Air-Gapped Deployment

An air-gapped deployment operates on an isolated network that is physically or logically separated from the internet. Software is installed from offline media rather than a public registry, and it must function with no outbound connections, no license callouts, and no telemetry.

Air-gapping is the strictest form of in-perimeter deployment. For a control layer it means every decision is made locally and no governed data can leave, which is why it is common in defense, critical infrastructure, and regulated finance.