D1–D12 · embedded in the three products
The 12 security deliverables
Twelve distinct capabilities, not twelve repositories. Each has one primary owner; shared controls are built once and consumed through versioned contracts. The days below are the build window and the hardening window from the roadmap's own tables.
D19 days
Crescendo Attack Fuzzer
Project 1
910
D213 days
Sandboxed MCP Proxy
Project 3
30313233
D39 days
Inter-Agent Sanitization Bus
Project 3
37
D49 days
PII UUID-Swapping Gateway
Project 1
26
D511 days
RAG Citation & Poison Detector
Project 2
21
D68 days
CFG Output Caging Layer
Project 2
5253
D712 days
Delegated Agent OAuth Broker
Project 3
353637
D815 days
PyRIT CI/CD Security Gate
Shared Control
5051
D912 days
Computer-Use Pixel Auditor
Project 3
5758596061
D1012 days
Vector DB Sleeper-Agent Scrubber
Project 2
62
D1115 days
Cryptographic Trajectory Ledger
Project 3
1456
D1219 days
AI Supply-Chain SBOM Scanner
Shared Control
15161749
How to read the day lists
A day number in a deliverable page is a day whose own target line names that deliverable. The roadmap's matrix occasionally lists a day for a stage that the day's target line does not repeat; those rows are kept and shown as a union rather than silently dropped.