The air-gap delta

Air-gapped is the strict end of self-host: no outbound network. Key points:

• Everything the platform pulls at runtime has to be available inside the gap: container images, policy bundles, package indexes, model artifacts. Plan the mirror and the update path before you commit to the topology.
• Updates become a deliberate, signed, inbound process rather than a background pull. Design the artifact-promotion path: mirror, verify signatures, pin by digest, then apply.
• The trade-off is real. Air-gap maximizes control and removes whole classes of exfiltration risk, and it costs you operational convenience. Say so plainly to the customer rather than selling air-gap as free.