Inkan *does* allow you to keep an identity key offline. That's precisely what it does.
It allows the identity key to create signing keys. And it allows the identity key to revoke a signing key that has gotten lost.
Inkan does *not* record any private keys on-chain or anything like that, if that's ...