gnoma/TODO.md

Gnoma — TODO

Active work, newest first.

In flight

• Entropy FP reduction (post-SLM Phase F) — F-1 (format-aware pre-extractor, deterministic, ~150 LOC, no new trust boundary) is the concrete next-up item; F-2 (SLM-assisted classifier for ambiguous entropy hits) is gated on F-1 telemetry + ≥50 SLM observations. Surfaced from the r/ollama launch thread (2026-05-20); external validation from alterlab.io on the same tiered approach. See docs/superpowers/plans/2026-05-19-post-slm-unlock.md.
• Compound tools (post-SLM Phase E) — held until ≥50 SLM observations inform which primitives are worth adding. See docs/superpowers/plans/2026-05-19-post-slm-unlock.md.
• Distribution — follow-ups. v0.1.0 shipped (archives on github.com/VikingOwl91/gnoma/releases, multi-arch images on ghcr.io/vikingowl91/gnoma). Still optional: Homebrew tap, curl | sh installer script, signed checksums (cosign/sigstore), release note automation, Windows process-tree kill via golang.org/x/sys/windows job objects (currently os.Process.Kill only — see internal/mcp/transport_windows.go).

Stable backlog (not in active phases)

• Thinking mode (disabled / budget / adaptive) — M12.
• Structured output with JSON schema validation — M12.
• SQLite session persistence + serve mode — M10.
• Task learning (pattern recognition, persistent tasks) — M11.
• Web UI (gnoma web) — M15.
• OAuth / keyring — M13.
• Observability (feature flags, cost dashboards) — M14.
• PE / Mach-O ELF support — future, after ELF Phase 6.

History

Completed initiatives, kept here as pointers to their plan files:

• v0.1.0 release — 2026-05-20. First tagged release. GoReleaser pipeline produces six static archives (linux/darwin/windows × amd64/arm64) on the GitHub mirror plus multi-arch Docker images on GHCR. History was rewritten on the same day to migrate authorship to a noreply identity and strip co-author attribution.

• Post-audit security hardening — complete 2026-05-19. Three waves

  • one ADR closed all 14 findings from the external review:
  • Wave 1 — SafeProvider boundary
  • Wave 2 — Incognito coherence
  • Wave 3 — scanner + path hygiene (rolled out directly without a plan file; see commits leading up to 2026-05-19 on internal/security)
  • ADR-004 — PostToolUse hook ordering

• Post-SLM unlock — plan. Phases A–D complete (two-stage tool routing, CLI agent binary override, user profiles, per-arm capability tags).

• 2026-05-07 roadmap — plan. M1–M8 done; SLM classifier (Phase 3) complete; Phase 4 superseded by the post-SLM plan.

Reference

• Milestones: docs/essentials/milestones.md
• Decisions: docs/essentials/decisions/
• ADR-002 (SLM routing, supersedes earlier ADR-009): docs/essentials/decisions/002-slm-routing.md