| 0 | Scaffold, toolchain, CI, governance, ADRs, chart skeleton | done |
| 1 | CRD types, policy compiler, decision engine, routedctl validate/explain, golden + property tests | done |
| 2 | Inline ingress with streaming, decision API, telemetry, mock gateway, kind e2e | done |
| 3 | Operator, snapshot distribution, webhooks, complete chart | done |
| 4 | ONNX classifiers, PII / injection detection, artifact fetching, benchmarks | done (dedicated detector models deferred, ADR-0016) |
| 5 | Envoy ext_proc and gateway integration guides | done |
| 6 | Feedback loop, learned router, trainer, routedctl simulate | done |
| 7 | Threat model, supply chain, v0.1.0 | done |