Compose, never rewrite
Each release adds a layer on top of the previous one. Day-1 decisions are still valid eight months later: that's the real asset.
A platform that landed in production already mature, and has been shipping continuously for eight months without a single architectural rewrite. Inside: the numbers, the principles, the process, the direction.
Five constraints we apply before writing a single line of code. If a feature doesn't pass these filters, it doesn't enter the plan.
Each release adds a layer on top of the previous one. Day-1 decisions are still valid eight months later: that's the real asset.
Organization, workspace, membership and billing live in the data model before any feature. No data separation retrofitted down the road.
MCP, OpenAPI, JWT, OAuth, S3-compatible. Multi-provider LLM via AWS Bedrock (Anthropic Claude, OpenAI), data on Supabase Postgres. Customers take their data, integrations and agents elsewhere with zero lock-in.
Timeouts, exponential retries, isolation per worker type, dedicated processes on AWS. Atomic job claim on the Supabase processes table. Long-running tasks never degrade the user's chat experience.
More capability per module, fewer modules. The platform can be understood in half a day, not a quarter of onboarding.
Each capability grows across the four phases, from seed to composable. Shows the platform is engineered by pillars, not opportunistically per feature.
Sep 2025 | Jan 2026 | Mar 2026 | May 2026 | |
|---|---|---|---|---|
Knowledge base management | ||||
Agents and Super Agents NOEVA | not in scope | |||
Deterministic workflows | not in scope | not in scope | ||
External integrations | ||||
Billing and tenancy | not in scope | |||
Observability and telemetry | not in scope | not in scope |
Each phase built on top of the previous, with a clear context, a key architectural decision, and a concrete metric anchoring it to reality.
Before any AI feature, we needed a solid platform with data separated per client: identity, workspace, file primitives and an initial RAG pipeline to anchor everything else.
Multi-tenancy in the data model before any feature: no retrofitting later, no painful migrations.
Once workspaces worked, the real blocker was turning uploaded documents into AI-ready knowledge without manual intervention. The AI Ready concept was born here.
Per-type worker whitelist with runtime isolation: heavy tasks never degrade the synchronous chat experience.
With workspaces stable and atomic agents in production, the next step was wiring AI into customers' real processes: CRM, HR, communications, scheduled jobs.
Deterministic workflows alongside agentic agents: every critical process has a DAG-typed variant without LLM creativity.
The last macro layer turns NOEVA from a vertical product into a composable platform: catalog of agents and workflows, per-workspace billing, distributed MCP servers and enterprise governance.
MCP as the official interop protocol: the platform exposes itself to external clients without inventing proprietary contracts.
No exact dates, but six concrete worksites open right now, each with a clear reason to exist. The sign that the platform is alive, every week.
Exposes the 37 Mastra agents as standard MCP tools, authenticated via Personal API key: enables external orchestration from Claude, Cursor and any MCP-compatible client.
User-scoped tokens with extensible scopes: a prerequisite for external MCP, custom integrations and on-behalf-of automation without exposing workspace credentials.
Iframe + postMessage protocol matured: theme sync, navigation state, auth refresh, to integrate the agents chat into any white-label portal.
An onboarding agent that produces the initial workspace knowledge base from a structured conversation: shortens new-customer time-to-value.
Per-run agent tracing, per-model cost attribution, continuous eval sets: enterprise prerequisite to put LLMs in critical flows with accountability.
Catalog + per-workspace billing + revenue share: turns the marketplace from a showcase into a composable economy for partners and agent creators.
No dates, no promises: the direction that drives our architecture and investment decisions. What you'll see in six or twelve months starts here.
Granular audit trail, RBAC on every resource, EU data residency, ISO 27001/27017 alignment. Compliance isn't bolted on later: it's engineered from the start.
Catalog, per-workspace billing, revenue share, cost attribution per token and per model. A platform that composes, measures and bills itself.
Tracing for every agent run, continuous evaluations, per-workspace cost attribution. LLMs in production aren't a black box: they're a measurable system.
A roadmap without a process is a list of promises. Four practices we apply to every release, from code review to runtime isolation.
Small, frequent releases, continuous integration on main, fast rollback. Moving quickly is a property of the process, not an aspiration.
Automatic code review and security review on every PR. No code in main without multiple eyes, no shortcuts on critical features.
Worker types dedicated by purpose (api / heavy) on AWS, scheduled jobs separate from the synchronous pipeline. The Supabase processes table acts as the atomic broker for job claiming. A slow pipeline never slows down the others.
Sentry + Supabase metrics + structured logging on AWS CloudWatch; Cloudflare Analytics at the public edge. We know what the platform is doing in real time, not just when something breaks.
The public changelog tells you what shipped to production, version by version.