1.8 KiB
1.8 KiB
Export Attestation Prep — PREP-EXPORT-ATTEST-75-002
Status: Ready for implementation (2025-11-20) Owners: Exporter Service Guild Scope: Wire attestation export bundles (74-002) + CLI workflows (75-001) into full offline kit and mirror bundle distribution flows.
Dependencies
- 74-001/74-002 bundle + kit layout.
- CLI verify/import contract:
docs/modules/export-center/prep/2025-11-20-export-attest-75-001-prep.md.
Distribution/kit contract
- Place attestation bundles and checksum files into offline kit (same layout as 74-002) and publish to mirror locations used by ExportCenter air-gap profiles.
- Provide
manifest-offline.jsonentry per kit:
{
"kind": "attestation-kit",
"kitVersion": "v1",
"artifact": "attestations/export-attestation-bundle-v1.tgz",
"checksum": "checksums/attestations/export-attestation-bundle-v1.tgz.sha256",
"cliExample": "stella attest bundle verify --file attestations/export-attestation-bundle-v1.tgz",
"importExample": "stella attest bundle import --file attestations/export-attestation-bundle-v1.tgz --offline",
"rootHash": "sha256:...",
"createdAt": "2025-11-20T00:00:00Z"
}
- Copy the kit directory to mirror/air-gap repo:
mirror/export/attestations/{kitVersion}/with same bytes; publishmanifest-offline.jsonand.sha256for the manifest.
Acceptance criteria
- Offline kit includes attestation bundle + checksum + manifest entries; hashes match originals from 74-002.
- Mirrors deliver identical bytes (bit-for-bit) across environments; manifests list CLI commands for operators.
- No rebuild of attestation bundle during distribution; only copies allowed.
Handoff
- Implement packaging/copy steps in ExportCenter build pipeline and mirror publisher.
- Update Sprint 0162 Delivery Tracker entry P9 when complete.