath.io OSS code-signing application
  • [ ] Submit to winget-pkgs and Chocolatey

v0.3 — Broader Enforcement

  • [x] Soft close of an exact process after explicit parent confirmation
  • [x] Hosts-file domain block with explicit parent confirmation and owned-state undo
  • [ ] Pi-hole integration
  • [ ] AdGuard Home integration
  • [ ] Time-of-day policy support
  • [ ] Per-child profile policy overrides

v0.4 — Notifications

  • [ ] Polished SMTP email templates
  • [x] Metadata-only daily digest by severity and family timezone
  • [ ] Optional webhook integration (Discord/Slack/Gotify/ntfy.sh — all parent-controlled endpoints)
  • [ ] Windows toast notifications on parent PC

v0.5 — Mobile companion (read-only)

  • [x] Responsive HTTPS web dashboard for parent-managed phones on the private LAN/VPN
  • [ ] Installable offline-capable PWA shell
  • [ ] Optional push notifications via ntfy.sh self-hosted

Platform roadmap

GuardianNode's child-device coverage is Windows-first during the alpha. The planned platform order after Windows hardening is:

  1. macOS child-device agent
  2. Android support
  3. iOS support

macOS, Android, and iOS are not current features. Mobile operating systems have different permission, store, background-processing, and privacy constraints, so Android and iOS support will require platform-specific design instead of a direct port of the Windows agent.

v1.0 — General availability

  • [ ] All MVP definition-of-done items complete (full install/pair/alert/review flow verified on clean machines)
  • [ ] EV code-signing certificate (sponsored or community-funded)
  • [x] First-time-user onboarding checklist in dashboard
  • [ ] Polished parent-facing documentation including printable quickstart card
  • [ ] Translations: Spanish, French, German, Brazilian Portuguese
  • [ ] Security audit (external, public report)

Post-1.0 ideas (not committed)

  • Kernel-mode driver for stronger tamper resistance (gated on EV cert)
  • Linux child-side agent (uncommon use case, but feasible)
  • Federated rule/category sharing among consenting deployments (without data sharing)
  • Detection-quality benchmarks against synthetic and academic corpora
  • Plugin SDK for community-built extractors and classifiers
  • Per-platform "trust score" so parents see at a glance how well GuardianNode covers each game/app
  • A "school counselor mode" that ships a heavily restricted dashboard for use with (not by) social workers in foster-care contexts — gated on explicit policy framework + legal review

What we'll never add

  • Cloud telemetry on by default
  • Stealth/hidden agent mode
  • System-wide raw keystroke capture
  • CSAM scanning (defer to law enforcement infrastructure)
  • Monitoring of adults without their explicit consent
  • A paid tier that gates safety features

How to influence the roadmap

  • Real-world reports via safety_concern issues weight heavily.
  • PRs ship if they meet the criteria in CONTRIBUTING.md.
  • For larger features, open a discussion before writing code.