[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"portal-settings:stajic:sr":3,"public-menus:all":38,"post:air-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access:sr":205,"related:post:air-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access:sr:1":3695},{"statusCode":4,"data":5,"message":37},200,{"tenantId":6,"lang":7,"defaultLang":8,"siteUrl":9,"contactEmail":10,"brandName":11,"logoUrl":12,"siteName":11,"siteDescription":13,"ogImage":10,"robotsIndex":14,"socialLinks":10,"reservedSlugs":10,"seoPolicy":15},"stajic","sr","de","https:\u002F\u002Fstajic.de",null,"Stajic Platform","\u002FLogo_Planet.svg","Stajic Portal",true,{"branding":16,"relatedContent":17,"crossDomainLinks":18},{"logoUrl":12},{"enabled":14},[19,22,25,28,31,34],{"url":20,"label":21,"isActive":14,"showInFooter":14,"includeInSameAs":14},"https:\u002F\u002Ffigure.rocks","figure.rocks",{"url":23,"label":24,"isActive":14,"showInFooter":14,"includeInSameAs":14},"https:\u002F\u002Floving.rocks","loving.rocks",{"url":26,"label":27,"isActive":14,"showInFooter":14,"includeInSameAs":14},"https:\u002F\u002Fbazify.com","bazify.com",{"url":29,"label":30,"isActive":14,"showInFooter":14,"includeInSameAs":14},"https:\u002F\u002Fbazify.de","bazify.de",{"url":32,"label":33,"isActive":14,"showInFooter":14,"includeInSameAs":14},"https:\u002F\u002Fbazify.at","bazify.at",{"url":35,"label":36,"isActive":14,"showInFooter":14,"includeInSameAs":14},"https:\u002F\u002Fbazify.ba","bazify.ba","Portal settings resolved",[39,45],{"id":40,"name":41,"location":42,"isActive":14,"isDefault":43,"items":44},1,"main-navigation","header",false,[],{"id":46,"name":47,"location":48,"isActive":14,"isDefault":14,"items":49},4,"main-menu","sidebar",[50,66,79,93,103,118,133],{"id":51,"title":52,"url":60,"target":61,"icon":62,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":64,"portfolioId":10,"children":65},"item-18",{"de":53,"en":54,"es":55,"fr":56,"it":54,"ru":57,"sr":58,"zh":59},"Startseite","Home","Inicio","Accueil","Главная","Почетна","首页","\u002Ffull-stack-web-developer-munich-performance-seo-and-maintainable-builds","_self","i-lucide-home","page",111,[],{"id":67,"title":68,"url":75,"target":61,"icon":76,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":77,"portfolioId":10,"children":78},"item-22",{"de":69,"en":69,"es":70,"fr":69,"it":71,"ru":72,"sr":73,"zh":74},"Vision","Visión","Visione","Видение","Визија","想象","\u002Fueber-uns-webdesign-muenchen-webaplikation","i-lucide-eye",113,[],{"id":80,"title":81,"url":89,"target":61,"icon":90,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":91,"portfolioId":10,"children":92},"item-19",{"de":82,"en":83,"es":84,"fr":83,"it":85,"ru":86,"sr":87,"zh":88},"Leistungen","Services","Servicios","Servizi","Услуги","Услуге","服务","\u002Fservices-dienstleistungen-muenchen","i-lucide-wrench",116,[],{"id":94,"title":95,"url":99,"target":61,"icon":100,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":101,"portfolioId":10,"children":102},"item-23",{"de":96,"en":96,"es":96,"fr":96,"it":96,"ru":97,"sr":97,"zh":98},"Blog","Блог","博客","\u002Fblog","i-lucide-book-open",112,[],{"id":104,"title":105,"url":114,"target":61,"icon":115,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":116,"portfolioId":10,"children":117},"item-32",{"de":106,"en":107,"es":108,"fr":109,"it":110,"ru":111,"sr":112,"zh":113},"Neue