license switch agpl -> busl1, sprints work, new product advisories

src/AirGap/__Libraries/StellaOps.AirGap.Bundle/Models/BundleManifest.cs

@@ -44,6 +44,26 @@ public sealed record BundleManifest
     /// Verification section with keys and expectations.
     /// </summary>
     public BundleVerifySection? Verify { get; init; }
+
+    /// <summary>
+    /// Canonical manifest hash (sha256 over canonical JSON).
+    /// </summary>
+    public string? CanonicalManifestHash { get; init; }
+
+    /// <summary>
+    /// Subject digests for the bundle target.
+    /// </summary>
+    public BundleSubject? Subject { get; init; }
+
+    /// <summary>
+    /// Timestamp entries for offline verification.
+    /// </summary>
+    public ImmutableArray<TimestampEntry> Timestamps { get; init; } = [];
+
+    /// <summary>
+    /// Rekor proof entries for offline verification.
+    /// </summary>
+    public ImmutableArray<RekorProofEntry> RekorProofs { get; init; } = [];
 }
 
 /// <summary>