docs(01-capture-and-classification): create phase plan

.planning/ROADMAP.md

@@ -29,7 +29,13 @@ Decimal phases appear between their surrounding integers in numeric order.
   3. User running without root/CAP_NET_RAW sees a clear error message with a `sudo` hint — not a panic or silent failure
   4. On exit, user sees a per-protocol packet count summary printed to stderr
   5. User can pass `--verbose` and see per-window protocol activity lines on stderr
-**Plans**: TBD
+**Plans:** 4 plans
+
+Plans:
+- [ ] 01-01-PLAN.md — Go 1.24 setup, module init, shared types, config-driven classifier with tests
+- [ ] 01-02-PLAN.md — Capture package: OpenCapture, ListInterfaces, privilege error handling
+- [ ] 01-03-PLAN.md — Aggregation: time-windowed accumulator, exit summary, verbose output
+- [ ] 01-04-PLAN.md — CLI wiring: Cobra commands, signal handling, pipeline assembly, smoke test
 
 ### Phase 2: Audio Synthesis Engine
 **Goal**: The synthesis and encoding stack produces a valid MP3 from synthetic WindowSnapshot inputs — audio pipeline fully validated before any real traffic flows through it
@@ -71,7 +77,7 @@ Phases execute in numeric order: 1 → 2 → 3 → 4
 
 | Phase | Plans Complete | Status | Completed |
 |-------|----------------|--------|-----------|
-| 1. Capture and Classification | 0/? | Not started | - |
+| 1. Capture and Classification | 0/4 | Planning complete | - |
 | 2. Audio Synthesis Engine | 0/? | Not started | - |
 | 3. Pipeline Integration and MVP | 0/? | Not started | - |
 | 4. Power User Features | 0/? | Not started | - |