Skip to content

evolution roadmap.md

Jump to bottom
Muhammad Umer Nadeem edited this page May 17, 2026 · 1 revision

Evolution Roadmap

Graveyard must evolve 3 times: check runner → policy engine → compliance platform. Staying at v1 means death by 2029-2030.

Last updated: 2026-04-30

The Three Phases

Phase 1: Check Runner (2026-2028)

What it is: CLI + dashboard that runs pre-deployment checks and shows GO/NO-GO.

Value: Saves teams from manually combining 5-7 tools. Prevents bad deployments.

Moat: Low — individual checks are commodity. The integration is the value.

Revenue: Free → Pro ($29/mo) based on team features.

Key milestone: 1,000+ GitHub stars, 50+ paying teams.

Phase 2: Deployment Policy Engine (2028-2031)

What it is: Platform where organizations define THEIR deployment rules.

Why pivot is necessary: By 2028-2029, AI will automate running individual checks. The value shifts from "running checks" to "defining what safe means for YOUR organization."

New features:

  • Custom policy rules: "No deploys without 2 approvals on production"
  • "No deploys if security scan has any HIGH severity findings"
  • "No deploys on payment-service during business hours without VP approval"
  • "No deploys on Fridays after 3pm"
  • Policy-as-code: version-controlled, auditable rules
  • Policy templates for common frameworks (SOC 2, ISO 27001)

Moat: High — organizations encode their specific deployment culture into Graveyard. Switching means rewriting all policies.

Revenue: Team ($79/mo) → Enterprise ($199/mo) based on policy complexity.

Key milestone: 200+ paying teams, enterprise customers.

Phase 3: Deployment Governance & Compliance Platform (2031+)

What it is: The system of record for "was every deployment safe and compliant?"

New features:

  • Compliance reports: "Every deployment in Q3, with who approved it, what checks passed, and what policy was applied"
  • EU CRA compliance automation
  • SOC 2 evidence generation
  • Historical risk scoring: "Your deployment risk has decreased 40% this quarter"
  • Audit-ready dashboards for external auditors
  • Multi-framework support (SOC 2 + ISO 27001 + CRA + HIPAA)

Moat: Very high — organizations can't switch compliance platforms easily. Data lock-in + regulatory familiarity.

Revenue: Enterprise ($199-499/mo) + compliance add-ons.

Key milestone: Enterprise contracts, regulatory recognition.

Visual Timeline

2026        2028        2030        2032        2036
  │           │           │           │           │
  ▼           ▼           ▼           ▼           ▼
  v1          v2          v3
  Check       Policy      Compliance
  Runner      Engine      Platform
  │           │           │
  │  MUST     │  MUST     │
  │  EVOLVE   │  EVOLVE   │
  │  OR DIE   │  OR DIE   │
  ▼           ▼           ▼
  CLI+Dash    +Policies   +Audit Reports
  +Checks     +Approvals  +Regulatory
  +Alerts     +Templates  +Risk Scoring

The Datadog Parallel

Datadog Phase Graveyard Equivalent
Infrastructure monitoring (2010) Pre-deployment checks (2026)
+ APM (2017) + Policy engine (2028)
+ Logs + Security (2019+) + Compliance platform (2031+)
Platform company ($45B) Deployment governance standard

See also

Clone this wiki locally