diff --git a/PLAN.md b/PLAN.md
new file mode 100644
index 00000000..7f865ddb
--- /dev/null
+++ b/PLAN.md
@@ -0,0 +1,41 @@
+# Logicytics 4.x Plan
+
+| Version |  Description |
+|---------|--------------------------|
+| 4.1.0 | Add a static HTML report for reviewing completed runs. |
+| 4.1.0 | Add filters for collector status, errors, capabilities, and artifacts. |
+| 4.1.0 | Add a machine-readable summary for downstream tools. |
+| 4.1.0 | Link report entries to their manifest records and artifact hashes. |
+| 4.2.0 | Add optional case IDs, acquisition labels, examiner names, and notes. |
+| 4.2.0 | Record normalized UTC acquisition and host-clock details. |
+| 4.2.0 | Add an append-only audit trail for each run lifecycle. |
+| 4.2.0 | Add export controls for sensitive case fields. |
+| 4.3.0 | Add a command for comparing two completed runs. |
+| 4.3.0 | Report collector, status, artifact, and inventory changes. |
+| 4.3.0 | Export comparisons as JSON and static HTML. |
+| 4.3.0 | Allow completed runs to be labeled as approved baselines. |
+| 4.4.0 | Add a command for creating a minimal plugin skeleton. |
+| 4.4.0 | Add focused plugin contract and capability validation. |
+| 4.4.0 | Add reusable plugin testing fixtures. |
+| 4.4.0 | Add explicit plugin compatibility declarations for 4.x. |
+| 4.5.0 | Add a command for preparing portable offline collection bundles. |
+| 4.5.0 | Record portable bundle contents and dependency hashes. |
+| 4.5.0 | Check target privileges, free space, and optional tools before collection. |
+| 4.5.0 | Add verified importing of runs returned from offline hosts. |
+| 4.6.0 | Add recovery runs for eligible incomplete collectors. |
+| 4.6.0 | Preserve parent-run identity and original results during recovery. |
+| 4.6.0 | Add opt-in checkpoints for collectors that safely support them. |
+| 4.6.0 | Improve low-disk-space handling and interrupted-run diagnostics. |
+| 4.7.0 | Estimate run duration and output size from compatible local history. |
+| 4.7.0 | Explain worker-count and scheduling decisions during planning. |
+| 4.7.0 | Add enforceable per-run resource limits where Windows supports them. |
+| 4.7.0 | Add repeatable engine and collector performance benchmarks. |
+| 4.8.0 | Add a command for verifying runs, packages, manifests, and artifacts. |
+| 4.8.0 | Add canonical manifest serialization for stable integrity checks. |
+| 4.8.0 | Support optional detached package signatures. |
+| 4.8.0 | Add traceable redacted exports with transformation receipts. |
+| 4.9.0 | Audit and stabilize the CLI, API, configuration, and output contracts. |
+| 4.9.0 | Add migration advice for deprecated 4.x fields. |
+| 4.9.0 | Publish a supported Windows and Python compatibility matrix. |
+| 4.9.0 | Add deterministic golden runs for supported operating-system workflows. |
+| 4.9.0 | Publish a capability map linking features to commands and tests. |
diff --git a/README.md b/README.md
index c2631523..a81c02c4 100644
--- a/README.md
+++ b/README.md
@@ -25,6 +25,7 @@ obscuring the rest of the verified run.
 
 The complete user and developer manual is in [`docs/README.md`](docs/README.md) and is mirrored to
 the [Logicytics Wiki](https://github.com/DefinetlyNotAI/Logicytics/wiki).
+Candidate features for the next nine 4.x releases are tracked in the [4.x roadmap](PLAN.md).
 
 > Use Logicytics only on systems and data you are authorized to inspect.