docs: roadmap checklists, Progress column, commit/version protocol

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/plans/dmarc-reports.md

@@ -48,3 +48,18 @@ remain a separate, opt-in feature that does not forward mail upstream.
 
 - Attack surface of accepting mail (mitigate: strict recipient allow-list).
 - Report volume and retention (mitigate: caps + pruning).
+
+## Implementation checklist
+
+Target version cut: **`1.7.0`** (MINOR). One commit per step; code only after
+roadmap status is **agreed**. Expand the sketch sections above before step 1
+if still thin. See [development.md](../development.md) § Plan checklists.
+
+- [ ] Expand plan: ingest path, `dmarc_reports` schema, retention caps — **Sonnet**
+- [ ] Opt-in inbound SMTP for report addresses only (allow-list) — **Opus**
+- [ ] Worker: gzip/XML parse → SQLite — **Opus**
+- [ ] Panel: domain roll-up + parsed report (panel-ui mockups) — **Sonnet**
+- [ ] Tie-in `dmarc_report_email` / `domains.dmarc_rua` — **Sonnet**
+- [ ] Tests and [guide.md](../guide.md) — **Sonnet**
+- [ ] Security review ingest path — **Fable**
+- [ ] `go vet`, `go test` on touched packages — **Haiku**

docs/plans/domain-stats-auto-ratelimit.md

@@ -185,3 +185,21 @@ change in [guide.md](../guide.md) § Export.
   from the panel.
 
 **Version:** `1.x` MINOR.
+
+## Implementation checklist
+
+Target version cut: **`1.6.0`** (MINOR). One commit per step; code only after
+roadmap status is **agreed**. See [development.md](../development.md) § Plan
+checklists.
+
+- [ ] Migration `0006_rate_limit_auto.sql` (`mode`, `auto_multiplier`, `auto_updated_at`) — **Opus**
+- [ ] `internal/store/stats.go`: total / peak / avg over 30 days — **Opus**
+- [ ] Auto recalc job (6h): `ceil(avg × multiplier)`, L1 cap, fail-open on error — **Opus**
+- [ ] Extend `RateLimit` + handler forms (manual/auto) — **Opus**
+- [ ] Domain page stats card + per-app stats (`domain_detail.html`) — **Sonnet**
+- [ ] Domain export JSON includes rate limits — **Opus**
+- [ ] Milter tests — enforced limit matches stored ceiling — **Opus**
+- [ ] Store and handler tests — **Sonnet**
+- [ ] [guide.md](../guide.md) — **Sonnet**
+- [ ] Security review rate-limit path — **Fable**
+- [ ] `go vet`, `go test` on touched packages — **Haiku**

docs/plans/inbound-relay.md

@@ -169,3 +169,25 @@ the SelfPost image, brought up by the operator when the option is enabled.
 
 A finished outbound path (already implemented). Agreement obtained — see the
 status above.
+
+## Implementation checklist
+
+Target version cut: **`1.4.0`** (MINOR). One commit per step; see
+[development.md](../development.md) § Plan checklists. UI reference:
+[panel-ui inbound mockups](../assets/panel-ui/inbound.html).
+
+- [ ] Migration: inbound domain / recipient / transport tables under `/data` — **Opus**
+- [ ] `INBOUND_RELAY_ENABLE` (default false) in entrypoint + `postfix-config.sh` — **Opus**
+- [ ] `master.cf`: inbound `smtp inet` on 25; separate from 465/587 — **Opus**
+- [ ] Generate `relay_domains`, `transport_maps`, `relay_recipient_maps` (injection-safe) — **Opus**
+- [ ] `smtpd_relay_restrictions` / recipient maps — no open relay, no backscatter — **Opus**
+- [ ] `internal/store` CRUD + validation (domain, host, port) — **Opus**
+- [ ] Panel: list, add, domain detail, recipients, danger zone (mockups) — **Sonnet**
+- [ ] Rate limit + `message_size_limit` on inbound smtpd — **Opus**
+- [ ] Optional `INBOUND_ANTISPAM_MILTER` + compose fragment — **Opus**
+- [ ] DNS MX copy in README/guide; `.env.example` — **Sonnet**
+- [ ] Backup/export inbound config (per plan optional flag) — **Opus**
+- [ ] Unit + handler tests; image build and container smoke — **Opus**
+- [ ] [guide.md](../guide.md) and [security.md](../security.md) — **Sonnet**
+- [ ] Security review inbound path — **Fable**
+- [ ] `go vet`, `go test`, e2e if applicable — **Haiku**

