Inventory quartet and initial leases

10-inventory/hosts/op-console-mac/README.md

@@ -0,0 +1,16 @@
+# op-console-mac
+
+## Purpose
+
+Console host used to run `op-core-vm`.
+
+## Trust boundary
+
+- The host is a console, not a source of trust.
+- Critical actions happen only inside `op-core-vm`.
+- No long-lived secrets are kept on the host if avoidable.
+
+## References
+
+- Doctrine: `00-doctrine/operator-charter.md`
+- Lease: `20-identity/leases/op-console-mac.md`

10-inventory/hosts/op-console-mac/hardware.md

@@ -0,0 +1,10 @@
+# Hardware (op-console-mac)
+
+- Model:
+- Serial:
+- CPU:
+- RAM:
+- Storage:
+- Network:
+- Location:
+

10-inventory/hosts/op-console-mac/os.md

@@ -0,0 +1,12 @@
+# OS (op-console-mac)
+
+- OS:
+- Version:
+- Install method:
+- Disk encryption:
+- Update policy:
+
+## Notes
+
+- The VM is the authority source; the host is replaceable.
+