Development Roadmap

NXD follows a structured, evidence-backed implementation plan tracked in docs/plans/active-work.md.

Workstream Milestones

Phase 1: Core Architecture & Protocol Contracts (Completed)

• Canonical JSON model and evalConfiguration pipeline.
• Provider platform port and linked Rust providers (PVE, PBS, VMware, Nix, Headscale, Identity).
• SOPS/age secret mediation and host identity resolution.
• Unified SSH multiplexing transport (nxd-transport).

Phase 2: Consumer Migration & Cutover (Active)

• Headscale Tailnet plane auto-attachment deduction.
• Relocate consumer trust PEMs under nxd/certs/.
• Corosync QDevice witness hostname resolution and pinning.
• NXD documentation platform assembly (nxd.lamhub.com).
• Complete WSL build, import, and recovery verification (LAMT-03).
• Complete disposable PBS appliance lifecycle (LAMT-04).

Phase 3: Performance & Release Gate (Next)

• Batched Nix target output evaluation (selected-target-output-eval).
• Concurrent provider observe and plan execution.
• Release candidate validation gate (just release-check).