Files
git.stella-ops.org/docs/modules/export-center/prep/2025-11-20-export-attest-75-002-prep.md
master d519782a8f
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
prep docs and service updates
2025-11-21 06:56:36 +00:00

1.8 KiB

Export Attestation Prep — PREP-EXPORT-ATTEST-75-002

Status: Ready for implementation (2025-11-20) Owners: Exporter Service Guild Scope: Wire attestation export bundles (74-002) + CLI workflows (75-001) into full offline kit and mirror bundle distribution flows.

Dependencies

  • 74-001/74-002 bundle + kit layout.
  • CLI verify/import contract: docs/modules/export-center/prep/2025-11-20-export-attest-75-001-prep.md.

Distribution/kit contract

  • Place attestation bundles and checksum files into offline kit (same layout as 74-002) and publish to mirror locations used by ExportCenter air-gap profiles.
  • Provide manifest-offline.json entry per kit:
{
  "kind": "attestation-kit",
  "kitVersion": "v1",
  "artifact": "attestations/export-attestation-bundle-v1.tgz",
  "checksum": "checksums/attestations/export-attestation-bundle-v1.tgz.sha256",
  "cliExample": "stella attest bundle verify --file attestations/export-attestation-bundle-v1.tgz",
  "importExample": "stella attest bundle import --file attestations/export-attestation-bundle-v1.tgz --offline",
  "rootHash": "sha256:...",
  "createdAt": "2025-11-20T00:00:00Z"
}
  • Copy the kit directory to mirror/air-gap repo: mirror/export/attestations/{kitVersion}/ with same bytes; publish manifest-offline.json and .sha256 for the manifest.

Acceptance criteria

  • Offline kit includes attestation bundle + checksum + manifest entries; hashes match originals from 74-002.
  • Mirrors deliver identical bytes (bit-for-bit) across environments; manifests list CLI commands for operators.
  • No rebuild of attestation bundle during distribution; only copies allowed.

Handoff

  • Implement packaging/copy steps in ExportCenter build pipeline and mirror publisher.
  • Update Sprint 0162 Delivery Tracker entry P9 when complete.