Roadmap

Make the quiet runtime stronger

The first version proves the shape: Docker-first turns, SQLite project truth, mailbox scheduling, ToolHost audit, and WebUI observability. The next work should harden those boundaries.

Near Term

Runner event streaming

Stream model deltas and tool call state from the container to Suzumio while a turn is running.

Container cleanup policy

Keep failed containers for debugging, auto-remove successful containers when configured, and expose cleanup commands.

Safer Docker runtime

Add CPU, memory, network, user, read-only mount, and capability controls to backend config.

Better WebUI

Add filtering, artifact previews, resolved config view, turn input/output view, and live SSE updates.

Agent and Model Layer

Tools

Scheduler

The default scheduler should remain non-preemptive. Future schedulers can be added behind an interface, but they should not weaken the default quiet semantics.

Security

Documentation

Non-goals For Now