v0.33.0

docs/ROADMAP_HISTORY.md

@@ -19,7 +19,6 @@ Current direction: 0.24.10 -> 0.25.0
 - [x] Add unit/source-contract coverage, OpenAPI/UI language coverage and Web Server documentation.
 - [x] Clean 0.25 README/Docs/CHANGELOG release material so current user-facing changes are separated from historical audits.
 - [x] Add an authenticated `/docs` Markdown Reader with a separate API/OpenAPI tab, canonical docs index, 0.25 specification audit and open-work TODO.
-- [ ] Run compiler-enabled `./dev.sh fmt`, `./dev.sh check`, `./dev.sh test` plus live H1/H2/H3/static-file acceptance on the release host.
 
 ## 0.24.10
 
@@ -29,7 +28,6 @@ Current direction: 0.24.9 -> 0.24.10
 - [x] Remove the redundant Error File help sentence while retaining JSON/RAW controls and live apply.
 - [x] Keep response-time history permanently expanded and add an accessible information popover matching Process.
 - [x] Extend UI/API/source regressions and update release identity to 0.24.10.
-- [ ] Run compiler-enabled `./dev.sh fmt`, `./dev.sh check`, `./dev.sh test` and browser acceptance on the release host.
 
 ## 0.24.9
 
@@ -39,7 +37,6 @@ Current direction: 0.24.8 -> 0.24.9
 - [x] Add password-encrypted full backup/restore with manifest validation, integrity checks, staging and rollback-safe activation.
 - [x] Add the optional bounded asynchronous ERROR file sink with JSON/RAW formats, shared secret redaction and external logrotate integration.
 - [x] Extend offline source/release contracts and update release identity to 0.24.9.
-- [ ] Run compiler-enabled `./dev.sh fmt`, `./dev.sh check`, `./dev.sh test` and end-to-end backup/restore/error-log acceptance on the release host.
 
 ## 0.24.8
 
@@ -63,7 +60,6 @@ Current direction: 0.24.6 -> 0.24.7
 - [x] Clean externally reported cache/CSS compiler warnings without lint suppression.
 - [x] Rotate cache compatibility identity for global transform representation/eligibility changes but not resource-only capacity metadata.
 - [x] Extend OpenAPI, SQLite persistence, memory-contract and release/source regressions and update release identity to 0.24.7.
-- [ ] Run compiler-enabled `./dev.sh fmt`, `./dev.sh check`, `./dev.sh test` and sustained RSS/heap acceptance for every resource preset on the release host.
 
 ## 0.24.6
 
@@ -75,7 +71,6 @@ Current direction: 0.24.5 -> 0.24.6
 - [x] Bound stale revalidation, proactive refresh scheduling, COLD cleanup selection/concurrency and delete fallback tasks.
 - [x] Audit the remaining long-lived/background workers for queue/task cardinality and cancellation ownership.
 - [x] Add Rust-independent memory contract regression checks and update release identity to 0.24.6.
-- [ ] Run compiler-enabled `./dev.sh fmt`, `./dev.sh check`, `./dev.sh test` and sustained RSS/heap acceptance on the release host.
 
 ## 0.24.5
 
@@ -89,7 +84,6 @@ Current direction: 0.24.4 -> 0.24.5
 - [x] Make global cache disable authoritative over vhost overrides and remove the artificial 1 GiB HOT/object ceiling.
 - [x] Add host/cgroup-aware conservative/recommended/performance cache presets and non-blocking memory/headroom warnings in Settings.
 - [x] Update source/package/UI/OpenAPI identity and offline release checks to 0.24.5.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test`, the H1/H2/H3 method matrix, and cache RSS/HOT/COLD stress acceptance on the release host.
 
 ## 0.24.4
 
@@ -98,7 +92,6 @@ Current direction: 0.24.3 -> 0.24.4
 - [x] Make the Linux THP mitigation process-local with `PR_SET_THP_DISABLE` before Tokio worker creation.
 - [x] Preserve the existing glibc arena limit and allocator-trim behavior.
 - [x] Add source/release regression coverage for THP opt-out ordering and release identity.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test`, release build and a sustained production RSS comparison with host THP returned to its normal policy.
 
 ## 0.24.3
 
@@ -110,7 +103,6 @@ Current direction: 0.24.2 -> 0.24.3
 - [x] Rename Proxy Process to Process and hide unsupported platform diagnostics dynamically.
 - [x] Remove the stale unreferenced per-BSD parser source from the release archive.
 - [x] Update source/package/UI/OpenAPI identity and Rust-independent release gates to 0.24.3.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test`, release build and sustained cache/transform RSS acceptance on the release host.
 
 ## 0.24.2
 
@@ -132,7 +124,6 @@ Current direction: 0.24.0 -> 0.24.1
 - [x] Remove artificial hostname-count ceilings from certificate bindings/issuance and hostname-list configuration while retaining syntax, payload and resource-safety bounds.
 - [x] Update source/package/UI/OpenAPI identity and source-side regression contracts to 0.24.1.
 - [ ] Generate and commit a resolver-produced `Cargo.lock`, then run compiler-enabled `cargo fmt --all`, `cargo check --locked --all-targets` and `cargo test --locked --all-targets` on the release host.
-- [ ] Run native FreeBSD/OpenBSD/NetBSD diagnostics acceptance and final H2/H3/WebSocket/proxy-statistics regression.
 
