Milestones

List view

• Slice 9 — Light NACLs + polish

  Rung 3 NACL light pass (loudly labeled). Final v1 DoD polish, demo README. Proof: v1 tag.

  No due date
  0% complete0 open0 closed

• Slice 8 — Filtering & demotion

  Liveness filter + cleanup side-list; --filter tag:project=X scope; connectivity dimming; toggles. Proof: scoped diagram + side-list.

  No due date
  0% complete0 open0 closed

• Slice 7 — Interactive HTML render

  cytoscape.js self-contained HTML: grouping, collapse, click-to-expand, deep-links. Proof: GIF in README.

  No due date
  0% complete0 open0 closed

• Slice 6 — Resource labeling

  ALB/NLB+target groups, ECS, RDS, VPC endpoints; ENIs collapse to logical nodes, xN grouping; boundary stubs. Proof: DoD diagram ALB->ECS->RDS + endpoints.

  No due date
  0% complete0 open0 closed

• Slice 5 — explain command

  explain --from --to --port -> path + first blocking hop + owning repo (tags) + honest verdict line. Proof: explain a real broken path.

  No due date
  0% complete0 open0 closed

• Slice 4 — Engine: route tables

  Rung 2. Per-subnet longest-prefix, blackhole, IGW/NAT/egress-only; combine with SG. Proof: SG-allows-but-no-route fixture correctly withheld.

  No due date
  0% complete0 open0 closed

• Slice 3 — Engine: security groups

  Rung 1. ENI->ENI edges from SG rules (ingress/egress, SG-refs-SG, prefix lists). Honest verdict fields. TDD on fixtures. Proof: blocked-SG fixture test passes, edges render.

  No due date
  0% complete0 open0 closed

• Slice 2 — Structural render (dot)

  render -> Graphviz dot: logical nodes, VPC/subnet clusters, console deep-links. No edges yet. Proof: PNG of real VPC in README.

  No due date
  0% complete0 open0 closed