Roadmap

Version	Theme	Status
v0.1–v0.4	Core Runtime + SPI + A2A + Middleware + Snapshot	Implemented
v0.5	Agents That Remember — Memory SPI + Embedding + Checkpoint/Rollback	Implemented
v0.6	Agents That Are Safe — Guardrail SPI + Interrupt/Resume	Implemented
v0.7.0	Guardrail SPI + MCP Security + Structured Exceptions	Implemented
v0.7.1	Tool Result Budget + Structured Observability	Implemented
v0.8	DurableExecution MVP + ResourceConstraint SPI + Cost-Aware Routing	Implemented
v0.9	Gap-Only Platform Capabilities + Channel SPI / Event Stream / OTel Exporter	Implemented
v0.10	Core Refactor Waves (event bus + capability-shaped configs + hook consolidation scaffolding)	Implemented
v0.10.1	Team orchestration experiment	Retired before public release; superseded by ADR-031
v1.0.0-RC1	SPI Stabilization	Released
v1.0.0-RC2	Docs + Examples Completeness	Released
v1.0.0	The Java Agent Standard	Released
v1.1.0	SPI Foundations	Released
v1.1.1	Kairo Code Rebrand	Released
v1.2	Plugin + Gateway + Cron + LSP + ACP	In Progress

v0.1–v0.4: Core Runtime (Implemented)

The foundation is in place: ReAct engine, SPI architecture, focused tools, context compaction, model providers (Anthropic, GLM, Qwen, GPT), A2A Protocol, Middleware Pipeline, Agent Snapshot, and Spring Boot integration.

v0.5: Agents That Remember (Implemented)

Memory SPI with embedding-based retrieval, persistent checkpoint/rollback, and durable execution support.

v0.6: Agents That Are Safe (Planned v0.6)

Guardrail SPI for input/output validation, interrupt/resume support, and enhanced permission management.

v0.7.0: Guardrail SPI + MCP Security (Implemented)

Guardrail SPI for 4-phase interception, MCP security with default deny-safe policy, structured error fields on KairoException, cost routing SPI, and security observability.

v0.7.1: Tool Result Budget (Implemented)

ToolResultBudget L0 pre-truncation, structured observability metadata on ToolResult, TOOL message observability fields, tool exception/policy path classification, and ADR-010.

v0.8: DurableExecution MVP + ResourceConstraint + Cost-Aware Routing (Implemented)

DurableExecutionStore SPI (InMemory + JDBC) for cross-process agent recovery with at-least-once semantics, ResourceConstraint SPI for unified execution enforcement (replacing scattered iteration/token/timeout checks), and CostAwareRoutingPolicy extending the v0.7 RoutingPolicy SPI with ModelTierRegistry and linear fallback chains.

v0.9: Gap-Only Platform Capabilities + Channel SPI / Event Stream / OTel Exporter (Implemented)

The v0.9.0 GA combines two tracks:

• Gap closure: default self-evolution runtime wiring verified at the behavior level, execution-vs-evolution event-domain regression guards, and kairo-core → evolution implementation import guards.
• Platform capability P0s: Channel SPI + LoopbackChannel reference + starter + TCK (ADR-021); transport-agnostic Event Stream core with SSE and WebSocket transports behind a deny-safe KairoEventStreamAuthorizer (ADR-018); KairoEventOTelExporter in kairo-observability bridging KairoEvent to the OTel logs API with domain filter + sampling ratio + key redaction, plus a dedicated opt-in starter (ADR-022).
• D5 deprecation closure: obsolete scheduling APIs were physically removed; interactive products own their task lifecycle and reuse the hook chain.

Release gate: mvn clean verify green from a clean checkout, 2,498 tests across 344 suites.

See the verification note: docs/roadmap/v0.9-release-verification.md (supersedes v0.9-gap-only-verification.md).

v0.10: Core Refactor Waves (Implemented)

This wave is intentionally platform-ergonomics first: introduce a unified in-process event facade (KairoEventBus), capability-shaped configuration records for cross-cutting concerns, a unified hook annotation (@HookHandler) while keeping legacy hook annotations working, and minimal SPI scaffolding (SkillStore, ProviderPipeline) for OTel exporters, Channel SPI, and product-owned collaboration.

Verification evidence: docs/roadmap/v0.10-core-refactor-verification.md.

v0.10.1: Team Orchestration Experiment (Retired)

This milestone tested a fixed Planner / Generator / Evaluator pipeline, persistent Team objects, a second coordinator, and a dedicated message bus. The experiment proved that independent contexts and bounded delegation are useful, but the extra execution model duplicated task lifecycle, permissions, cancellation, retry, and acceptance semantics while imposing role names before the work was understood.

Before public release, ADR-031 replaced it with one task-scoped collaboration model: stateless Agent Profiles, concrete Assignments, independent Agent Threads, and host-owned Acceptance Policies. The old Team APIs, modules, starters, coordinator, and detached spawn tools were removed rather than carried as compatibility surface.

v1.0.0-RC1: SPI Stabilization (Released)

Full kairo-api annotation pass — 119 @Stable + 78 @Experimental across 197 types. japicmp binary compatibility gate. kairo-core coverage uplift to 77.4%.

v1.0.0-RC2: Docs + Examples Completeness (Released)

API Reference docs (7 pages per locale), bilingual parity, ObservabilityExample, README audit.

v1.0.0: The Java Agent Standard (Released)

Enterprise security: kairo-security-pii module with PiiRedactionPolicy (EMAIL/PHONE/CREDIT_CARD/SSN/API_KEY/JWT), JdbcAuditEventSink (append-only audit), ComplianceReportCollector (per-run Markdown evidence). Published to Maven Central.

v1.1.0: SPI Foundations (Released)

Four new SPI packages: ExecutionSandbox (safe command execution), Workspace (path-traversal defense), TenantContext (multi-tenant propagation), Bridge (WebSocket IDE integration). All purely additive on v1.0 surface.

v1.1.1: Kairo Code Rebrand (Released)

ConsoleApprovalHandler cancellation safety (Mono.create + interruptible polling). Companion kairo-code rebrand from agentcode.

v1.2: Plugin + Gateway + Cron + LSP + ACP (In Progress)

Plugin SPI (Claude Code format compatible, 5 install sources). Gateway module for multi-channel routing. Cron scheduler. LSP diagnostics. Agent Client Protocol for editor integration.