docs/plans/panel-docs.md

@@ -0,0 +1,54 @@
+# Plan: panel-docs (in-panel operator documentation)
+
+**Status:** candidate  
+**Date:** 2026-08-17  
+**Version:** `1.x` MINOR; `candidate` until explicitly agreed.
+
+---
+
+## Goal
+
+Built-in operator documentation in the panel — short pages or a help drawer that
+explain what each Status check and other controls mean, without sending the
+operator out to [guide.md](../guide.md).
+
+## Scope
+
+**In:**
+
+- Help drawer or short help pages (CSS-checkbox pattern from
+  [panel-ui mockups](../assets/panel-ui/system.html)).
+- Seed content: Status blurbs removed from cards for a denser layout — Machine
+  (kernel counters / rate window), TLS certificate (port 465, reverse-proxy
+  mount), Hostname / reverse DNS (FCrDNS, PTR at the hosting provider), and
+  similar notes for other surfaces as inline commentary is removed.
+- «?» entry points on domain cards (mockups).
+
+**Out:**
+
+- A second copy of the full operator guide.
+- Translation workflow beyond English (same as the rest of the panel).
+
+## Done when
+
+An operator can open help from the panel for those topics; the removed Status
+blurbs are preserved there (or equivalent); no requirement to read the git
+tree for day-to-day meaning of a card.
+
+## Risks
+
+Copy ownership and keeping help in sync when checks change; not bloating every
+page with a second column of prose.
+
+## Implementation checklist
+
+Target version cut: **`1.8.0`** (MINOR). One commit per step; code only after
+roadmap status is **agreed**. See [development.md](../development.md) § Plan
+checklists.
+
+- [ ] Help drawer / pages shell (CSS checkbox pattern from mockups) — **Sonnet**
+- [ ] Seed Status blurbs (Machine, TLS, PTR, …) — **Sonnet**
+- [ ] «?» entry points on domain cards — **Sonnet**
+- [ ] [guide.md](../guide.md) boundary: in-panel help vs full guide — **Sonnet**
+- [ ] Template tests — **Sonnet**
+- [ ] `go vet`, `go test` on touched packages — **Haiku**

docs/plans/queue-retries.md

@@ -139,3 +139,18 @@ lifetime runs out.
 - Showing compiled-in fallbacks when `postconf` failed would mislead if the
   operator had overridden them — mitigate with the muted note on the card.
 - Inventing a max-attempt count would be false; the copy must stay time-based.
+
+## Implementation checklist
+
+Target version cut: **`1.3.1`** (PATCH). One commit per step; see
+[development.md](../development.md) § Plan checklists.
+
+- [ ] `internal/postfix`: parse Postfix time units (`5d`, `300s`, bare seconds) + tests — **Opus**
+- [ ] `internal/postfix`: one-shot `postconf -h` (six keys), fallback + warn — **Opus**
+- [ ] Load policy at HTTP start in `cmd/panel/httpserver.go`; cache on handlers config — **Opus**
+- [ ] Human-readable duration formatter (shared by Mail queue card and delivery history) — **Sonnet**
+- [ ] «How delivery retries work» card on `/mail-queue` (outside HTMX fragment) — **Sonnet**
+- [ ] `deliveryEvents(row, policy)` — intervals in deferred/bounced copy — **Sonnet**
+- [ ] Handler and template tests (`handlers_monitor_test.go`, `templates_test.go`) — **Sonnet**
+- [ ] [guide.md](../guide.md) and [architecture.md](../architecture.md) — **Sonnet**
+- [ ] `go vet`, `go test` on touched packages — **Haiku**

docs/plans/send-log-retention.md

@@ -122,3 +122,18 @@ Domain administrators keep the narrow credentials-only settings page.
   stale int from panel start only.
 
 **Version:** `1.x` MINOR.
+
+## Implementation checklist
+
+Target version cut: **`1.5.0`** (MINOR). One commit per step; code only after
+roadmap status is **agreed**. See [development.md](../development.md) § Plan
+checklists.
+
+- [ ] `GetSendLogRetentionDays` / `SetSetting` key `send_log_retention_days` (7–365) — **Opus**
+- [ ] Bootstrap from `SEND_LOG_RETENTION_DAYS` when settings empty — **Opus**
+- [ ] `logtail.retentionLoop`: read setting each prune cycle — **Opus**
+- [ ] Settings card on `/settings` (`settings.html`) — **Sonnet**
+- [ ] Remove hardcoded «ninety days» in handlers and templates — **Sonnet**
+- [ ] Tests: save/load, range, loop without restart — **Sonnet**
+- [ ] [guide.md](../guide.md) — **Sonnet**
+- [ ] `go vet`, `go test` on touched packages — **Haiku**