# Roadmap

Ghostlight ships today as a governed browser-automation MCP server for Chromium, verified
end-to-end on Windows and Linux. This page is what we are working toward next. Nothing here changes
the Continuity Promise or the trained tool surface.

## Near term

- **Complete Chrome Web Store review.** The listing is under review. When it is public, make the
  store path the default extension-installation route.
- **Live browser verification on macOS.** It already builds and passes the full test suite in CI;
  this brings end-to-end browser coverage on par with Windows and Linux.
- **Evaluate transaction-bound managed confirmation.** Validate client-mediated MCP form
  elicitation, stale-target refusal, and the privacy model before accepting or implementing the
  proposed confirmation boundary for selected managed actions
  ([ADR-0075](docs/adr/0075-transaction-bound-managed-confirmation.md)).

## Direction

More adapters will follow on the same governance spine. The browser is the first surface, not
the last. The durable asset is the [RAWX capability model](open-spec/rawx-capability-model.md);
the mechanisms around it will change.

Two proposed directions are being explored rather than promised: local evaluation artifacts for
comparing agent journeys ([ADR-0069](docs/adr/0069-agent-journey-evaluation-artifacts.md)), and
bounded delegation contracts grounded in a concrete user scenario
([design note](docs/design/bounded-delegation-scenario.md)). WebMCP remains a research and standards
participation track until its browser API stabilizes.

Have a request? [GitHub Discussions](../../discussions) is the place, and every request gets a
disposition with reasoning.