AI gatewaySource · docs/msgf/MSGF_V1_ROADMAP.md

MSGF

AI gateway with context governance. Six policy domains, IDE verify, model routing and consensus, signed human-in-the-loop review, Session Replay, SIEM, Sentry quarantine, Workspace SSO, and optional post-quantum Vault envelopes.

Feature spotlight

Interactive roadmap →
  • Try it now

    Free 7-day shadow-mode trial

    Beta · live now

    Up to 7 days of live proof — clock starts on first call. Then start 3-day Individual Pro full access before you buy.

    Start free trial
  • Consensus

    Three-model consensus

    Beta · live now

    Claude + Gemini + Grok when enabled — frontier majority on high drift, heal-queue human review.

    Join beta
  • IDE

    Pulse Guard IDE verify

    Beta · live now

    0-token prompt optimizer, Run Scripts, Safe Build — verify-result → Vault, repeated fail → Hall.

    Join beta
  • Ops

    Sentinel bug FAB + inbox

    Shipped

    Floating report button routes to operator bug inbox — Sentry issues quarantine to Vault, not silent Hall.

  • Integrations

    DocuSign / Dropbox Sign gates

    Coming soon

    1.1 — team-invite envelopes stay in the repo. Not a 1.0 storefront claim.

  • Security

    Post-quantum Vault envelopes

    Shipped

    Hybrid KEM (X25519 + ML-KEM-768) envelopes + HAL v2 ML-DSA-65 when flags enabled — harvest-now-decrypt-later resistant.

  • Gateway

    Shadow mode / enforcement gateway

    Beta · live now

    OpenAI + Anthropic compatible /api/v1 — prove savings in shadow mode, enforce policy in enforcement mode.

    Try shadow mode
  • Compliance

    Governance audit platform

    Shipped

    Audit hub, Session Replay + harm HITL, most-used rankings, model fitness, diff impact, budgets, and SIEM export on /admin/ops.

    Open ops
  • Billing

    Stripe entitlements + team seats

    Beta · live now

    Checkout code for Pro, Startup, and Enterprise (monthly + yearly) — recreate Stripe Price IDs, then flip mock off after live smoke.

    See pricing
  • Enterprise

    Workspace SSO + company domains

    Shipped

    Google Workspace SSO, domain allowlists, signed human-review audits — configure when going live.

Vision

MSGF 1.0 is an AI gateway any application can adopt. For Elphie Syntax products it is the shared governance layer behind Author Ecosystem and Syntax Education. For the market, MSGF is a standalone product: subscribe, send code or logic deltas through governed requests, ingest knowledge into isolated domains, and receive tiered audits without running your own consensus stack.

Pipeline

Seven steps

SWEEP → PERSIST

Consensus

TRI + Grok

Claude · Gemini · Grok

Ops glue

Audit · SIEM

Replay · budgets · SSO

Crypto

Hybrid PQ

ML-KEM + ML-DSA when enabled

Roadmap phases

Read in order
  1. Phase 1

    Policy-domain persistence

    In flight
    • P1 Static Ledger (msgf-legal) — immutable laws, HALT on violation
    • P4 State Ledger (state_beats, p4_hal_ledger) — flight recorder + hot slices
    • P6 Constraint Ledger (pillar_vectors) — Vault / Hall via pgvector 1536
  2. Phase 2

    IDE extension — Pulse Guard

    Shipped
    • 0-token prompt optimizer (SOLO_FAST) + Run Scripts + Safe Build
    • verify-result → Vault; repeated fail → Hall; deploy-gate for CI
    • Token savings dashboard + CONVERGE model preset picker
  3. Phase 3

    Routing + three-model consensus

    Active
    • Cost-efficient dual presets: Claude+Gemini, Claude+Grok, Gemini+Grok
    • Frontier three-model consensus (Claude + Gemini + Grok) on high drift
    • Human notify on high original drift (≥0.45), no majority, or non-human flags
  4. Phase 4

    Integrations — Sentry · SSO · SIEM

    Shipped (configure to go live)
    • Sentry issues → Vault quarantine on /admin/ops (no silent auto-Hall)
    • Google Workspace SSO + company domains + signed ARBITRATE audits
    • OTel JSON SIEM webhook + heartbeat batch drain
  5. Phase 5

    Governance audit platform

    Shipped
    • Audit hub timeline · Session Replay / harm ledger · most-used resources
    • Model fitness + prompt templates · diff impact · tenant budgets / circuit breaker
    • SIEM OTel webhook export · trusted-OSS bulk ARBITRATE · human-proof RED/harm HITL
  6. Phase 6

    Security — post-quantum envelopes

    Shipped (flagged)
    • Hybrid KEM (X25519 + ML-KEM-768) vault envelopes when MSGF_HYBRID_KEM_ENABLED=1
    • HAL v2 ML-DSA-65 authorship certificates
    • Platform PQ-TLS remains an infra checklist — complementary, not replaced
  7. Phase 7

    PERSIST + lifecycle — Vault writes, Hall purge

    Hardening
    • Approved deltas persisted to Vault; redundant hot state trimmed
    • Hall LOW-tier entries auto-purged after 30 days for fast vector search
    • Stripe entitlements for paid go-live after identity + smoke

Pillar mapping

PillarCapabilityNotes
P1Static Ledger · immutable lawsmsgf-legal, security migrations
P2Flow Sequence · build / dependencyPulse + TRI CONVERGE
P3Entity Profiles · roles + tenantsSSO, Stripe, signing invites
P4State Ledger · hot + cold beatsRedis active slice, p4_state_ledger
P5Local Variables · per-tenant configconsensus presets, BYOK keys
P6Constraint Ledger · Vault vs HallSentry quarantine, hybrid PQ envelopes