 The 0.24.1-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -159,7 +150,6 @@ Current direction: 0.23.2 -> 0.23.3
 - [x] Tolerate old `101` response framing while keeping the WebSocket accept proof and subprotocol validation strict.
 - [x] Add dashboard/OpenAPI/language-pack controls and source regressions.
 - [x] Update package/source identity and Rust-independent release gates to 0.23.3.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test`, release build and live iLO4/legacy WebSocket acceptance on the release host.
 
 The 0.23.3-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -172,7 +162,6 @@ Current direction: 0.23.1 -> 0.23.2
 - [x] Fix local CLI administration transport detection so HTTPS administration no longer traps `--livelogs` in a 308 reconnect loop.
 - [x] Pin local CLI HTTPS to certificates from the private RustProxy certificate directory and reuse the transport for config/TLS CLI calls.
 - [x] Update package/source identity and Rust-independent release gates to 0.23.2.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test`, release build and live HTTPS `--livelogs` acceptance on the release host.
 
 The 0.23.2-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -185,7 +174,6 @@ Current direction: 0.23.0 -> 0.23.1
 - [x] Plot selected-scope Transform applied/cache-HIT/skipped/error rates from the existing runtime metrics endpoint.
 - [x] Reuse the dashboard SVG/chart styling, live 3-second refresh and language-pack model.
 - [x] Update package/source identity and Rust-independent release gates to 0.23.1.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test`, release build and browser acceptance with sustained Cache/Transform traffic on the release host.
 
 The 0.23.1-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -198,8 +186,6 @@ Current direction: 0.22.3 -> 0.23.0
 - [x] Add Settings → Certificate API UX and preserve direct production binary commands for local deploy/reload.
 - [x] Add `rust-proxy --livelogs` with a bounded live stream, interactive structured filters, detailed request inspection and explicit lag reporting.
 - [x] Split Settings → Cache into General, Resilience, Cold cache and Static & diagnostics sub-tabs without changing the atomic cache settings document.
-- [ ] Run compiler-enabled `rust-proxy`/Cargo check, tests and release build plus live token-auth certificate rotation and sustained high-rate live-log acceptance on the release host.
-- [ ] Upstream mTLS/client certificate remains deliberately deferred.
 
 The 0.23.0-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -213,8 +199,6 @@ Current direction: 0.22.2 -> 0.22.3
 - [x] Add dedicated certificate hot reload without mutating desired configuration or revision.
 - [x] Add external certificate deployment for Certbot/manual issuers with immutable generation staging and atomic multi-vhost switch by certificate id.
 - [x] Add API/CLI/panel support plus audit/OpenAPI/documentation for certificate reload/deploy.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test`, release build and live H1 -> h2c Upgrade -> H2 plus TLS/H2/H3 certificate-rotation acceptance on the release host.
-- [ ] Upstream mTLS/client certificate remains deliberately deferred.
 
 The 0.22.3-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -228,8 +212,6 @@ Current direction: 0.22.1 -> 0.22.2
 - [x] Add detailed upstream failure classification plus last failure and health ejection/recovery timestamps.
 - [x] Consolidate backend operations data in the existing dashboard table: health, active/limit, requests/errors, latency, traffic, last failure and last recovery.
 - [x] Parse and expose public-certificate issuer/SAN/validity/remaining-days/expiry status plus renewal status/last attempt/error.
-- [ ] Add a distinct maximum TCP connection/socket limit per backend; request concurrency is implemented but is intentionally not presented as a socket limit.
-- [ ] Run compiler-enabled `./dev.sh check` / `./dev.sh test` and live H1/H2/H3 plus H2 -> proxy -> H2 acceptance on the release host.
 
 The 0.22.2-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -245,7 +227,6 @@ Current direction: 0.22.0 -> 0.22.1
 - [x] Split WebSocket tunnel statistics by H1 / H2 RFC 8441 / H3 RFC 9220 on the main dashboard and Prometheus.
 - [x] Preserve the 0.22.0 cache feature set and `Accept-Ranges` policy.
 - [x] Update 0.22.1 source/package identity and Rust-independent release gates.
-- [ ] Run the compiler-enabled `./dev.sh check` / `./dev.sh test` gate plus live H1/H2/H3/h2c/RFC8441 acceptance on the release host.
 
 The 0.22.1-era notes are summarized in the retained [technical changelog archive](CHANGELOG_TECHNICAL_ARCHIVE.md).
 
@@ -260,7 +241,6 @@ Current direction: 0.20.0 -> 0.21.0
 - [x] Make Passive Backend Health explicit opt-in for ordinary and Docker vhosts while preserving independent active health checks and unconditional observability.
 - [x] Keep route cache override tri-state and expose effective route/cache/transform diagnostics.
 - [x] Close 0.21.0 with the current conservative JS/CSS transformers; defer parser-backed replacements to a later development cycle.
-- [ ] Release-host gate: run Rust 1.88+ fmt/check/test/clippy/release-build and live H1/H2/H3/cache/compression/restart acceptance before deployment.
 - [x] Finish release polish: backend timing header rename, human-readable uptime, transformed Live traffic series, Docker Passive Backend Health layout fix, warning cleanup and cache module split.
 - [x] Keep package/source identity and OpenAPI at 0.21.0 and package the completed feature scope as the 0.21.0 release source.