docs: consolidate Roadmap.md into Architecture and remove the root roadmap

README.md

@@ -164,7 +164,7 @@ All libraries tracked for pre-loading by DLL Pickle are maintained and documente
 - Deep technical explanation: [docs/Deep-Dive.md](docs/Deep-Dive.md)
 - Full command reference: [docs/DLLPickle.md](docs/DLLPickle.md)
 - Changelog and active work: [CHANGELOG.md](CHANGELOG.md)
-- Planned work: [Roadmap.md](Roadmap.md)
+- Architecture blueprint and planned enhancements: [docs/Architecture.md](docs/Architecture.md)
 - Contribution workflow: [.github/CONTRIBUTING.md](.github/CONTRIBUTING.md)
 - Dependency and supply chain policy: [DEPENDENCIES.md](DEPENDENCIES.md)
 - Security vulnerability reporting: [SECURITY.md](SECURITY.md)

docs/Architecture.md

@@ -122,3 +122,10 @@ When changing the preload contract, follow this loop:
 - **EXO/Teams ALC ownership** is not yet captured — a bare `Import-Module` doesn't eager-load their identity assemblies; the probe needs a representative `-ProbeCommand`.
 - **Multi-TFM (net9.0/net10.0):** deferred; the methodology is TFM-parameterizable. net9.0/net10.0 are ALC-capable, so the `block` verdicts in §3 carry over to them. The `net8.0` bundle is confirmed to load on **PS 7.6 / .NET 10 via roll-forward** (Az.Resources import verified, no #193 regression) — a positive signal that multi-TFM is mostly a packaging exercise, not a behavioral one, on ALC-capable runtimes.
 - **Re-introducing Windows PowerShell 5.1 / net48 (no ALC) — checklist if attempted:** because net48 has no `AssemblyLoadContext`, modules cannot self-isolate and the §3 `block` verdicts for the Azure SDK stack **invert**. Re-support would require: (1) multi-targeting the build to `net48` alongside `net8.0`; (2) **conditionally preloading the Azure SDK stack** (`Azure.Core` + `Azure.Identity`/`Broker` + `System.ClientModel`) for net48 only — pinned to the highest version the WinPS-supported module set agrees on, as #183 did; (3) restoring net48-specific dependency conditions in `DLLPickle.csproj` (e.g. `Condition="'$(TargetFramework)' == 'net48'"`); (4) restoring `CompatiblePSEditions = @('Core','Desktop')` and lowering the manifest `PowerShellVersion`, plus per-edition guards in `Import-DPLibrary`; (5) adding WinPS 5.1 to the CI test matrix and re-validating the #156/#165-class scenarios. The 2.0 refactor's mistake was applying the net48-era Azure.Core preload to net8 unconditionally — any re-introduction must keep it **strictly TFM-conditional**.
+- **Planned feature enhancements (backlog).** Forward-looking ideas consolidated from the former root `Roadmap.md`; not yet scheduled, order is not guaranteed, and large dependency/platform shifts may change priority. (Released and in-progress work lives in [CHANGELOG.md](../CHANGELOG.md) — for example the `Microsoft.PowerShell.PlatyPS` help-generation migration is already tracked there, and the broader PowerShell 7.4+ compatibility and supply-chain hardening work is the ongoing subject of §3 and §8.)
+  - Import a specific version of MSAL (`Microsoft.Identity.Client`) on demand, rather than only the bundled pin.
+  - Verify a package's hash/signature against the original source (e.g. NuGet) metadata before preload — a supply-chain integrity check extending the §8 dependency work.
+  - Option to preload additional common (non-identity) assemblies beyond the default identity stack.
+  - Option to inspect and preload only the newest version of relevant assemblies already present among the modules installed on the current system. The inspection side already exists (`Get-ModuleImportCandidate`, `Get-ModulesWithVersionSortedIdentityClient`, `Find-DLLInPSModulePath`); this would add the preload-from-installed mode.
+  - A function to import a specific named set of assemblies — a targeted alternative to the full `Import-DPLibrary` set or `Import-DPBaseProfile`.
+  - A function to clean up older installed DLLPickle module versions.