PROJECT_ROADMAP.md¶
Garuda Chain Ecosystem — Roadmap Pengembangan
| Metadata | |
|---|---|
| Versi dokumen | 1.0.0 |
| Horizon | 12 bulan (Juli 2026 – Juni 2027) |
| Prinsip | Tidak mengganggu production; staging first |
| Terakhir diperbarui | 2026-07-04 |
1. Status Saat Ini (Baseline)¶
Sudah Live (Production — Chain 8846)¶
| Area | Status |
|---|---|
| Besu mainnet (5 validators IBFT2) | ✅ Live |
| GDC, GIDR, 17 smart contracts | ✅ Deployed |
| Bridge V2 (ETH/BSC/Polygon) | ✅ Operasional |
| 14 wrapped market tokens | ✅ Minted |
| Garuda Wallet (send, pay, NFT, stake, bridge) | ✅ Live |
| Explorer (blocks, txs, NFT, bridge, validators) | ✅ Live |
| API REST + GraphQL + RPC proxy | ✅ Live |
| Admin Monitor | ✅ Live |
| Community rewards (check-in, missions, referral) | ✅ Live |
| Garuda Pay (rails, fiat, CS) | ✅ Live |
| KYC Level 2 + GNFT mint | ✅ Live |
| Monitoring (Prometheus/Grafana) | ✅ Tersedia |
| Staging environment (8847) | ✅ Tersedia |
Gap untuk Skala Enterprise¶
| Gap | Prioritas |
|---|---|
| Database relasional (masih JSON files) | P0 |
| Automated API tests | P0 |
| SDK deployment sync | P0 |
| Shared packages (types, ui-core) | P1 |
| API v2 Clean Architecture | P1 |
| External smart contract audit | P1 |
| Wallet code splitting / module registry | P2 |
| Bridge full stack di staging | P2 |
| PostgreSQL migration | P2 |
2. Horizon Pengembangan¶
Horizon 0 — Dokumentasi & Fondasi (Bulan 1)¶
Tujuan: Memahami sistem sebelum refactor. Tidak mengubah production.
| # | Deliverable | Output | Environment |
|---|---|---|---|
| 0.1 | Dokumen arsitektur enterprise | 6 dokumen di docs/architecture/ |
Docs |
| 0.2 | Deployment registry generator | scripts/generate-deployments.ts |
CI |
| 0.3 | Fix SDK drift vs chain/deployments/ |
Build-time sync | Monorepo |
| 0.4 | packages/types — shared DTO |
GNFT, Bridge, GarudaPay types | Monorepo |
| 0.5 | packages/ui-core — gnftDisplay, formatters |
Kurangi duplikasi wallet/explorer | Monorepo |
| 0.6 | API test bootstrap (Vitest) | 10+ critical path tests | CI |
Exit criteria: CI green, dokumentasi review oleh tim, staging unchanged.
Horizon 1 — Stabilisasi & Keamanan (Bulan 2–3)¶
Tujuan: Hardening staging; perbaikan non-breaking di shared code.
| # | Deliverable | Environment | Production impact |
|---|---|---|---|
| 1.1 | Security hardening staging | Staging API | None |
— Auth pada POST /bridge/relay, /process, /track |
|||
| — CORS restrict ke domain Garuda | |||
| — Rate limit granular per-endpoint | |||
| 1.2 | GraphQL auth layer (staging) | Staging | None |
| 1.3 | Validator applications: captcha + rate limit | Staging | None |
| 1.4 | Wallet CSP headers (Cloudflare) | Wallet Pages | Low risk |
| 1.5 | Expand API test suite (50+ tests) | CI | None |
| 1.6 | RPC health service terpusat di SDK | Staging | None |
Exit criteria: Pen test staging passed; tidak ada regresi smoke test production.
Horizon 2 — Platform Layer (Bulan 4–6)¶
Tujuan: Parallel services; migrasi data di staging only.
| # | Deliverable | Detail |
|---|---|---|
| 2.1 | PostgreSQL POC | Garuda Pay + KYC stores |
| 2.2 | apps/api-v2 skeleton |
Clean Architecture, read-only endpoints |
| 2.3 | Repository pattern | JSON adapter + PostgreSQL adapter |
| 2.4 | Bridge full stack di testnet 8847 | Deploy bridge contracts ke staging |
| 2.5 | Wallet module registry POC | Lazy load tab Cards, Market |
| 2.6 | External smart contract audit | Testnet contracts, report publik |
| 2.7 | Error tracking (Sentry) | API + Wallet staging |
Exit criteria: API v2 staging soak 14 hari; PostgreSQL migration reversible.
