TODO.md

TODO

Master engineering tracker. Link completed entries to a pull request, issue, test, deployment, or release note.

Critical — testnet

• Replace placeholder program IDs and verify key ownership.
• Produce reproducible Anchor and Pinocchio builds.
• Add end-to-end program, API, authentication, and marketplace tests.
• Document genesis, validator, RPC, faucet, and incident procedures.
• Complete security threat models and external audit scope.

Core protocol

• Formalize PVM boundaries and SVM compatibility guarantees.
• Specify PoG evidence, quorum, disputes, and duplicate prevention.
• Implement account-backed bridge replay protection.
• Implement certificate lifecycle and retirement rules.
• Establish oracle staleness, weighting, and circuit-breaker policies.

Platform

• Complete docs search, version selector, breadcrumbs, and generated table of contents.
• Expand RBAC tests and tenant isolation tests.
• Add audit-log export and retention controls.
• Complete CRM/ERP integration contracts.
• Add marketplace settlement reconciliation.

Infrastructure

• CI for Node, Rust, Anchor, Sui Move, schemas, migrations, and docs links.
• Container and Kubernetes deployment references.
• OpenTelemetry, metrics, alerts, dashboards, and SLOs.
• Backup, restore, and disaster-recovery exercises.

Long term

• Governance and treasury activation.
• Global validator and oracle operator programs.
• Advanced privacy and zero-knowledge research.
• Cross-chain liquidity and policy-aware asset transfers.