Roadmap — deferred items

Living list of agreed-but-not-built work. Each item becomes a spec
(docs/superpowers/specs/) when picked up.

Admin console pages (nav entries removed 2026-07-03 until built)

• /admin/public/rag — Korpus RAG management (Milvus collections, re-ingest). Needs a new backend (Milvus admin + re-ingest trigger).
• /admin/public/persona + /admin/internal/persona — Prompt & Persona editors. Needs a new backend (edit the agent INSTRUCTIONS/persona at runtime).
• /admin/internal/schema — Skema DB browser (introspection UI over the agent's schema endpoints; /api/admin/databases/[name]/tables already exists — UI-only).
• ~~/admin/observe/threads — Threads & Sessions explorer~~ DONE 2026-07-07 (spec 2026-07-07-usability-hardening-design.md).
• /admin/shared/model-gateway + /admin/shared/provider — standalone pages; their functionality currently lives in /admin/settings sections.

Platform

• LLM request queue / priority gateway — decided 2026-07-04: deferred to a
  future GPU/LLM management service (needed when the 16x B200 cluster is
  shared). A tested thin-proxy design + implementation exists in git history
  (reverted at git revert of 3f4525f/5b2feed/1e4b4d7 — spec:
  2026-07-04-llm-gateway-design.md) and can be resurrected when contention
  is real. Callers already send X-Priority headers and route via
  MODEL_GATEWAY_URL/SYNTHESIS_GATEWAY_URL env vars, so insertion stays an
  env flip.

• Knowledge manual-entry export/backup — admin knowledge rows created via
  the console live only in the agent DB and are dropped by
  load_knowledge --recreate; add an export/restore path (see
  infra/OPS-NOTES.md caveat, 2026-07-03).

• SSO Kemenkumham — replaces only /api/auth/login; cookie/middleware/guard/staff_users stay (Plan D design).

• Public DB replica — flip PUBLIC_DB_URL, retire shared read-only MySQL creds (blocked: no replica exists).
• Production launch — chatbot-neo.val.id / chatbot-neo-staff.val.id via Hermes DNS once the project officially starts (see environment topology spec 2026-07-03).

Readiness review — deferred items (2026-07-07)

From the usability review. The top three (public accounts, abuse protection,
admin threads explorer) shipped 2026-07-07
(specs/2026-07-07-usability-hardening-design.md); these remain:

• Observability / audit emission — CONVENTIONS §5 mandates audit events on
  Redis Stream ahu.ai.audit; the emitting gateway is parked, so no
  platform-wide AI-call audit exists yet. Also no error monitoring
  (Sentry-equiv) or uptime/latency alerting. Highest-value next infra item.
• On-prem synthesis — synthesis still routes to external DashScope in some
  envs; CONVENTIONS §4 forbids external upstreams in prod. Blocked on B200 /
  gateway un-park. (Gateway was flipped for planning 2026-07-04.)
• Per-account chat history — Akun history currently reuses the doc-RAG
  /sessions backend; not keyed per public_users account. Needs a keying
  scheme once accounts see real use.
• Public account lifecycle — password reset + email verification; real
  Dukcapil NIK integration (MoU + Kemendagri creds — the check is a
  pass-through stub today).
• Turnstile widget — the server verify path ships dormant
  (TURNSTILE_SECRET); the composer-side Turnstile widget + site key wiring is
  the fast-follow when Cloudflare keys land.
• Answer-quality feedback loop — no thumbs-up/down → eval corpus on the
  public surface for iterating RAG quality.
• Stale operator docs — docs/SMOKE-TEST.md references the pre-split
  :8110 direct path and compose.dev.yaml; rewrite for the orchestrator +
  staging deploy loop.