Idea: an offline-first switch (COGNIS_FEEDS_OFFLINE) for locked-down enclaves

[cognis-digital]

Idea. The feed layer is built for air-gapped gear (fetch once, cache, re-serve offline), but the default posture is still online: datafeeds.get refreshes over HTTPS when the cache is older than 24h, and the feeds.* helpers take offline per-call defaulting to False. So a fresh feeds enrich (without --offline) attempts an outbound fetch.

On a genuinely locked-down enclave that's backwards: you'd rather the tool never touch the network unless explicitly told to, and an unexpected egress attempt can itself trip a monitor.

Proposal. Honor an env var — COGNIS_FEEDS_OFFLINE=1 — as a global default for offline across datafeeds.get and the feeds.* enrichment helpers. Set it once in the enclave's environment and the whole tool is offline-first; the CLI --offline flag stays as a per-invocation override, and unset behaviour is unchanged. Tracked as #9.

Related question for operators: would you also want a hard mode that raises if anything tries to go online while the flag is set (fail-closed), vs. the softer "serve stale cache, never fetch"? Curious which matches your accreditation posture.