Mirror Assembler Staffing & Milestones (Sprint 110.D)

Staffing

Milestones

  1. M0 recap (done 2025-11-19): thin bundle sample + layout note (docs/modules/mirror/milestone-0-thin-bundle.md).
  2. M1 (due 2025-11-26): implement deterministic assembler with manifest + CAS layout; DSSE signing profile sovereign-default; produce sample bundle tarball + hash.
  3. M1.1 (due 2025-11-28): TUF metadata generation (root.json, snapshot.json, timestamp.json) and mirror index manifest.
  4. M2 (due 2025-12-05): integrate time-anchor metadata (AirGap Time), export automation hooks (Export Center), and CLI verification path.

Responsibilities

Artefact locations

Risks