Documentation / Mirino Labs Roadmap — AI Governance Platform

Mirino Labs Roadmap — AI Governance Platform

What ships today, what is next, and what is planned across AI asset discovery, non-human identity monitoring, and vendor security review automation.

Statuses as of November 2026. Nothing here carries a promised date — phases advance when they pass testing and review, not on a marketing calendar.

Available today

  • This documentation hub — the product docs at mirinolabs.com/docs.

In UAT — testing and verification

  • Vendor Lens review pipeline — questionnaires, SOC 2 ingestion, CUEC review, and auditor-ready reporting, moving through acceptance testing and verification before anything is called available.
  • IdentityLens Cloud detection engine — read-only CloudTrail ingestion, the v1 detector set, and the alert workflow, running as an MVP and moving through acceptance testing and verification.

In progress

  • AI Asset Lens multi-tenant workbench — engagement management, evidence import, endpoint collection, agentic security testing, and reporting under active development.
  • Documentation hub build-out — expanding the product documentation set shipped at mirinolabs.com/docs, refreshed as milestones land.

Next

  • Unified console — one portal across the three lenses, replacing separate product frontends. The identity model is already decided: the console adopts AI Asset Lens' multi-tenant architecture as the platform's foundation rather than introducing a second tenancy system.

Planned

  • IdentityLens Cloud multi-tenant ingestion — per-tenant cross-account read-only roles, per-tenant credential isolation so clients connect their AWS accounts without shared secrets, GCP and Azure log ingestion under the same read-only design, and a database migration from the MVP's single-store design to per-tenant records.
  • Vendor Lens platform integration — moving the completed MVP under the shared console and tenant model.

How we ship

Everything builds and deploys through a gated pipeline: static analysis and npm audit gates on every change, typecheck/build/test gates before anything reaches production, and atomic releases with automated health checks and rollback.