1 files changed, 243 insertions, 0 deletions
diff --git a/downloads/system/roadmap.html b/downloads/system/roadmap.html
new file mode 100644
index 0000000..1c16aa1
--- /dev/null
+++ b/downloads/system/roadmap.html
@@ -0,0 +1,243 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover">
+<meta name="theme-color" content="#000000">
+<title>newOS4 — Roadmap</title>
+<style>
+* { box-sizing: border-box; margin: 0; padding: 0; }
+html, body {
+  background: #000;
+  color: #e0e0e0;
+  font-family: 'SF Mono', 'Roboto Mono', Consolas, Menlo, monospace;
+  font-size: 16px;
+  line-height: 1.6;
+  -webkit-text-size-adjust: 100%;
+  padding: env(safe-area-inset-top) env(safe-area-inset-right) env(safe-area-inset-bottom) env(safe-area-inset-left);
+}
+body { padding: 16px; }
+h1 { color: #fff; font-size: 1.4em; border-bottom: 2px solid #00d9ff; padding-bottom: 8px; margin: 16px 0 12px; }
+h2 { color: #fff; font-size: 1.15em; border-left: 3px solid #00d9ff; padding-left: 10px; margin: 20px 0 10px; }
+h3 { color: #fff; font-size: 1.0em; margin: 14px 0 8px; }
+h4 { color: #aaa; font-size: 0.95em; margin: 10px 0 6px; }
+p { margin: 8px 0; }
+ul, ol { margin: 8px 0 8px 20px; }
+li { margin: 4px 0; }
+code {
+  background: #0a0a0a;
+  color: #7fdc7f;
+  padding: 2px 6px;
+  border-radius: 3px;
+  font-size: 0.9em;
+}
+pre {
+  background: #0a0a0a;
+  border: 1px solid #222;
+  border-radius: 4px;
+  padding: 12px;
+  overflow-x: auto;
+  margin: 10px 0;
+  -webkit-overflow-scrolling: touch;
+}
+pre code { background: none; padding: 0; }
+table {
+  width: 100%;
+  border-collapse: collapse;
+  margin: 10px 0;
+  display: block;
+  overflow-x: auto;
+  -webkit-overflow-scrolling: touch;
+  white-space: nowrap;
+}
+th, td {
+  border: 1px solid #222;
+  padding: 10px 8px;
+  text-align: left;
+  min-height: 44px;
+}
+th { background: #0a0a0a; color: #fff; font-weight: 600; }
+tr:nth-child(even) td { background: #050505; }
+.pill {
+  display: inline-block;
+  padding: 3px 8px;
+  border-radius: 10px;
+  font-size: 0.8em;
+  font-weight: 600;
+}
+.pill-shipped { background: #003a3a; color: #00d9ff; border: 1px solid #00d9ff; }
+.pill-next { background: #3a3000; color: #ffd700; border: 1px solid #ffd700; }
+.pill-plan { background: #002a3a; color: #5eb3d6; border: 1px solid #5eb3d6; }
+.pill-p0 { background: #3a0000; color: #ff6b6b; border: 1px solid #ff6b6b; }
+.pill-p1 { background: #3a1a00; color: #ffa500; border: 1px solid #ffa500; }
+details { margin: 8px 0; }
+summary {
+  padding: 12px;
+  background: #0a0a0a;
+  border: 1px solid #222;
+  border-radius: 4px;
+  cursor: pointer;
+  min-height: 44px;
+  font-weight: 600;
+}
+summary::-webkit-details-marker { color: #00d9ff; }
+details[open] summary { border-bottom-left-radius: 0; border-bottom-right-radius: 0; }
+details > div { padding: 12px; border: 1px solid #222; border-top: none; border-radius: 0 0 4px 4px; }
+blockquote { border-left: 3px solid #00d9ff; padding: 8px 12px; margin: 10px 0; background: #050505; }
+hr { border: none; border-top: 1px solid #222; margin: 20px 0; }
+.meta { color: #888; font-size: 0.85em; }
+.sprint { padding: 12px; border: 1px solid #222; border-radius: 6px; margin: 10px 0; background: #050505; }
+.sprint-shipped { border-color: #00d9ff; }
+.sprint-next { border-color: #ffd700; }
+.bar { display: inline-block; height: 8px; background: #00d9ff; border-radius: 4px; vertical-align: middle; }
+.bar-empty { background: #222; }
+@media print {
+  body { background: #fff; color: #000; }
+  h1, h2, h3, h4 { color: #000; }
+  pre, code, th, td { background: #f5f5f5; color: #000; border-color: #ccc; }
+  .sprint { border-color: #ccc; background: #f9f9f9; }
+}
+</style>
+</head>
+<body>
+
+<h1>newOS4 Roadmap</h1>
