Plan deployment-managed cache permissions

docs/roadmap/future.md

@@ -150,6 +150,16 @@ address Go dependency cycles, registrar ownership, stable public module keys,
 and supersession of the affected ADR-0004 decision. Conceptual artifact-family
 ownership does not by itself require this move.
 
+## Near-Term Operations
+
+### Deployment-Managed Cache Permissions
+
+- Implement the proposed
+  [deployment-managed cache permissions](deployment-managed-cache-permissions.md)
+  contract so Notarius respects the access policy established by the cache
+  root, process umask, setgid inheritance, and default ACLs instead of imposing
+  application-owned private or group modes.
+
 ## Blue-Sky Platform And Operations
 
 These ideas are intentionally less specified. Promote one into an earlier