Roadmap: reachr v1 (slice plan)

[nkcoder]

Master roadmap for reachr v1. Each slice is a milestone ending in a committed proof artifact. Detailed issues are created just-in-time as each slice starts.

Plan: 0 skeleton -> 1 scan+fixture -> 2 dot render -> 3 SG engine -> 4 route engine -> 5 explain -> 6 labeling -> 7 HTML -> 8 filter/demote -> 9 NACL+polish

• Slice 0 — Skeleton & rails — Go module, Cobra CLI, CI. Proof: reachr --help, CI green.
• Slice 1 — Scan backbone + fixture — VPC/subnet/RT/ENI/SG -> topology.json + golden fixture. Proof: real VPC scanned.
• Slice 2 — Structural render (dot) — nodes + subnet clusters + deep-links. Proof: PNG in README.
• Slice 3 — Engine: security groups (rung 1) — ENI->ENI SG edges + honest verdicts. Proof: blocked-SG fixture.
• Slice 4 — Engine: route tables (rung 2) — longest-prefix, blackhole, NAT/IGW. Proof: no-route fixture withheld.
• Slice 5 — explain command — first blocking hop + owning repo. Proof: explain real broken path.
• Slice 6 — Resource labeling — ALB/ECS/RDS/endpoints, xN collapse, stubs. Proof: DoD diagram.
• Slice 7 — Interactive HTML render — cytoscape, grouping, click-expand. Proof: GIF in README.
• Slice 8 — Filtering & demotion — liveness + tag scope + side-list. Proof: scoped diagram.
• Slice 9 — Light NACLs + v1 polish — rung 3 + DoD polish. Proof: v1 tag.

Source of truth for scope/architecture: DESIGN.md.