# Roadmap

## Current: v0.1 — Foundation

- ✅ Multi-phase Romance Scan methodology
- ✅ NetworkX-based knowledge graph
- ✅ Attack library with 21+ YAML vectors
- ✅ LangChain and CrewAI adapters
- ✅ Rich CLI with HTML/Markdown/JSON reports
- ✅ Tool chain analysis (30+ dangerous patterns)
- ✅ Skill CVE database (15 seed CVEs)

## Next: v0.2 — Intelligence

- [ ] LLM-powered attack generation — Use an LLM to craft context-aware attacks
- [ ] Adaptive campaigns — Adjust attack strategy based on knowledge graph state
- [ ] MCP adapter — First-class Model Context Protocol support
- [ ] Bedrock adapter — Amazon Bedrock agent testing
- [ ] Expanded Skill CVE database — 50+ CVEs with community submissions

## Future: v0.3 — Enterprise

- [ ] CI/CD integration — GitHub Action for automated agent security scanning
- [ ] Policy engine — Define and enforce agent security policies
- [ ] Multi-agent testing — Test interactions between cooperating agents
- [ ] Cloud dashboard — Centralized vulnerability management
- [ ] Community CVE portal — Web-based CVE submission and search

## How to Influence the Roadmap

- **Vote on issues** — 👍 issues that matter to you
- **Open feature requests** — [Feature request template](https://github.com/taoq-ai/ziran/issues/new?template=feature_request.md)
- **Contribute code** — PRs for roadmap items are very welcome
- **Share feedback** — [Discussions](https://github.com/taoq-ai/ziran/discussions)
