Repository navigation
Roadmap and project status #12
Description
Canonical roadmap: docs/ROADMAP.md
This issue is pinned and tracks the current phase status at a glance. The full plan, scope, and per-phase deliverables live in the document above; this issue just mirrors the headline status and links the relevant phase issues.
Current status — 2026-05-13
| Phase | What | Status |
|---|---|---|
| 0 | Workspace, CI, release pipeline, schemas, governance | ✅ done — #2, PR #3 |
| hotfix | release-plz to workflow_dispatch only |
✅ done — #5, PR #6 |
| 1A | Rules pack format, build script, first tier-1 rules | ✅ done — #4, PR #7 |
| 1B | Tier-1 engine + parallel orchestrator + JSON/SARIF/TTY renderers + CLI check |
✅ done — #8, PR #9 |
| 1C | Tier-2 AST analyzer for STRUCTURE.md |
⏳ planned |
| 1D | rustmanifest.toml config, explain subcommand, optional cache |
⏳ planned |
| 1E | Eval corpus and precision/recall measurement | ⏳ planned |
| 2 | MCP server (stdio): tools, resources, prompts | ⏳ planned |
| 3 | Streamable HTTP + OAuth 2.1, clippy delegation as tier-3 | ⏳ planned |
| 4 | Sampling and elicitation | ⏳ planned |
| 5 | GitHub Action, LSP server, editor docs | ⏳ planned |
| 6 | Governance, community, public release readiness | ⏳ planned |
What you can use today
cargo run -p rustmanifest-cli -- check src/ # human-readable
cargo run -p rustmanifest-cli -- check src/ --format json # machine-readable
cargo run -p rustmanifest-cli -- check src/ --format sarif # CI ingestion (GitHub code scanning)
Tier-1 rules currently bundled: hardcoded credentials, SQL injection, command injection. Patterns that overlap with clippy (panic in production, Vec::new() without capacity) were intentionally removed — they will be delegated to clippy in Phase 3, not reimplemented.
How to contribute
- For a new rule: see the
Rule proposalissue template. - For a non-rule feature: see the
Feature requesttemplate. - For a bug: see the
Bug reporttemplate. - For anything cross-cutting (new tier, transport, protocol change): an RFC under
docs/RFCS/usingdocs/RFCS/0000-template.md.
Security issues: never in a public issue — use Security Advisories.
Activity