# Roadmap
## Phase 1 (complete) — Foundation
- [x] Core issue model and `Check` trait
- [x] rustpython-parser integration
- [x] ZR001–ZR010 checks with unit tests and fixtures
- [x] CLI: `check`, `review`, `list-checks`, `explain`, `init`
- [x] Reporters: human, JSON, Markdown, SARIF (snapshot tests on bad_project)
- [x] Exit codes 0 / 1 / 2; `review` exits 0 on findings
- [x] Tutorial chapters 00–03
## v0.2.0 foundations (complete)
- [x] ~75-rule deterministic catalog (ZR001–ZR510)
- [x] `SourceModel`, `CheckMetadata`, severity override
- [x] CLI: `check`, `explain`, `list-checks`, `init`; human + JSON only
- [x] Tutorial chapters 04–05
- [x] AST-precise detector module (`catalog_detectors`)
## Phase 2 — External tools (future)
- [ ] Per-check schema validation in `zerum.toml`
- [ ] `ExternalChecker` trait + Ruff JSON adapter
- [ ] Optional SARIF / additional reporters
## Phase 3 — Architecture and reporters
- [ ] Relative-import handling for ZR010
- [ ] SARIF validation against schema
- [ ] Tutorial chapters 08–09
## Phase 4 — LLM layer
- [ ] Opt-in `zerum check --with-llm`
- [ ] Provider trait, redaction, audit log
- [ ] Consensus and disagreement reporting
- [ ] Tutorial chapters 10–11