Roadmap: no-egress / air-gapped (accredited-enclave) support

[sandstream]

Goal: kit usable as a control in a no-egress / air-gapped enclave for regulated environments.

Shipped (this session)

• Configurable triage registry endpoints → internal mirrors (PR feat(triage): configurable registry endpoints for air-gapped / mirror use #73)
• Offline scan mode KIT_AIRGAP=1 (PR feat(scan): offline air-gap mode (KIT_AIRGAP=1) #83)
• Bundled, signed offline threat data (Ed25519 + SHA-256, fail-closed) (PR feat(airgap): verified offline threat-data bundle (signed manifest) #84)
• Declarative [air_gap] config in .kit.toml (PR feat(airgap): declarative [air_gap] config in .kit.toml #85)
• Tamper-evident hash-chained audit log + kit audit verify (PR feat(audit): tamper-evident hash-chained audit log + kit audit verify #86)
• SIEM export kit audit export --format cef|syslog|json (PR feat(audit): SIEM export (CEF / syslog / json) #90)
• OpenCode + Codex agent coverage (PR feat(agent-audit): cover OpenCode + Codex agents #87)
• Memory redaction-at-capture KIT_MEMORY_REDACT=1 (PR feat(memory): opt-in redaction-at-capture (KIT_MEMORY_REDACT) #91)
• Offline provenance kit verify-provenance (cosign --offline + shipped-in trusted_root, fail-closed) (PR feat(airgap): offline provenance verification (kit verify-provenance) #93)

→ The no-egress enclave story is now end-to-end: link triage at internal mirrors, scan against signed local DBs, verify artifact provenance offline, and keep a tamper-evident + SIEM-exportable audit trail. Nothing reaches the public internet.

Deferred (decision-gated, not built — deliberately)

• Memory class-tagging — needs a label source (config-default / per-project / inference); building an unpopulated column is dead schema. Revisit when a labeling source is decided.
• Regulated-edition tier: FIPS · RBAC/PIV · HSM/KMS · reproducible/vendored build · accreditation docs (NIST 800-53) · native Windows (docs: document platform support — macOS/Linux native, Windows via WSL2 #44). Different product tier.

🤖 Generated with Claude Code

https://claude.ai/code/session_015ERHw6bVUz39sAuoQZ1iyg