From ac4b790706f17f005f32633547a99639b086307e Mon Sep 17 00:00:00 2001
From: testtest126 <44771568+testtest126@users.noreply.github.com>
Date: Wed, 15 Jul 2026 11:31:22 +0200
Subject: [PATCH] Docs: add project roadmap

Gives a single at-a-glance view of near-term priorities (open PRs,
the rate-limiter security gate) versus what's queued behind the
single-instance launch.
---
 ROADMAP.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 ROADMAP.md

diff --git a/ROADMAP.md b/ROADMAP.md
new file mode 100644
index 0000000..4a64c9b
--- /dev/null
+++ b/ROADMAP.md
@@ -0,0 +1,14 @@
+# MateMate — Roadmap
+
+## Now
+- Merge #186 (CI permissions) and #187 (security headers).
+- Review and approve #185 (Postgres sliding-window rate limiter) at the `Security review: APPROVE @ <sha>` gate.
+- Run the Screenshots workflow.
+
+## Next
+- Ship the single-instance launch (#28) — the milestone the rate-limiter work was gating for.
+- Polish post-game analysis.
+
+## Later
+- Shared-store rate limiter — #182 (Postgres) merged, with #183 (Redis) / #184 (Fly edge) revisited only once the server scales past one instance.
+- Spectator / rating depth.