Content Management that can withstand the plundering hoards

Current implementation and remaining proposals

This is a qualitative map of the checked-in implementation, not a release date promise or a claim about which images a cluster currently runs. Check the component build version and installed schema when operating a deployment. The historical plan explains original intent and includes superseded choices; the current guides/reference describe actual behaviour.

Implemented here

Area Current behaviour Documentation
Infrastructure Website CRD, shared operator, per-site frontend/CMS, Services/Ingresses/PVCs and status RBAC Contracts
Identity CMS-enforced OAuth2/OIDC, session/Bearer validation, global editing role gate and additional publish gate Authentication
Automatic identity Ipseity discovery/client/initial membership provisioning with explicit auth override Ipseity
Editing Visual/source Markdown, visual HTML, draft save/preview, menus and source upload/download Pages
Design Native bundled/custom themes, visual layouts/shared parts, ZIP transfer and images/fonts Themes
Import Reviewable WordPress WXR and read-only MySQL import, optional guarded public-image copy WordPress
Extensions Raw downloadable objects, index/repeated listings, block packs and bounded WASI renderers from local ZIPs; Go/C/Rust examples and two standalone themes Extensions, example builds
Publication Source snapshots, sanitized static output, durable atomic activation, release sequence/history, retention and rollback Publisher
Serving GET/HEAD, conditions, single ranges, read-only root, admin health/metrics and build identity Frontend HTTP
Recovery/telemetry Session-expiry checkpoints, JSON logs, metrics, status retry and internal health endpoints Editor, observability

Open work

See TODO.md for all current gaps, proposals and priorities. Update the relevant customer guide and contributor reference when work lands, and remove completed items from the backlog. This feature map describes source capabilities; check the running version and installed schema for a deployment.