Roadmap.
Transparent priorities from 2026 to 2030 — technically grounded, community-driven, and foundation-ready.
Q1 / Q2 2026 — v1.0 Launched.
Wombat Framework 1.0 and WOMBATpass 1.0 launched on 12 May 2026 on the pre-eve of Cloud Native Conference DE. All eight pillars are stable, the controls library is locked, the PASS scoring model is finalized, and WOMBATpass is published on PyPI.
Wombat Framework v1.0.0 — released 12 May 2026
All 8 pillars fully documented with locked control sets, PASS scoring model v1.0, regulatory mapping (GDPR, BSI C5, ISO 27001, SOC 2, HIPAA, NIS2), cross-pillar reference architecture, and stable Antora documentation at www.wombat-gov.dev/docs/wafpp/1.1.0-en/.
WOMBATpass v1.0.0 — GA, on PyPI
Full three-component stack: CLI (wafpass-core on PyPI), wafpass-dashboard (22+ pages, SSO, evidence packages, gap analysis), and wafpass-server (FastAPI/PostgreSQL, OIDC/SAML2, API keys, 14 migrations). Install: pip install wafpass-core.
All 8 pillars documented & controls locked
Security pillar (Pillar 1) fully finalized for v1.0.0. All WAF-SEC, WAF-COST, WAF-PERF, WAF-REL, WAF-OPS, WAF-SUS, and WAF-SOV controls are stable and covered by WOMBATpass tooling. Agentic (Pillar 8) released in v1.1.
Operationalization & Full Rollout.
After the v1.0 launch, Wombat shifts into full operationalization — community pilots, governance finalization, and complete pillar coverage.
Pilot & Governance Finalization
A pilot project to validate the building-block approach in multi-cloud scenarios, along with finalizing the governance and community model.
- Multi-cloud pilot
- Governance review
- Stabilize community structure
Stabilization & Ecosystem Growth
With all eight pillars documented ahead of schedule, the focus shifts to hardening the Security pillar, scoring model finalization, and growing the early adopter ecosystem.
- Security pillar (Pillar 1) fully documented
- PASS scoring model v1 finalized
- Cross-pillar reference architecture
- Early adopter feedback & controls refinement
Roadmap to 2030.
Long-term milestones that establish Wombat as a foundational, community-owned standard for cloud architecture quality.
Technical Steering Committee
Formal election of a TSC to provide long-term steering for project development — independent of any founding members.
CNCF Alignment
Full alignment with CNCF project guidelines and best practices — governance, lifecycle, and community model modelled after proven open-source foundations.
Auditability
Enable formal auditability according to the Wombat standard — criteria are traceable, decisions are documented, and outcomes are reproducible.
Wombat Certification
Introduce a Wombat certification program for teams and organizations — a verifiable, community-backed signal of architecture quality.
Advisory Model
Founders transition into advisory roles — operational decisions are fully owned by the community, TSC, and Working Groups.
Help set the direction.
Roadmap priorities are discussed openly in GitHub Discussions and decided via RFCs. Every community member can propose, challenge, or vote on what comes next.