# Hekate Strategic Roadmap

Status: helicopter-view execution plan

Date: 2026-05-23

## North Star

Hekate Gate should become the trust and control layer for the AI-agent
economy.

The strategic position:

```txt
Agents need tools, APIs, payments, MCP, receipts.
Companies need allow/warn/block before production.
Ergo/Sage needs proof that paid-agent flows are safe and receipt-complete.
Hekate sits between those layers.
```

Product stack:

```txt
Hekate Lite      -> agent-callable preflight API
Hekate Gate      -> enterprise production gate
Hekate Receipts  -> portable proof
Hekate Registry  -> public trust surface
Ergo/Sage        -> live agent-economy proof
```

## Current State

Done:

```txt
Website, SEO, docs, sitemap, llms, discovery
Hekate Lite public private-beta endpoints
Interactive public preflight demo
Blog, comparison pages, glossary, use cases
Ergo/Sage pages and sample receipt bundle
Receipt signer setup and conformance tooling
Production readiness gate
Security review handoff packet
Vercel production deploy
GitHub Security Gates
```

Correctly blocked:

```txt
mainnet certified
enterprise certified
production safety guarantee
```

## Phase 1 - Private Beta Credibility

Goal:

```txt
Hekate looks and behaves like a real private-beta security product.
```

Build:

```txt
live Ed25519 receipt signer env
/v1/agentsec/trust exposes active public key
sample receipt detail pages
registry evidence pages for Hekate Lite, Sage, Orrery, AlphaX, Receipts, Verifiers
public JSON evidence artifacts
```

## Phase 2 - Hekate Lite As Agent-Callable Product

Goal:

```txt
An agent can call Hekate before it calls, trusts, or pays another tool.
```

Build:

```txt
polish /v1/mcp/preflight
polish /v1/x402/preflight
polish /v1/permissions/diff
polish /v1/tool-chain/risk
signed receipts on every response
public examples for every endpoint
SDK snippets
x402 paywall after proof path is stable
```

## Phase 3 - Ergo/Sage Proof Loop

Goal:

```txt
Hekate is the safety gate for paid-agent flows on Ergo/Sage.
```

Flow:

```txt
Sage quote
  -> Hekate sage preflight
  -> Ergo Note check
  -> Sage / Accord receipt bundle verify
  -> Hekate security receipt
  -> registry status update
```

## Phase 4 - Trust Registry

Goal:

```txt
The agent economy has a visible trust surface.
```

Build:

```txt
/registry/hekate-lite
/registry/sage
/registry/orrery
/registry/alphax
/registry/receipts
/registry/verifiers
/registry/status-history
public evidence JSON
generated registry/evidence JSON check
claim-boundary history
verifier key surfaces
```

## Phase 5 - Enterprise Preflight MVP

Goal:

```txt
Hekate Gate can sell before the full SaaS is finished.
```

Build:

```txt
CLI
GitHub Action
SARIF output
policy.yaml
dashboard scan history
finding detail
receipt viewer
approval requirements
```

Pilot offer:

```txt
$2,500-10,000 one-time AI agent security preflight
```

## Phase 6 - Mainnet And Enterprise Claims

Required before claims:

```txt
real custody gateway
real facilitator verifier
real x402 or testnet settlement proof
Ed25519 receipts live
external security review
no unresolved critical/high findings
```

## 90-Day Priority

```txt
1. Finish signed live receipts.
2. Build stronger registry/evidence pages.
   Current progress: generated registry/evidence JSON, production receipt signing status, dynamic JWKS, public registry status-history JSON, and live production smoke are live.
3. Make Ergo/Sage demo undeniable.
4. Package Hekate Lite as callable API.
5. Launch 3-5 design partner outreach.
6. Sell first preflight audit/pilot.
```