AirGap Controller (retired host)

Pointer stub. The airgap-controller deployable was retired under SPRINT_20260722_025 OK-5 (source withdrawn 2026-09-10) and is frozen at src/__Obsoleted/AirGap/StellaOps.AirGap.Controller/, together with StellaOps.AirGap.Time and the StellaOps.AirGap.Persistence library. Its generated contract (api-reference.md, openapi/v1.json) is archived at docs-archive/modules/airgap-controller/.

Read AirGap for sealed and offline operation as it exists now.

Where the controller’s responsibilities went (verified at commit 942a18727c):

• Posture and time-anchor custody: Platform, PUT/GET /api/v1/platform/environment-state/{stateClass}/{scope} with state classes airgap-seal and time-anchor. CLI: stella airgap seal, stella airgap unseal, stella airgap status and stella airgap time-anchor declare, stella airgap time-anchor status.
• The /system/airgap/* paths: mapped by Policy Engine (src/Policy/StellaOps.Policy.Engine/Endpoints/SealedModeEndpoints.cs, plus StalenessEndpoints.cs and AirGapNotificationEndpoints.cs). Policy Engine’s contract differs from the archived controller specification: for example, POST /system/airgap/verify verifies a policy pack or risk-profile bundle and requires airgap:seal, where the controller verified replay evidence under airgap:status:read. The archived specification is therefore not the contract of any live host.
• Bundle import: OfflineKit, POST /api/offlinekit/v1/import (scope airgap:import); see OfflineKit.