Horizon 3 — Super App Modules (Bulan 7–9)¶
Tujuan: Fitur baru modular di staging; backward compatible.
| Modul | Scope | Catatan |
|---|---|---|
| Identity v2 | Extend GarudaIdentity + wallet UI | Tidak replace KYC v1 |
| Merchant / UMKM | PayHub merchant dashboard | Screen modular baru |
| Marketplace v2 | GNFT aggregator + listing API | Parallel ke marketplace v1 |
| Governance UI | Read-only proposal viewer | Tanpa on-chain changes |
| Developer Portal | API keys, webhook sandbox | Extend Phase 9 docs |
| Digital Certificate | POC ERC-721 utility NFT | Testnet only |
Exit criteria: Setiap modul punya test suite + dokumentasi; tidak merge ke production tanpa GA sign-off.
Horizon 4 — Scale & Production Migration (Bulan 10–12)¶
Tujuan: Migrasi bertahap ke production setelah gate passed.
| Gate | Kriteria |
|---|---|
| Staging soak | 30 hari tanpa incident P1 |
| Load test | API 1000 RPS read, 100 RPS write |
| Security | Audit + pen test sign-off |
| DR test | Backup restore verified |
| Rollback | Blue-green deploy API documented |
| Migrasi | Urutan | Strategi |
|---|---|---|
| Deployment registry | Pertama | Build-time only, zero downtime |
| Shared packages | Kedua | Wallet + Explorer consume packages |
| API v2 read endpoints | Ketiga | Shadow traffic di staging |
| PostgreSQL (Garuda Pay) | Keempat | Dual-write → cutover |
| PostgreSQL (KYC) | Kelima | Encrypted blob ke S3 |
| Community state | Keenam | Redis atau PostgreSQL |
| Wallet module shell | Ketujuh | Progressive rollout via feature flag |
3. Timeline Visual¶
2026-07 ████ Horizon 0 — Dokumentasi & Fondasi
2026-08 ████████ Horizon 1 — Stabilisasi & Keamanan
2026-09 ████████████
2026-10 ████████████████ Horizon 2 — Platform Layer
2026-11 ████████████████
2026-12 ████████████████████ Horizon 3 — Super App Modules
2027-01 ████████████████████
2027-02 ████████████████████
2027-03 ████████████████████████ Horizon 4 — Production Migration
2027-04 ████████████████████████
2027-05 ████████████████████████
2027-06 ████████████████████████ GA & Scale
4. Visi Jangka Panjang (Post-2027)¶
Fitur tidak diimplementasikan sekarang, tetapi arsitektur disiapkan:
| Domain | Kemampuan masa depan |
|---|---|
| Payment | QRIS live gateway, merchant POS, payroll |
| Identity | Digital ID nasional interoperable |
| NFT | Utility NFT (sertifikat, tiket, loyalty) |
| Governance | DAO voting, proposal execution |
| UMKM | Onboarding merchant, invoice, escrow |
| Layanan publik | Integrasi e-government (pilot) |
| Developer | SDK multi-chain, webhook, sandbox |
| Multi-chain | ChainRegistry contract, plugin relayer |
5. Workflow Wajib (Setiap Fitur Baru)¶
1. RFC singkat di docs/architecture/rfcs/ (opsional)
2. Implementasi di branch feature/*
3. Test lokal (npm run public:up / dev:stack)
4. Deploy staging (npm run staging:deploy)
5. Smoke + security review
6. Dokumentasi update (API, schema jika ada)
7. PR review + merge ke develop
8. Production deploy hanya setelah gate Horizon 4
6. Metrik Keberhasilan¶
| Metrik | Saat ini | Target 12 bulan |
|---|---|---|
| API test coverage | 0% | ≥ 70% critical paths |
| API p99 latency (read) | ~500ms | < 200ms |
| Wallet bundle size | ~1.2MB JS | < 600KB initial |
| Uptime production | — | 99.9% |
| Security findings open (P0/P1) | — | 0 |
| SDK deployment drift | Ada | 0 |
| Staging bridge coverage | Tidak ada | Full stack |
7. Yang TIDAK Dilakukan (Explicit Non-Goals)¶
Sampai Horizon 4 selesai:
- ❌ Rewrite wallet dari nol
- ❌ Migrasi blockchain ke chain lain
- ❌ Hapus fitur production yang aktif
- ❌ Ubah UI/UX identitas visual tanpa approval
- ❌ Deploy kontrak upgradeable ke mainnet tanpa audit
- ❌ Exchange listing / marketing massal
- ❌ DAO governance launch publik
8. Referensi¶
- SYSTEM_ARCHITECTURE.md
- REFACTOR_PLAN.md
- SECURITY_AUDIT.md
- roadmap.md — phase history (Phase 1–9)
- PHASE-2-IMPLEMENTATION-PLAN.md