Roadmap for what is live now and what comes next.

NeuroChain DSL now includes a live private-policy zero-knowledge attestation path on Stellar testnet. This roadmap separates the shipped deterministic foundation, the current RISC Zero and Soroban milestone, and the next steps toward external integrations, technical pilots, and production hardening.

3 Private-policy decision paths
Live Groth16 verification on Stellar testnet
Next Integrations and pilot readiness
Delivery track
  1. Foundation shipped

    Deterministic action layer

    Typed ActionPlans, local intent models, stable guardrails, and runtime parity.
  2. Live milestone

    Private-policy ZK attestation

    Genuine RISC Zero Groth16 receipts verified through Soroban on Stellar testnet.
  3. Later

    Production hardening

    Security review, durable operations, key management, and mainnet readiness criteria.

From deterministic plans to verifiable private-policy decisions

The roadmap reflects the implementation that exists today. The ZK and Soroban path is no longer a future concept: it is a working testnet milestone with a hosted demo, genuine proofs, three decision outcomes, and explicit transaction evidence.

  1. Foundation shipped Stable and usable today

    Deterministic Stellar action layer

    • Local ONNX intent classification maps natural-language requests into deterministic typed ActionPlans without requiring an external AI API.
    • Canonical ActionPlans provide an explicit structure before any Stellar Classic or Soroban action can progress.
    • Stable guardrail exits cover allowlist protection, contract-policy failures, and intent-safety failures through exit codes 3, 4, and 5.
    • Typed Soroban templates normalize practical inputs including address, bytes, symbol, and u64.
    • Runtime behavior is shared across the REPL, CLI, .nc files, and the server API.
    • The standard execution boundary remains simulate → preview → confirm → submit.
    • x402-lite provides a guarded payment-required and finalize flow with replay-aware state handling.
    • Public WebUI and Stellar CLI demos expose the current system without requiring local installation.
  2. Live ZK milestone Deployed and verified on Stellar testnet

    NeuroChain ZK Guardrail Attestation

    • A known deterministic NeuroChain evaluator runs inside a RISC Zero guest against a private owner policy and private audit nonce.
    • Genuine RISC Zero Groth16 receipts prove evaluator execution while the policy rules, commitment salt, and audit nonce remain private.
    • The canonical public journal binds the evaluator image ID, ActionPlan hash, policy commitment and version, decision, exit and reason codes, approval state, and audit nullifier.
    • A Soroban guardrail application routes the receipt through a pinned verifier router to the Groth16 verifier.
    • The contract accepts only owner-authorized policy commitment and version pairs.
    • The bundled scenarios return approved, requires_approval, and blocked with stable decision semantics.
    • Permissionless verify is repeatable and read-only, so it does not consume the audit nullifier.
    • zk.stellar.attest submits a separate explicit proof-verification transaction on testnet and returns a transaction hash and explorer link.
    • zk status preserves the validated local binding together with the latest Stellar verification mode, transaction hash, and nullifier state for the active session.
    • Owner-authenticated verify_and_consume is available in the local operator flow to record the audit nullifier and reject replay.
    • A valid proof never automatically signs or submits the underlying ActionPlan.
  3. Later Production hardening

    Security, operations, and mainnet-readiness criteria

    • Independent security review of the ZK, Soroban, policy, replay, and execution boundaries.
    • Dependency, build, artifact, and software-supply-chain hardening.
    • Long-lived state maintenance and restoration procedures beyond normal network TTL windows.
    • Production-grade owner, key, policy-rotation, and recovery design.
    • Monitoring, rate limits, abuse controls, and operational incident handling.
    • Release hardening with regression, parity, reproducibility, and deployment gates.
    • Mainnet consideration only after successful pilots, security review, and explicit deployment approval.

What the roadmap is optimizing for

The direction remains conservative: explicit typed actions, independently verifiable private-policy decisions, and a clear separation between proof verification and transaction execution.

Deterministic inputs

Natural-language or application input is converted into a typed ActionPlan before guardrails or chain interaction.

Verifiable private decisions

RISC Zero and Soroban make the private-policy result independently verifiable without publishing the policy rules.

Run the live Stellar testnet milestone

The hosted CLI demonstrates local binding, all three private-policy outcomes, Soroban verification, and one separate explicit testnet attestation.