diff --git a/ROADMAP.md b/ROADMAP.md
index 4a913e1289..77cddd2dcf 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -822,21 +822,21 @@ ObjectUI is a universal Server-Driven UI (SDUI) engine built on React + Tailwind
 - [x] Navigate to Create App / Edit App pages
 - [x] Navigate to app home
 
-**Permission Management Page (`/system/permissions`):**
-- [x] CRUD grid for `sys_permission` object
-- [x] Search/filter permissions
-- [x] Admin-only create/delete controls
-
-**ObjectView-Driven System Pages (P1.12.2):**
-- [x] Shared `SystemObjectViewPage` component using `ObjectView` from `@object-ui/plugin-view`
-- [x] User Management (`/system/users`) driven by `sys_user` metadata via ObjectView
-- [x] Organization Management (`/system/organizations`) driven by `sys_org` metadata via ObjectView
-- [x] Role Management (`/system/roles`) driven by `sys_role` metadata via ObjectView
-- [x] Permission Management (`/system/permissions`) driven by `sys_permission` metadata via ObjectView
-- [x] Audit Log (`/system/audit-log`) driven by `sys_audit_log` metadata via ObjectView (read-only)
-- [x] Admin-only CRUD operations controlled via ObjectView `operations` config
-- [x] Automatic search, sort, filter, pagination from ObjectView capabilities
-- [x] 22 system page tests passing
+**Permission Management Page (`/system/permissions`):** _(Retired — the page was deleted; the successor surface is pending maintainer decision, see #3655)_
+- [x] CRUD grid for `sys_permission` object — shipped, then deleted when `apps/console` was slimmed for third-party customisation. `sys_permission` is not a framework object name: plugin-security registers `sys_capability` (the definition registry) and `sys_permission_set` (the grant container)
+- [x] Search/filter permissions — went with the page
+- [x] Admin-only create/delete controls — went with the page
+
+**ObjectView-Driven System Pages (P1.12.2):** _(Retired — the console's wrapper pages are gone; these objects are contributed by framework plugins and reached through the Setup app's generic object route)_
+- [x] Shared `SystemObjectViewPage` component, and the hand-copied `systemObjects` definitions behind it — deleted as dead code once nothing in the repo referenced them (PR #3699)
+- [x] User Management (`/system/users`) — page gone; the URL survives as a redirect onto the framework's `sys_user` object route (PR #3673)
+- [x] Organization Management (`/system/organizations`) — page gone; the URL redirects to `sys_organization` (PR #3673). The `sys_org` named here was never a framework object
+- [x] Role Management (`/system/roles`) — page gone; the URL redirects to `sys_position` (PR #3673), ADR-0090 D3 having renamed `sys_role` → `sys_position`
+- [ ] Permission Management (`/system/permissions`) — no route is declared for it. The framework splits this surface into `sys_capability` and `sys_permission_set`, so binding the URL to either would pick for the maintainer; left undeclared pending that decision, see #3655
+- [x] Audit Log (`/system/audit-log`) — the route still resolves, but to `AuditLogPage`, a standalone read-only page that queries `sys_audit_log` over REST and renders its own table, filters, pagination and detail sheet; ObjectView is not involved
+- [x] Admin-only CRUD operations — were the `operations` config on `SystemObjectViewPage`'s own schema, and went with the component (PR #3699)
+- [x] Automatic search, sort, filter, pagination — likewise; what serves these objects today is the framework's Setup app route, not this repo's
+- [x] System page test suite — retired with the pages; `pages/system/__tests__/` now covers `SystemHubPage` only
 
 **Sidebar & Navigation Updates:**
 - [x] Settings button → `/system/` hub (was `/system/profile`)