Technologien","New Technologies","Nuevas tecnologías","Nouvelles technologies","Nuove tecnologie","Новые технологии","Нове технологије","新技术！","\u002Fneue-webtechnologien","i-lucide-sparkles",122,[],{"id":119,"title":120,"url":129,"target":61,"icon":130,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":131,"portfolioId":10,"children":132},"item-20",{"de":121,"en":122,"es":123,"fr":124,"it":125,"ru":126,"sr":127,"zh":128},"Kontakt","Contact us!","Contacto","Contact","Contatto","Контакт","Контактирајте нас","联系我们！","\u002Fcontact","i-lucide-mail",115,[],{"id":134,"title":135,"url":144,"target":61,"icon":145,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":146,"portfolioId":10,"children":147},"item-21",{"de":136,"en":137,"es":138,"fr":139,"it":140,"ru":141,"sr":142,"zh":143},"Unsere Arbeit","Our Work","Nuestro trabajo","Nos réalisations","I nostri lavori","Наши работы","Наши радови","文件夹","\u002Fportfolio","i-lucide-briefcase",114,[148,161,175,181,193],{"id":149,"title":150,"url":144,"target":61,"icon":159,"isActive":14,"type":63,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":146,"portfolioId":10,"children":160},"item-24",{"de":151,"en":152,"es":153,"fr":154,"it":155,"ru":156,"sr":157,"zh":158},"Alle Projekte","All Projects","Todos los proyectos","Tous les projets","Tutti i progetti","Все проекты","Сви пројекти","所有项目","i-lucide-grid-3x3",[],{"id":162,"title":163,"url":171,"target":61,"icon":172,"isActive":14,"type":173,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":10,"portfolioId":10,"children":174},"item-29",{"de":164,"en":165,"es":166,"fr":167,"it":168,"ru":169,"sr":170,"zh":143},"Local Roots, Global Reach","Local Roots - Global Reach","Empresa local ","Entreprise locale","Azienda locale","Местная компания","Локално предузеће глобално тржиште","\u002Fportfolio\u002Flocal-roots-global-reach-communication-media-systems-for-modern-business","i-lucide-folder","custom",[],{"id":176,"title":177,"url":179,"target":61,"icon":172,"isActive":14,"type":173,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":10,"portfolioId":10,"children":180},"item-28",{"de":178,"en":178,"es":178,"fr":178,"it":178,"ru":178,"sr":178,"zh":178},"Solr Suggester","\u002Fportfolio\u002Fsolr-fuzzy-suggester-und-solr-infix-suggester-abfrage-ueber-ajax-und-filterung",[],{"id":182,"title":183,"url":191,"target":61,"icon":172,"isActive":14,"type":173,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":10,"portfolioId":10,"children":192},"item-27",{"de":184,"en":185,"es":186,"fr":187,"it":188,"ru":189,"sr":190,"zh":185},"Firmenwebseite SEO","Company Website SEO","Sitio web corporativo SEO","Site web d’entreprise SEO","Sito web aziendale SEO","Корпоративный сайт SEO","Пословна веб-страница SEO","\u002Fportfolio\u002Fseo-sem-branding-mobile-webseite-muenchen",[],{"id":194,"title":195,"url":203,"target":61,"icon":172,"isActive":14,"type":173,"productId":10,"categoryId":10,"shopCategoryId":10,"articleId":10,"pageId":10,"portfolioId":10,"children":204},"item-31",{"de":196,"en":197,"es":198,"fr":199,"it":200,"ru":201,"sr":202,"zh":197},"Digitalisierungsportal","Digitalization Portal","Portal de digitalización","Portail de numérisation","Portale di digitalizzazione","Портал цифровизации","Портал за