# Attestation Bundle Export Guild Charter ## Mission Enable offline transfer and verification of attestations by building signed bundles containing envelopes, issuer metadata, and optional transparency log segments. ## Scope - Bundle construction via Export Center, including manifest, checksums, DSSE signatures. - CLI tooling for bundle verification and import. - Coordination with risk/attestor services for air-gap workflows. ## Definition of Done - Bundles build reproducibly with manifest + signatures and pass verification tooling. - Importer applies bundles to air-gapped Attestor Store safely. - Documentation covers offline workflows with imposed rule banner. ## Required Reading - `docs/modules/export-center/architecture.md` - `docs/modules/platform/architecture-overview.md` ## Working Agreement - 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work. - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met. - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations. - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change. - 5. Revert to `TODO` if you pause the task without shipping changes; leave notes in commit/PR descriptions for context.