+<p class="meta">Updated 2026-07-05 · 5 sprints · 1 SHIPPED · 4 PLANNED</p>
+
+<details open>
+<summary>📑 Sprints</summary>
+<div>
+<a href="#s1">Sprint 1: v4.5.96 (SHIPPED)</a><br>
+<a href="#s2">Sprint 2: v4.5.97 (NEXT)</a><br>
+<a href="#s3">Sprint 3: v4.5.98 (PLANNED)</a><br>
+<a href="#s4">Sprint 4: v4.5.99 (PLANNED)</a><br>
+<a href="#s5">Sprint 5: v4.6.0 (PLANNED)</a><br>
+<a href="#velocity">Sprint Velocity</a><br>
+<a href="#risks">Risk Register</a><br>
+<a href="#kpis">KPI Targets</a>
+</div>
+</details>
+
+<div class="sprint sprint-shipped" id="s1">
+<h2>Sprint 1 — v4.5.96 <span class="pill pill-shipped">SHIPPED</span></h2>
+<p class="meta">Completed 2026-07-05 · 2 review sessions · Browser-verified</p>
+<h4>Scope</h4>
+<ul>
+<li>Fix 8 OrchestratorModule bugs (agent spawn leak, retry loop, lease race, etc.)</li>
+<li>Fix 10 ShellModule bugs (parser, pipes, redirects, security gate)</li>
+<li>Add 7 cross-cutting rules (R1–R7) to program specs</li>
+<li>Create <code>module-code-review</code> skill</li>
+</ul>
+<h4>Changelog</h4>
+<ul>
+<li>✅ BUG-001 → BUG-018 all FIXED</li>
+<li>✅ ShellModule promoted to Tier 2 with full spec</li>
+<li>✅ Browser-verified at 375px (mobile) and 1280px (desktop)</li>
+<li>✅ Reviewer (kimi-k2.7-coder) signed off</li>
+</ul>
+<h4>Velocity</h4>
+<p>~12 turns per 8-bug batch. ~1.5 turns/item.</p>
+</div>
+
+<div class="sprint sprint-next" id="s2">
+<h2>Sprint 2 — v4.5.97 <span class="pill pill-next">NEXT</span></h2>
+<p class="meta">Target: 2026-07-12 · 1 week · Backlog cleanup + critical re-patch</p>
+<h4>Scope</h4>
+<ul>
+<li><span class="pill pill-p0">P0</span> Re-apply LeaseModule <code>canExecute()</code> gate + boot-time assert</li>
+<li><span class="pill pill-p0">P0</span> Fix VaultMind init race with Hyperliquid key</li>
+<li><span class="pill pill-p1">P1</span> Fix <code>list_files</code> loop threshold (currently 100K iter crash)</li>
+<li><span class="pill pill-p1">P1</span> Fix <code>reload_module</code> infinite loop guard</li>
+<li><span class="pill pill-p1">P1</span> Fix <code>run_command</code> timeout kill (orphaned procs)</li>
+<li><span class="pill pill-p1">P1</span> ShellModule: cleanup <code>__pipebuf__</code> after pipe completion</li>
+<li><span class="pill pill-p1">P1</span> ShellModule: <code>$VAR</code> substitution — sanitize env values</li>
+<li><span class="pill pill-p2">P2</span> VFS: <code>.trash</code> dir auto-prune (TTL 7d)</li>
+<li><span class="pill pill-p2">P2</span> Cron: restore 5 missing jobs</li>
+</ul>
+<h4>Acceptance</h4>
+<ul>
+<li>All P0s closed with boot-time self-test</li>
+<li>No <code>__pipebuf__</code> files in VFS root after test suite</li>
+<li>Cron jobs survive module reload</li>
+</ul>
+</div>
+
+<div class="sprint" id="s3">
+<h2>Sprint 3 — v4.5.98 <span class="pill pill-plan">PLANNED</span></h2>
+<p class="meta">Target: 2026-07-19 · Observability + Predictor</p>
+<ul>
+<li>Add <code>get_usage_stats()</code> per-model breakdown (already in API, wire to UI)</li>
+<li>Add <code>predict_task()</code> to terminal <code>precmd</code> hook</li>
+<li>Token-budget guardrail (warn at 80%, hard-stop at 95%)</li>
+<li>Dashboard page: real-time token rate, model latency, error rate</li>
+<li>Session terminal scrollback (last 200 turns)</li>
+</ul>
+</div>
+
+<div class="sprint" id="s4">
+<h2>Sprint 4 — v4.5.99 <span class="pill pill-plan">PLANNED</span></h2>
+<p class="meta">Target: 2026-07-26 · Security Hardening</p>
+<ul>
+<li><strong>S4.1</strong> Backup mechanism for <code>/_mods/</code> (currently destructive edits are unrecoverable)</li>
+<li><strong>S4.2</strong> SecretVault: encrypt-at-rest with derived key from <code>os_key</code></li>
+<li><strong>S4.3</strong> Audit log: all destructive commands (rm, edit, kill) recorded with hash chain</li>