дигитализацију","\u002Fportfolio\u002Fdigitalisierungsportal-archiv-museum-bibliothek-ead-lido-mets-mods",[],{"statusCode":4,"data":206,"message":3694},{"id":207,"title":208,"slug":209,"content":210,"contentJson":211,"excerpt":1688,"featuredImage":1689,"featuredImageAlt":1690,"featuredImageCaption":10,"featuredImageTitle":10,"featuredImageCopyright":10,"featuredImageAuthor":10,"featuredImageSourceUrl":10,"featuredImageLicense":10,"featuredImageIsAiGenerated":43,"status":1691,"publishedAt":1692,"createdAt":1693,"updatedAt":1694,"seoLocalePaths":1695,"categories":1704,"author":1717,"translations":1722},"494","Air-Gapped AI: Kako AI sistemi funkcionišu bez interneta ili pristupa oblaku","air-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u003Cp>Air-gapped AI je AI sistem koji se koristi unutar bezbednosnog domena koji nema fizičku mrežnu vezu sa spoljnim sistemima od kojih je odvojen, pri čemu se svaki prenos preko te granice obavlja kroz namerno kontrolisane, neautomatizovane procedure. AI model, runtime, podaci, indeksi za pretragu, alati i operativne zavisnosti potrebne za inferenciju stoga moraju biti dostupni unutar izolovanog okruženja. Air-gapped AI nije jednostavno „lokalni model“ ili „on-premise server“: definišuće svojstvo je mrežna i transferna granica oko kompletnog sistema.\u003C\u002Fp>\n\u003Caside class=\"editorjs-callout editorjs-callout--info my-6 rounded-xl border p-5 border-blue-300 bg-blue-50 dark:border-blue-900 dark:bg-blue-950\u002F20\" role=\"note\">\u003Cstrong class=\"block mb-2 text-gray-900 dark:text-gray-100\">Direktan odgovor\u003C\u002Fstrong>\u003Cdiv class=\"text-gray-700 dark:text-gray-200\">Air-gapped AI sistem može da izvršava LLM inferenciju, RAG, analizu dokumenata, pa čak i agentske tokove rada bez interneta ili cloud API-ja ako je svaka potrebna zavisnost dostupna unutar izolovanog domena.\u003Cbr>\u003Cbr>Praktična arhitektura je:\u003Cbr>\u003Cstrong>kontrolisani uvoz → interni repozitorijumi artefakata\u002Fmodela → lokalni AI runtime → lokalni podaci\u002FRAG → lokalni alati → interni korisnici\u002Fservisi → lokalno praćenje\u002Frevizija\u003C\u002Fstrong>.\u003Cbr>\u003Cbr>Težak deo nije naterati jedan LLM da odgovara offline. Teško je upravljati celim AI životnim ciklusom — ažuriranjima, modelima, drajverima, paketima, uvozom podataka, akreditivima, evidentiranjem i bezbednošću — bez tihog oslanjanja na spoljne servise.\u003C\u002Fdiv>\u003C\u002Faside>\n\u003Caside class=\"editorjs-callout editorjs-callout--warning my-6 rounded-xl border p-5 border-amber-300 bg-amber-50 dark:border-amber-900 dark:bg-amber-950\u002F20\" role=\"note\">\u003Cstrong class=\"block mb-2 text-gray-900 dark:text-gray-100\">Air gap ima strože značenje od „nema interneta“\u003C\u002Fstrong>\u003Cdiv class=\"text-gray-700 dark:text-gray-200\">NIST-ov glosar sajber bezbednosti definiše air gap kao interfejs gde dva sistema \u003Cstrong>nisu fizički povezana\u003C\u002Fstrong> i gde svaki logički prenos \u003Cstrong>nije automatizovan\u003C\u002Fstrong>; podaci prelaze samo ručno pod ljudskom kontrolom. Dokumentacija dobavljača ponekad šire koristi „air-gapped“ ili „disconnected“ za okruženja bez veze sa spoljnim internetom, ali sa internim umrežavanjem i kontrolisanom staging infrastrukturom. Arhitektonska dokumentacija treba da navede koje se značenje zapravo primenjuje.