Roadmap

[b-long]

Unofficial OpenTDF SDK for Python Roadmap

Current Status

The SDK provides fully functional TDF and NanoTDF encryption/decryption with KAS integration. Platform management services (policy, attributes, etc.) are not yet implemented.

What's Working ✅

• TDF & NanoTDF: Complete encryption/decryption with KAS integration
• Authentication: OAuth client credentials flow with token caching
• Configuration: SDKBuilder pattern with flexible endpoint configuration
• Connect RPC: Modern HTTP-friendly RPC for platform communication

What's Missing 🚧

• Platform Services: No policy, attributes, or namespace management APIs
• Advanced Auth: Custom authentication interceptors
• DPoP: Proof-of-possession token support is incomplete
• KAS Registry: Service discovery functionality

Implementation Approach

Current Priority: Maintain Quality

• Keep removed placeholders out until needed
• Focus on TDF/NanoTDF excellence
• No new features without working implementations
• Document missing functionality clearly

Future Additions (As Needed)

Add functionality only when:

• There's a specific user request or use case
• We can provide complete, tested implementation
• It uses Connect RPC (not legacy gRPC)
• It follows Python conventions

Potential additions by priority:

1. Platform service clients (attributes, policies, namespaces)
2. Advanced policy management operations
3. Custom authentication interceptors
4. Enhanced SSL/TLS management

Quality Gates

Before adding any service:

1. ✅ Working implementation (no placeholders)
2. ✅ Test coverage (unit + integration)
3. ✅ Documentation with examples
4. ✅ Connect RPC protocol
5. ✅ Python idioms (not Java ports)