Module bundle 

Air-gapped bundle wire types. Air-gapped org provenance bundle — a self-contained, URL-free artifact.

Packs everything an offline verifier needs to reproduce a first-party org/member provenance verdict with the network cable unplugged: the org KEL (which carries the delegation KeyEvent seals, delegator-anchored scope seals, and revocation seals), each delegated member’s own KEL, the durable off-boarding records, and the pinned trust roots. The builder (which walks a live registry) lives in auths-sdk; the wire types and their pure methods live here so every verifier surface — native, FFI, browser WASM — shares one contract.

URL-free: the bundle contains no registry / OOBI / witness URLs — air-gapped verification cannot phone home. Identities are typed ([IdentityDID] / [Prefix]) so a tampered or malformed identifier fails closed at deserialization rather than flowing through as an opaque string.

Structs

AirGappedOrgBundle

A self-contained, URL-free bundle for offline first-party org/member provenance.

BundledKel

One identifier’s KEL plus its per-event signature attachments.

Constants

AIR_GAPPED_ORG_BUNDLE_SCHEMA_VERSION

Schema version of the air-gapped org bundle wire format. Bump on any breaking change to AirGappedOrgBundle.