Why this page exists
Forward-looking statements used to live inside body copy — a sentence on one page saying we were "moving" something, a note on another saying a capability was "on the roadmap". Future tense in body copy rots silently: nothing dates it, nothing tracks it, and nobody notices when it has been true for two months or false for one. Collecting it here makes each statement checkable, and makes its absence from a product page meaningful.
Nothing on this page is a commitment to a date. Where a thing is genuinely blocked on a decision rather than on work, it says so.
The list
| Item | State |
|---|---|
| Public SDK release @vaultspark/obelisk-auth is written, tested and used internally; publishing it to the public npm registry is a founder decision, not an engineering one. Until then the edge-gate and standard-OIDC integration paths work today against the same hosted Gate. | Founder-gated Built and working. Shipping it is a decision, not an engineering task. |
| Open Dynamic Client Registration Anonymous OIDC DCR (RFC 7591) is implemented and operator-gated. Registration is open to humans; automatic client registration is not. | Founder-gated Built and working. Shipping it is a decision, not an engineering task. |
| Turnstile activation Provisioned and env-gated. Activating it truthfully requires widgets on four separate surfaces, so it is off rather than half-on. | Founder-gated Built and working. Shipping it is a decision, not an engineering task. |
| Per-user sealed storage for enrollment seeds Enrollment seeds move from deployment-scoped storage to per-user sealed storage. Named here because it was previously stated in future tense inside /security body copy, where nothing dated it and nothing tracked it. | Building Actively in progress. |
| Formal compliance certifications Not started, and deliberately not implied. Obelisk publishes its own evidence plane instead; a certification is an assertion by a third party about a point in time, and we would rather you check continuously. If your procurement requires one, say so — that is real signal. | Considering Not started. Listed so it is not implied elsewhere. |
Recently shipped
Anything that lands moves off this page and onto the changelog, which is written in plain language and also served as JSON bound to the exact revision serving it.