Latch 1.0.0 is the first stable release. The portable evidence pipeline is implemented and host-tested, and one configuration (ESP32) is physically HIL-qualified with 23 additional targets emulator-tested under Renode. Latch is not yet an LTS line; the remaining qualification and review gates are tracked in docs/known-limitations.md. The next phase is to turn more platform claims into reproducible physical hardware evidence.
This roadmap is directional rather than a promise of dates. Issues and release notes are the source of truth for committed work.
- Keep the host capture-and-decode demo working on Linux, macOS, and Windows.
- Keep the machine-readable decoder and copy-paste CMake consumers stable in CI.
- Document the smallest useful retained-RAM and Flash integrations.
- Keep Arduino, ESP-IDF Component Manager, PlatformIO, Zephyr and Rust package metadata version-locked and validate their source layouts before publication.
- Record board, revision, SDK, compiler, linker script, and test procedure for each result.
- Exercise real HardFault/trap, watchdog, brownout, corrupt-stack, nested-fault, and interrupted-Flash scenarios.
- Promote a platform from “integration boundary” to “qualified example” only when its evidence is reproducible.
- Turn the new Nordic, NXP, Microchip, TI, Silicon Labs and RV64 integration boundaries into board-specific HIL reports instead of broad compatibility claims.
- Keep LEP, stream/ACK, compression and AEAD fuzzers seeded from public vectors.
- Expand cross-language and negative compatibility vectors.
- Make spool inspection and recovery behavior easier to test outside firmware.
- Obtain independent review of envelope cryptography, nonce/key provisioning, redaction, replay behavior, and secure-element adapters.
- Document measured stack, code-size, and timing costs for representative profiles.
- Keep security claims narrower than the evidence.
v0.2.0is the first public-preview baseline.- Publish small, reviewable releases with changelog entries and generated provenance.
- Use the version-parity gate and release procedure before the next tag; registry publication remains separately approved and manual.
- Keep
good first issuework curated and close the loop with contributors quickly.
The highest-value outside contributions are:
- real board and toolchain qualification reports;
- FreeRTOS, Zephyr, ESP-IDF, and bare-metal examples;
- decoder, fuzzing, and packaging improvements;
- reviews from people who have debugged retained state, brownouts, Flash interruption, or nested faults in production devices.
See good first issue and help wanted.
Latch does not aim to own:
- a hosted observability dashboard;
- the product's scheduler, allocator, bootloader, network stack, or Flash driver;
- automatic capture of arbitrary memory without an explicit policy;
- certification for hardware that has not been tested;
- source minification as a substitute for compiler and linker optimization.