# Crash reporter roadmap

## Done (v0)

- Android `:crashwatcher` process uploads pending JSON
- Anonymous schema v1 (device, app, java/native stacks, fingerprint)
- PHP receiver + SQLite default + MariaDB option
- Admin console (login, reports list, grouping by fingerprint)
- `settings.json` crash section overrides

## Next

- [ ] User registration + email verification + TOTP 2FA — **alpha must-have** — [docs/20260607-2FA-email-mobile-auth-flow.md](../../docs/20260607-2FA-email-mobile-auth-flow.md)
- [ ] Email infra: `info@` / `admin@` / `root@` @ `apps.f0xx.org` → Gmail forward (§9)
- [ ] RBAC editor UI (delegate roles per module)
- [ ] Symbolication (ndk-stack / retrace) for native/Java stacks
- [ ] MQTT ingest endpoint (parallel to HTTP POST)
- [ ] Rate limiting + API keys per app build
- [ ] Export reports (CSV/JSON bundle)
- [ ] Alerting (webhook when new fingerprint appears)
