A11YSmith Roadmap

Phase 1: Working Vertical Slice (Current)

Phase 1 milestones
Milestone	Status
M1: Repository scaffold and controls	Complete
M2: Shared schemas and standards ingestion	Complete
M3: Severity, confidence, verdict, manual review engines	Complete
M4: Report generation and diff engine	Complete
M5: Web auditor MVP (10 rules, CLI)	Complete
M6: Static dashboard MVP	Complete

Phase 2: Native Platforms

M7: Android Source Analysis MVP

tree-sitter Kotlin parsing with Compose semantics rules
Artifact ingestion: screenshots, view hierarchies, Espresso output, lint output
Audit modes: source_only, artifact_only, hybrid, manual_assist
New packages: @a11ysmith/android-auditor, @a11ysmith/artifact-ingestion

M8: iOS Source Analysis MVP

tree-sitter Swift parsing with accessibility trait rules
Artifact ingestion: XCUI snapshots, XCTest output, view hierarchy dumps
Same audit modes as Android
New package: @a11ysmith/ios-auditor

M9: Dashboard Enhancements

Dark mode with prefers-color-scheme support
Diff views between assessments
Manual review task views
Lazy loading for large finding sets
200% zoom validation
Standards crosswalk browsing

Phase 3: Maturity

Phase 3 milestones
Milestone	Status
M10: Sanitization pipeline for Pages-safe exports	Complete
M11: Secret scanning for generated reports	Complete
M12: GitHub Pages export validation	Complete
M13: Expanded rule packs (26 web, 15 Android, 18 iOS)	Complete
M14: Finding adapter and cross-platform remediation	Complete
M15: MCP server — 9 tools (including `get_remediation`)	Complete
M16: Agent knowledge modules (web, document, markdown, Android, iOS)	Complete
M17: Context packs and governance verification engine	Complete

Full AST parsing via SwiftSyntax (Swift) and kotlin-compiler-embeddable (Kotlin) remains a future enhancement. Current source analysis uses tree-sitter with regex fallback.

Phase 3.5: Consultant Audit Workbench

Phase 3.5 milestones
Milestone	Status
M17.1: Run manager — schemas, state machine, persistence	Complete
M17.2: Workbench server — JSON API, dashboard handoff	Complete
M17.3: Workbench GUI — web audit flow (Release 1)	Complete
M17.4: Native artifact flows, reassess, diff handoff (Release 2)	Complete

New packages: @a11ysmith/run-manager, @a11ysmith/workbench-server, apps/workbench.

Release 1 delivered web live assessment orchestration via GUI. Release 2 added Android/iOS artifact upload with bundle validation, reassessment from prior config, dashboard diff URL generation, and multi-platform UI support.

Phase 4: Governance and Knowledge Consolidation

Phase 4 milestones
Milestone	Status
M18: Documentation parity pass	In Progress
M19: Knowledge module migration (mobile backward-compat)	Not Started
M20: Governance enforcement in CI	Not Started
M21: Source verification visibility in MCP outputs	Not Started

Not Planned

Public SaaS product
Exposing sensitive audit data in public frontends
Replacing expert manual review with automation
Runtime inspection claims not validated by actual testing