Build the boundary before expanding the surface.
NeuroChain already demonstrates the hard path end to end. The roadmap now favors a smaller public product, clear operational gates, and one invariant: payment or valid proof never becomes automatic permission to execute.
-
Plan and evaluate
- AI and automation requests become canonical, typed Stellar ActionPlans.
- Allowlist, contract-policy, and intent-safety checks return stable decisions and exit codes.
- CLI, REPL,
.ncscripts, and the API share the same runtime behavior. - Preview, confirmation, signing, and submission remain explicit later operations.
-
Prove and verify
- A RISC Zero guest evaluates a typed ActionPlan against a private owner policy.
- The Groth16 receipt binds the evaluator, plan, policy commitment, decision, and audit nullifier.
- Soroban verifies evidence read-only, while an owner-authorized path can consume the nullifier and reject replay.
- A valid proof confirms evidence. It never signs or submits the underlying action.
-
Expose the guardrail safely
- Five runtime-backed MCP tools expose Plan, Evaluate, Prove, Verify, and Status.
- The packaged Stellar Guardrails Skill teaches the same typed, no-submit workflow.
- Proof artifacts distinguish local binding, cryptographic verification, and attestation state.
- Testnet attestation stays outside the default read-only MCP surface.
-
Stabilize, activate, and audit
- Consolidate the public site and hosted runtime into a lean, recoverable operating footprint.
- Activate the guarded x402 facilitator only after operator, pricing, receiver, and settlement controls are fixed.
- Complete independent security review, monitoring, recovery, and production key-management design.
- Consider mainnet only after pilots, audit evidence, and an explicit deployment decision.
What stays fixed.
The implementation can evolve. These product boundaries do not.
Bounded authority
Every request becomes a typed plan before policy or chain interaction.
Inspectable evidence
Private-policy decisions remain independently verifiable without revealing the policy.
Deliberate activation
Payment, proof, approval, signing, and execution stay separate operations.