Roadmap: What's next for ZettelForge?

[rolandpg]

ZettelForge v2.1.0 is live -- our first public release. Here's what we're thinking about next:

Short-term (v2.2)

Improve LOCOMO conversational memory score (currently 18% -> target 30%)
CTIBench adapter fixes for ATT&CK cross-referencing
PyPI publication (pip install zettelforge)
Docker full-stack compose for one-command evaluation
Medium-term

LLM-judge scoring for benchmarks
Plugin architecture for custom entity types
Streaming recall for large result sets
OpenAI/Anthropic API as alternative LLM provider
Long-term

Multi-agent shared memory (multiple agents reading/writing the same ZettelForge instance)
Federated memory across teams
IaC templates (Azure Bicep, Terraform)
What would be most useful for your workflow? What are we missing?

[rolandpg]

Current priorities (April 2026)

Just shipped (v2.1.1):

• Causal chain retrieval — "why did APT28 target NATO?" queries now traverse causal edges in both directions
• Demo GIF in README
• Spec-driven governance — CI checks validated against controls manifest
• LangChain retriever wrapper

Up next:

1. Memory Evolution (A-Mem) — when new CTI arrives, existing notes auto-update via neighbor comparison
2. SQLite migration — replace JSONL with SQLite + WAL mode, eliminate crash windows
3. CTIBench ATE fix — projected 8-11x F1 improvement on technique extraction
4. Show HN + Reddit launch — targeting next week

Backlog:

• Persistence semantics (4-tier note types: knowledge/memory/wisdom/intelligence)
• PostgreSQL + AGE + pgvector SaaS backend
• CrewAI tool wrapper

Full TODO is tracked in the repo. If any of these interest you, jump in — good-first-issues are tagged and have detailed acceptance criteria.

[rolandpg]

Update: April 16, 2026

Shipped since last update:

• SQLite default backend — SQLite replaces JSONL as the default storage for notes, knowledge graph, and entity index. Zero-config, WAL mode, ACID guarantees. LanceDB stays for vector search. Migration script included for existing JSONL data.
• STIX 2.1 entity taxonomy — APT/UNC/TA/FIN groups now correctly stored as intrusion_set (not actor). recall_actor() searches both for backward compat.
• Web app hardened — API key authentication, localhost-only by default, XSS fix, rate limiting, request bounds.
• Spec-driven governance — governance/controls.yaml is the single source of truth for CI governance checks. Drift detection tests catch phantom controls automatically.
• Memory Evolution wired — MemoryEvolver (A-Mem inspired) now auto-triggers after remember(). Finds top-k semantic neighbors, LLM decides if they should evolve with new context.
• Docs reconciled — README, tutorials, architecture, config reference all updated to reflect SQLite default. No more Docker/TypeDB prerequisites in quickstart.
• Test reliability — extension-only tests gated with pytest.importorskip(), no more --ignore flags needed.

Up next:

1. Remaining P0 cleanup (_rewrite_note call sites, GraphRetriever decoupling, MemoryManager.close() API)
2. Persistence semantics — 4-tier note types (knowledge/memory/wisdom/intelligence)
3. Growth Week 2 — r/netsec, r/cybersecurity, LinkedIn, Twitter
4. Format stability Phase 2 — zettelforge init + zettelforge health commands

Good-first-issues are updated with detailed acceptance criteria. Jump in if any interest you.