# Unknowns Export Artifacts

## Module
Cli

## Status
IMPLEMENTED

## Description
Backend unknowns ranking and proof emission services exist along with CLI command group. However, explicit export schema artifacts for reproducible offline export of unknowns data were not located as standalone schema documents.

## What's Implemented
- **Unknowns Command Group**: `src/Cli/StellaOps.Cli/Commands/UnknownsCommandGroup.cs` -- `UnknownsCommandGroup` (static class)
  - Sprint: SPRINT_3500_0004_0001_cli_verbs, SPRINT_5100_0004_0001_unknowns_budget_ci_gates, SPRINT_20260112_010_CLI_unknowns_grey_queue_cli
  - Implements: `stella unknowns list`, `escalate`, `resolve`, `budget check/status`, `summary`, `show`, `proof`, `export`, `triage`
  - Uses `StellaOps.Policy.Unknowns.Models` for DTOs
- **Export Command**: `stella unknowns export` exists within the command group (BuildExportCommand)
- **Proof Command**: `stella unknowns proof` for proof emission of unknowns data
- **Budget Operations**: `stella unknowns budget check --scan-id <id>` and `stella unknowns budget status` for CI gate budget enforcement
- **Backend**: `src/Unknowns/` -- unknowns registry and ranking services
- **Policy Integration**: `src/Policy/__Libraries/StellaOps.Policy.Unknowns/` -- unknowns models and policy integration

## What's Missing
- **Export schema document**: No standalone JSON Schema or specification document for the unknowns export format
- **Deterministic export format**: Export output format not formally specified for reproducible offline comparison
- **Export versioning**: No schema version header in exported data for forward compatibility
- **Offline import**: No `stella unknowns import` command for ingesting previously exported unknowns data in air-gapped environments
- **Export attestation**: Exported unknowns data not wrapped in a DSSE envelope for tamper evidence

## Implementation Plan
- Define formal JSON Schema for unknowns export format with version field
- Add `--schema-version` and `--format` options to `stella unknowns export`
- Add DSSE signing to export output via `--sign` flag
- Implement `stella unknowns import <file>` for air-gapped unknowns ingestion
- Publish export schema as part of the API specification

## Related Documentation
- Unknowns CLI: `src/Cli/StellaOps.Cli/Commands/UnknownsCommandGroup.cs`
- Unknowns backend: `src/Unknowns/`
- Policy unknowns library: `src/Policy/__Libraries/StellaOps.Policy.Unknowns/`