Socair inventory snapshot

A signed snapshot of an airlock store: which models are approved, on what attestation, and the activity log’s head at the time.

Shape

Envelope: An in-toto Statement v1 (https://in-toto.io/Statement/v1) in a DSSE envelope with payload type application/vnd.in-toto+json, signed with Ed25519. It verifies offline: no transparency log or certificate authority is involved.
Subject: One subject per approved model, by name and SHA-256.

generated_utc: When the snapshot was taken.
log_head: The head of the store’s hash-chained activity log.
tool_version: The socair version that wrote it.
models: Each approved model: id, name, promotion state, issuer, signer key id, attestation_sha256, when it was promoted, and for a conditional promotion the accepted surfaces and their expiry.
other: Every entry that is not approved, with its stage and the reason, including a clean entry that no longer verifies.

socair airlock export --out <dir> --key operator.key
socair inventory verify <dir> --trusted operator.pub

Signing the list makes it tamper-evident: a model cannot be added or dropped without breaking the signature.
Verification proves the snapshot is the one that was exported, not that the store is unchanged since. Record the log head somewhere the store’s host cannot rewrite.