+<li><strong>S4.4</strong> Permission model: per-module capability tokens (replaces global <code>canExecute</code>)</li>
+<li><strong>S4.5</strong> Loop detection: token-usage anomaly auto-save (lesson from loop-lesson-1783274464602)</li>
+</ul>
+</div>
+
+<div class="sprint" id="s5">
+<h2>Sprint 5 — v4.6.0 <span class="pill pill-plan">PLANNED</span></h2>
+<p class="meta">Target: 2026-08-02 · Major · Agent activation + Memory expansion</p>
+<ul>
+<li><strong>A.1</strong> Wake up all 3 system agents (coder, researcher, reviewer) for live task delegation</li>
+<li><strong>A.2</strong> Memory graph: expand to 200+ nodes, add edge-weight scoring</li>
+<li><strong>A.3</strong> WorldModel self-query: agent asks "what changed?" before action</li>
+<li><strong>A.4</strong> VaultMind: production mainnet connection (tested in v4.5.99)</li>
+<li><strong>A.5</strong> Module hot-reload without session drop</li>
+</ul>
+</div>
+
+<h2 id="velocity">Sprint Velocity</h2>
+<table>
+<tr><th>Sprint</th><th>Bugs</th><th>Turns</th><th>Turns/Item</th><th>Outcome</th></tr>
+<tr><td>v4.5.95 (prev)</td><td>11</td><td>18</td><td>1.6</td><td>SHIPPED</td></tr>
+<tr><td>v4.5.96 (current)</td><td>18</td><td>22</td><td>1.2</td><td>SHIPPED ✅</td></tr>
+<tr><td>v4.5.97 (target)</td><td>9</td><td>15</td><td>1.7</td><td>NEXT</td></tr>
+<tr><td>v4.5.98 (target)</td><td>5</td><td>12</td><td>2.4</td><td>PLANNED</td></tr>
+</table>
+<p class="meta">Velocity improving (1.6 → 1.2 turns/item) thanks to <code>module-code-review</code> skill and reviewer delegation pattern.</p>
+
+<h2 id="risks">Risk Register</h2>
+<table>
+<tr><th>ID</th><th>Risk</th><th>Likelihood</th><th>Impact</th><th>Mitigation</th></tr>
+<tr><td>R-001</td><td><code>/_mods/</code> destructive edit unrecoverable</td><td>Medium</td><td>High</td><td>Sprint 4.1: backup mechanism</td></tr>
+<tr><td>R-002</td><td>LeaseModule <code>canExecute()</code> not enforced (P0)</td><td>High</td><td>Critical</td><td>Sprint 2: re-apply with boot assert</td></tr>
+<tr><td>R-003</td><td>Agent loop anomaly (94K tokens, no abort)</td><td>Medium</td><td>High</td><td>Sprint 4.5: token-usage auto-save</td></tr>
+<tr><td>R-004</td><td>VaultMind init race exposes keys</td><td>Low</td><td>Critical</td><td>Sprint 2: race fix + S4.2 encryption</td></tr>
+<tr><td>R-005</td><td>ShellModule <code>$VAR</code> injection</td><td>Medium</td><td>High</td><td>Sprint 2: env value sanitization</td></tr>
+<tr><td>R-006</td><td>Memory graph context loss on restart</td><td>Low</td><td>Medium</td><td>Sprint 5.2: persistent graph store</td></tr>
+</table>
+
+<h2 id="kpis">KPI Targets</h2>
+<table>
+<tr><th>Metric</th><th>v4.5.95</th><th>v4.5.96</th><th>v4.5.97</th><th>v4.6.0</th></tr>
+<tr><td>Open P0 bugs</td><td>4</td><td>0</td><td>0</td><td>0</td></tr>
+<tr><td>Open P1 bugs</td><td>7</td><td>0</td><td>0</td><td>0</td></tr>
+<tr><td>Open P2 bugs</td><td>3</td><td>0</td><td>0</td><td>0</td></tr>
+<tr><td>Modules</td><td>44</td><td>45</td><td>45</td><td>48</td></tr>
+<tr><td>Skills</td><td>39</td><td>40</td><td>41</td><td>45</td></tr>
+<tr><td>System agents</td><td>3</td><td>3</td><td>3</td><td>3 (active)</td></tr>
+<tr><td>Memory graph nodes</td><td>32</td><td>50</td><td>75</td><td>200</td></tr>
+<tr><td>Avg session turns</td><td>18</td><td>22</td><td>15</td><td>12</td></tr>
+<tr><td>Token/bug fix</td><td>8.5K</td><td>5.2K</td><td>4.0K</td><td>3.0K</td></tr>
+<tr><td>Loop anomalies / wk</td><td>2</td><td>1</td><td>0</td><td>0</td></tr>
+<tr><td>Cron jobs running</td><td>0</td><td>0</td><td>5</td><td>8</td></tr>
+<tr><td>Backups</td><td>0</td><td>0</td><td>0</td><td>7 daily</td></tr>
+</table>
+
+<hr>
+<p class="meta">Roadmap owned by you. Edit <code>/system/roadmap.md</code> or this HTML. Both stay in sync.</p>
+
+</body>
+</html>