= RSR Template Repository Roadmap
:toc:
:sectnums:

== Current Status (v0.2.0)

=== Completed

[cols="1,2,1"]
|===
|Component |Description |Status

|RSR Compliance
|Core RSR files (.editorconfig, Justfile, STATE.a2ml, etc.)
|100%

|Security Hardening
|SHA-pinned GitHub Actions, HTTPS-only, no weak crypto
|100%

|CI/CD Workflows
|CodeQL, Scorecard, security checks, quality gates
|100%

|Package Management
|Guix primary (guix.scm), Nix fallback (flake.nix)
|100%

|Documentation
|README, CONTRIBUTING, SECURITY, basic docs
|50%
|===

=== In Progress

* Expand documentation with more examples
* Language-specific template variants

== Roadmap

=== Phase 1: Foundation (v0.1 - v0.2) - COMPLETE

* [x] Initial RSR-compliant structure
* [x] Core A2ML files (STATE.a2ml, META.a2ml, ECOSYSTEM.a2ml) — migrated from SCM 2026-04-12
* [x] Justfile with 50+ recipes
* [x] GitHub workflows (CodeQL, Scorecard, quality checks)
* [x] SHA-pinned all GitHub Actions for supply chain security
* [x] Nix flake fallback (flake.nix)

=== Phase 2: Templates (v0.3)

* [ ] Language-specific template branches:
** Rust template (Tier 1)
** ReScript template (Tier 1)
** Elixir template (Tier 1)
** Ada/SPARK template (Tier 1)
* [ ] Example CI/CD configurations per language
* [ ] Pre-commit hooks configuration

=== Phase 3: Tooling (v0.4)

* [ ] RSR compliance checker CLI tool
* [ ] Template scaffolding command (`just scaffold <lang>`)
* [ ] Automated STATE.a2ml generation
* [ ] Badge generation from STATE.a2ml

=== Phase 4: Ecosystem Integration (v0.5)

* [ ] Integration with elegant-STATE tooling
* [ ] Guix channel publishing automation
* [ ] Cross-repo validation workflows
* [ ] Dependency graph visualization

=== Phase 5: Production Ready (v1.0)

* [ ] Full documentation suite
* [ ] Video tutorials
* [ ] Migration guides from npm/pip/etc
* [ ] Enterprise deployment patterns

== Security Roadmap

=== Completed

* [x] All GitHub Actions SHA-pinned
* [x] No MD5/SHA1 for security purposes
* [x] HTTPS-only enforcement
* [x] TruffleHog secret scanning
* [x] OSSF Scorecard integration
* [x] CodeQL analysis

=== Planned

* [ ] SLSA Level 3 compliance
* [ ] Sigstore signing integration
* [ ] Reproducible builds verification
* [ ] Software Bill of Materials (SBOM) automation

== Contributing

See link:../CONTRIBUTING.md[CONTRIBUTING.md] for how to contribute to this roadmap.

== References

* https://github.com/hyperpolymath/rhodium-standard-repositories[RSR Framework]
* https://github.com/hyperpolymath/elegant-STATE[elegant-STATE]
* https://rhodium.sh[Rhodium Standard Documentation]
