QBO formats for import/export; server-side receipt enforcement policy in MCP spec

plan/roadmap.md

@@ -25,8 +25,12 @@ The primary interface is MCP, not a cloned GUI (Stephen's call, 2026-10-10).
 
 ## Phase 3 — Oracle harness
 
-- `ledger-import`: GnuCash XML read-only import
+- `ledger-import`: QuickBooks CSV read-only import (bank transactions, chart
-- `ledger-oracle`: fixture books through our engine and GnuCash headless,
+  of accounts)
+- `ledger-export`: CSV, XLSX, and IIF renderers (IIF for QuickBooks Desktop,
+  which many CPAs still run)
+- `ledger-oracle`: fixture books through our engine and GnuCash headless
+  (fed via QIF/OFX or its Python bindings — mechanism TBD at implementation),
   automatic `snapshot()` diffing via `cargo xtask oracle`
 - Parity catalog becomes machine-readable; CI enforces the non-regression
   floor