Documentation / Mirino Labs Roadmap — AI Governance Platform
Mirino Labs Roadmap — AI Governance Platform
What ships today, what is next, and what is planned across AI asset discovery, non-human identity monitoring, and vendor security review automation.
Statuses as of November 2026. Nothing here carries a promised date — phases advance when they pass testing and review, not on a marketing calendar.
Available today
- This documentation hub — the product docs at mirinolabs.com/docs.
In UAT — testing and verification
- Vendor Lens review pipeline — questionnaires, SOC 2 ingestion, CUEC review, and auditor-ready reporting, moving through acceptance testing and verification before anything is called available.
- IdentityLens Cloud detection engine — read-only CloudTrail ingestion, the v1 detector set, and the alert workflow, running as an MVP and moving through acceptance testing and verification.
In progress
- AI Asset Lens multi-tenant workbench — engagement management, evidence import, endpoint collection, agentic security testing, and reporting under active development.
- Documentation hub build-out — expanding the product documentation set shipped at mirinolabs.com/docs, refreshed as milestones land.
Next
- Unified console — one portal across the three lenses, replacing separate product frontends. The identity model is already decided: the console adopts AI Asset Lens' multi-tenant architecture as the platform's foundation rather than introducing a second tenancy system.
Planned
- IdentityLens Cloud multi-tenant ingestion — per-tenant cross-account read-only roles, per-tenant credential isolation so clients connect their AWS accounts without shared secrets, GCP and Azure log ingestion under the same read-only design, and a database migration from the MVP's single-store design to per-tenant records.
- Vendor Lens platform integration — moving the completed MVP under the shared console and tenant model.
How we ship
Everything builds and deploys through a gated pipeline: static analysis and npm audit gates on every change, typecheck/build/test gates before anything reaches production, and atomic releases with automated health checks and rollback.