Where each milestone actually stands.
We keep the roadmap in the same repository as the architecture and the decision records. This is the public view of it. A milestone is “live” only when it is verified in production, not when the code merged.
Foundations
Keycloak auth, Postgres 17, per-company row-level isolation, self-hosted secrets vault, CI. Still being hardened: off-host backup copies are the open item.
- Keycloak SSO
- RLS enforced at boot
- Infisical vault
Onboarding
A founder can validate an idea and create a company document. The 8-step wizard has been live since June; the VC audit was verified in production in August. Async audits are in progress.
- 8-step wizard
- VC audit · FUND/WATCH/PASS
- Dual-AI PDF report
Operate
The Free-tier value: a CEO agent in chat, knowledge wiki and memory, teams and roles, provider setup and router policy. Epic closed.
- CEO chat
- Git-backed wiki
- Teams · roles · org chart
- Model router
Build — templates
The nine-stage template pipeline exists end to end with a founder approval gate. Live *.synapse.app DNS/TLS, real CI runners and CEO-review automation are deferred. 4 bundled templates against a target of 40.
- Pipeline built
- Approval gate
- Hosting deferred
Monetise
Stripe subscription checkout, plan management and Stripe Connect payouts are merged. Tier caps are entitlements, not yet hard-enforced. Legal set is draft v0.1 pending counsel.
- Stripe checkout
- Stripe Connect
- Caps not enforced
Scale builds
Modular (Mode 2) and from-scratch (Mode 3) build pipelines, founder-owned compute targets and the multi-founder cap table are merged but not yet verified in production.
- Mode 2 · Mode 3
- Own infra targets
- Cap table
Marketplace
Listings and browse are live. Business transfer with CEO continuity is built and gated off in production until the third-party PII scrub passes Security.
- Listings live
- Transfer flagged off
Enterprise
On-prem Mode 1 bundle boots but is not yet an installable, signed release. B2B CEO protocol runs inside one deployment only. Compliance control framework live; entitlements work open.
- On-prem bundle
- Compliance checks
- B2B protocol
External control plane (MCP)
Synapse is an MCP server: 33 tools, OAuth 2.1, propose-never-approve. Discovery and the endpoint answer in production. Open item: token audience enforcement.
- 33 tools
- Claude Desktop · Code · claude.ai
CEO orchestrator
The CEO's own tool loop with a configurable model chain and cheap local inference for routine turns. Driving chat since September. Durable sessions and a second provider key are in progress.
- Tool loop live
- Model chain
- Durable sessions
Native CRM
Contacts, companies, leads, deals, tasks, notes, activities, website lead capture and retention — in production since September. A capture key links to your company website with one checkbox. Email sequences and CRM-over-MCP follow.
- CRM live
- Lead capture → website
- MCP tools next
Integrations (MCP Universe)
The connector layer is in production at mcp.catalation.com since 30 September: per-company MCP endpoints, a control plane, a shared catalogue with Pipedrive and Jira, console-managed credentials and AI engines, connectors requested from an uploaded spec. Connecting a connector from the cabinet and CEO turns that use it are merged but not yet verified with a customer company.
- Gateway live
- Pipedrive · Jira
- Cabinet connection · beta
Customer billing & personal areas
Shipped 25 October: one multi-company billing service with a customer personal area at my.catalation.com/{slug}, branded sign-in realms at id.catalation.com, a founder admin at billing.catalation.com, and a Customer billing card in the cabinet. Invoice- and balance-based in v1; card payment inside the portal is a later phase.
- Portal · admin · identity
- Enable per company
- No card payment yet
What we're not promising yet.
An inbox for the company
Mailboxes per plan tier, a threaded inbox with sandboxed HTML, compose and reply with a daily quota. Running for our own company since 30 September; inbound sync stays off for others until the quarantine hardening clears Security review.
A website that writes itself
Every company already has a public site published from its repo, on its own domain if it wants one. The agent that generates its content is being built.
Agents on compute you own
Enrol a machine with one line and a single-use code; the platform leases issues to it by capability. Claude and a local open-weight executor are live as worker kinds; Codex and Gemini kinds are built and wait on Security review and a release decision.