# Console air-gap UI

Purpose
- Provide sealed-mode imports, staleness visibility, and guidance for offline operators.

Surfaces
- Air-gap status badge shows sealed state, mirrorGeneration, last import time, and staleness.
- Import wizard uploads and verifies mirror bundles and records timeline events.
- Staleness dashboard charts staleness by bundle and component.

Staleness logic
- Staleness = now minus bundle.createdAt using time anchors.
- Color bands: green under 24h, amber 24h to 72h, red over 72h or missing anchor.

Guidance banners
- Sealed banner: egress denied, only registered bundles allowed.
- Staleness red banner prompts import of the next bundle or time anchor refresh.

Events
- Successful import emits timeline event with bundleId, mirrorGeneration, manifest hash, actor.
- Failed import emits error code without exposing stack traces.

Security and guardrails
- Admin scope required for imports; read-only users can view status only.
- Hashes always include tenant and generation context.