What's Next
What ships next, and what is still open.
Next up
- POPIA and NDPA policy packs: the conditions and lawful bases as ready templates
- A second gateway adapter (agentgateway), so the engine runs behind whichever gateway you already use
- Public repository and a first tagged release
- Consent as a live lookup from a real consent store, not a value passed in
Open questions
- Purpose provenance: how an agent's assigned purpose is attested, and when that can be trusted
- Agent memory: permission to use data versus permission to retain it
- Agent-to-agent transfer: restrictions that follow the data across handoffs
- Evidence: proving after the fact why every sensitive-data use was permitted