Roadmap
Where Vanta is headed and what just shipped — generated straight from the project board, so it never goes stale.
1270 capabilities shipped · 2 in flight · 13 external proof gates · 7 on the horizon. Updated 2026-07-21.
In flight
What we are actively building next.
TUI resize repaint regression — one clean frame after every terminal resize
Operator · M-size
Reopen the terminal-resize reliability work after a real 78x25 session on 2026-07-20 left repeated composer borders, prompt text, and orphaned line glyphs across the viewport. Treat SIGWINCH as a complete layout invalidation: clear the prior physical frame, recompute the transcript/composer/footer geometry, and draw one coherent current frame without losing the active draft or turn
True first-token performance harness — measure cold start through painted output
Harness · M-size
Vanta's packaged desktop budget measures process-to-shell well, but its first-use path uses a mocked chat response and cannot prove submit-to-dispatch, provider first delta, or first painted token. Establish truthful CLI, TUI, gateway, and packaged-desktop timing before optimizing the critical path
Recently shipped
The latest of 1270+ capabilities. See the changelog for curated milestones.
- Desktop Ollama MiniCPM response — visible text instead of endless Thinking — Desktop App · 2026-07-21
- TUI Ollama model drill-down — choose an installed local model — Operator · 2026-07-21
- Capacity-aware support router — minimums, externalization, and activation — Operator · 2026-07-21
- Workflow composer v1 — compose Vanta primitives without rebuilding n8n — Operator · 2026-07-20
- Workflow data handoffs — typed references with preflight and redaction — Harness · 2026-07-20
- Graph shared run state — typed coordination without one giant conversation — Harness · 2026-07-20
- Graph completion contracts — stop on evidence, budget, or escalation — Harness · 2026-07-20
- Remote context references - safe @file, @diff, and @git expansion through the gateway — Operator · 2026-07-19
- Desktop live-proof diagnostics — separate API truth, rendered truth, and startup context — Desktop App · 2026-07-19
- Desktop assistive-technology proof — automate accessibility and complete one VoiceOver task — Desktop App · 2026-07-19
- Terminal panel + TerminalCaptureTool — agent captures terminal content, Meta+J toggle — Operator · 2026-07-18
- Regional payment authorization broker - route by capability, regulation, and provider availability — Harness · 2026-07-18
- Visa TAP conformance lab - signed agent intent and merchant recognition — Harness · 2026-07-18
- Interactive Telegram setup discovery - answer the operator and expose the command — Operator · 2026-07-18
- Desktop setup hub + Telegram lifecycle — route, verify, secure, and start — Desktop App · 2026-07-18
- Demote DuckDuckGo - bot-blocked search is explicit legacy fallback, never the default — Harness · 2026-07-18
- Desktop message fidelity — preserve intraword underscores and exact identifiers — Desktop App · 2026-07-18
- Desktop session draft ownership — drafts stay with the correct task — Desktop App · 2026-07-18
- Desktop kernel port collision recovery - Retry finds a safe project endpoint — Desktop App · 2026-07-17
- Desktop context attachments — files as searchable task context, not raw inventory — Desktop App · 2026-07-17
External proof gates
Implemented locally, but not called shipped until the real provider, device, or hosted environment produces an accepted receipt.
- Run Anywhere v1 release gate — reach, wake, and execute on controlled infrastructure — Operator
- Messaging adapter — Microsoft Teams — Operator
- Termux / Android runtime (run-anywhere North Star gap) — Operator
- Spreadsheet copilot — Excel/Sheets agent surface with charts and custom functions — Operator
- Cross-platform service supervisor — one
vanta upon macOS, Linux, and Windows — Reach - Adyen Agentic delegated payments - limited-access provider integration — Operator
- Payment skill pack - delegated fiat and SaaS provisioning under transaction gates — Operator
- Shopify operations - scoped catalog, orders, inventory, and verified mutations — Operator
- Telephony consent lifecycle - provision numbers, SMS, calls, callbacks, and retention — Reach
- Commerce and telephony skill pack - Shopify, shopping, returns, SMS, and calls — Reach
- Desktop cold-operator release proof — one useful task without repo knowledge — Desktop App
- Desktop release-candidate provenance — notarize and bind the exact commit — Desktop App
- Look capture — native macOS screen, window, or marquee vision from CLI and Desktop — Operator
On the horizon
Directional, not committed — grouped by area, newest thinking first.
Desktop App — 2 planned
- Desktop stream performance — incremental markdown and scoped token updates
- Desktop support controls — set current capacity without leaving Work
Harness — 3 planned
- Startup critical-path collapse — cache, defer, and prewarm first-turn work
- Gateway delivery-obligation ledger — never lose a finished remote answer
- Executive-function support evals — useful without overreach
Operator — 2 planned
- Browser workflow boundary — observe, extract, and act under explicit policy
- Current support-state expiry — temporary means temporary