Roadmap

Nothing here carries a date, and the order can change.

• Public launch.
• DNS-anchored agent identity (ANS v2 and DNSid). The DNS work underneath is done: DNSSEC is live, TLSA exists, and the TXT record type shipped. What remains is deciding how far we will go in asserting what a customer agent is, on the domains we hold. That call unblocks the build.
• Anycast for the nameservers we run ourselves. A standard-plan domain already answers from Cloud DNS's anycast network; starter domains are served by two boxes, at two providers in two countries.
• Health checks, multi-record round-robin, and failover.