[meta] pdv roadmap: planned enhancements

Tracking issue for the planned enhancements on the pdv roadmap (also kept in docs/roadmap.md). Each item links its issue; a couple are design directions without a dedicated issue yet.

Security and keys

• OpenBao-backed Master KEK: fetch the Master KEK from OpenBao so the root secret never sits in Drupal config (in progress on the feat/openbao branch).
• Multi-tenant vaults, per-tenant Master KEK and pluggable tenant resolution with a domain connector: #3593589: Multi-tenant support: per-tenant Master KEK and pluggable tenant resolution.

Data lifecycle and rights

• Owner vault export (data portability): #3593603: Owner vault export (data portability).
• Automatic cleanup of dormant vaults with warn-before-purge: #3593601: Automatic cleanup of dormant vaults with warn-before-purge.
• Per-kind discriminator for non-unique kinds (no dedicated issue yet).

Operations and observability

• Status Report health surface via hook_requirements: #3593592: Add a health surface via hook_requirements (Status Report).
• pdv_monitoring submodule exposing monitoring sensors: #3593593: Add a pdv_monitoring submodule integrating the monitoring module.

Architecture and ergonomics

• Notification convention (modules emit events; the site delivers): #3593604: Notification convention: modules emit events, the site delivers (no per-module notifier).
• Multi-value pdv_file webform element: #3593569: Support multiple values on the pdv_file element.

Related in other projects

• audit_trail_monitoring bridge (#3593598: Add an audit_trail_monitoring bridge integrating the monitoring module) and its SIEM-lite detection rules (#3593599: audit_trail_monitoring: detection rules (SIEM-lite)) mirror the pdv monitoring direction in the audit_trail project.