Current product truth, then the gates to launch.
We separate executable foundations, security verification, incomplete workflows, and later integrations so roadmap language never sounds shipped.
Executable foundations
- Tenant-isolated vehicle records across API, web, and mobile foundations
- Archive/restore, active/inactive/retired status filters, and bounded driver-assignment history
- Provider-neutral VIN decoding with review-before-apply on web and mobile
- Web and mobile inventory: paged list, add, edit, low-stock state, and stale-write recovery
- Eight-angle guided walkaround capture with local resume and retake
- Attributed maintenance recommendations with web/mobile read and refresh, schedules with due status, and tenant-safe work orders
- OBD2 scan history and ELM327 BLE wiring pending physical acceptance
- Password signup, rotating sessions, OAuth plumbing, workspace invitations, and member lifecycle controls
- Tenant audit-history view backed by redacted, append-only evidence
- Web inspection template builder for DVIR-style and annual DOT templates; field completion remains gated
- PostgreSQL RLS, durable outbox relay, event consumer foundation, and Coolify staging checks
- CodeQL, Semgrep, container-image, Agent Threat Rules, Agent Memory Guard, and behavior-verification checks in CI
Protected workflow gates
These are required outcomes, not shipped capabilities.
The accepted offline architecture now has an encrypted, API-origin and tenant/user-scoped local-store lifecycle with retirement tombstones, key-loss recovery, fail-closed transitions, and serialized session/database changes. Connector authority, replicated reads, queued writes, conflict UI, the complete field workflow, odometer photo capture, imports and exports, password-reset delivery, and production invitation delivery remain required launch outcomes.
Connectors and photo-annotated inventory
Geotab, Samsara, WEX, QuickBooks, webhooks, production OAuth clients, production invitation-provider activation, and photo-tagged truck shelves follow the core launch gates and partner prioritization.