\u003C\u002Fdiv>\u003C\u002Faside>\n\u003Caside class=\"editorjs-callout editorjs-callout--warning my-6 rounded-xl border p-5 border-amber-300 bg-amber-50 dark:border-amber-900 dark:bg-amber-950\u002F20\" role=\"note\">\u003Cstrong class=\"block mb-2 text-gray-900 dark:text-gray-100\">Air-gapped ne znači bezbedno po definiciji\u003C\u002Fstrong>\u003Cdiv class=\"text-gray-700 dark:text-gray-200\">Uklanjanje direktne mrežne povezanosti eliminiše mnoge udaljene putanje, ali ne eliminiše zlonamerne prenosive medije, kompromitovane softverske\u002Fmodelske uvoze, pretnje iznutra, ranjive interne servise, fizički kompromis, prompt injection kroz uvezene dokumente ili lateralno kretanje unutar izolovane mreže.\u003C\u002Fdiv>\u003C\u002Faside>\n\u003Caside class=\"editorjs-callout editorjs-callout--note my-6 rounded-xl border p-5 border-gray-300 bg-gray-50 dark:border-gray-700 dark:bg-gray-900\u002F40\" role=\"note\">\u003Cstrong class=\"block mb-2 text-gray-900 dark:text-gray-100\">Napomena o aktuelnim izvorima — 8. oktobar 2026.\u003C\u002Fstrong>\u003Cdiv class=\"text-gray-700 dark:text-gray-200\">Aktuelna NVIDIA NIM i Red Hat AI Inference dokumentacija podržavaju LLM serviranje bez pristupa spoljnom internetu unapred pripremljenim modelima i kontejnerskim artefaktima. NVIDIA dokumentuje povezanu fazu pripreme praćenu izolovanom fazom izvršavanja sa lokalnim artefaktima i bez cloud registry akreditiva. Red Hat koristi mirror-ovane kontejnerske\u002Fmodel repozitorijume za disconnected OpenShift okruženja. Ovo su korisni primeri implementacije, ali ne nadjačavaju strožu NIST definiciju air gap-a.\u003C\u002Fdiv>\u003C\u002Faside>\n\u003Cnav class=\"editorjs-toc\" data-editorjs-toc=\"true\" aria-label=\"Sadržaj\">\u003Cstrong class=\"editorjs-toc__title\">Sadržaj\u003C\u002Fstrong>\u003Col class=\"editorjs-toc__list editorjs-toc__list--depth-0\">\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-7\" class=\"editorjs-toc__link\">Šta air-gapped AI zaista znači\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-11\" class=\"editorjs-toc__link\">Najjednostavniji primer\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-17\" class=\"editorjs-toc__link\">Gde se jednostavan primer zaustavlja\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-21\" class=\"editorjs-toc__link\">Vazdušno izolovana vs oflajn vs lokalna vs na lokaciji vs privatna vs suverena AI\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-25\" class=\"editorjs-toc__link\">Strogi vazdušni jaz vs praktična diskonektovana implementacija\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-28\" class=\"editorjs-toc__link\">Praktična vazdušno izolovana AI arhitektura\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-32\" class=\"editorjs-toc__link\">Modeli moraju biti unapred pripremljeni\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-36\" class=\"editorjs-toc__link\">Modeli sa zavisnostima udaljenog koda su opasnost za vazdušni jaz\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-40\" class=\"editorjs-toc__link\">Kontejneri, paketi i drajveri postaju lokalni artefakti lanca snabdevanja\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-44\" class=\"editorjs-toc__link\">Poznajte kompletan račun zavisnosti\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-46\" class=\"editorjs-toc__link\">Interni mirrori su infrastruktura, a ne pogodnost\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-50\" class=\"editorjs-toc__link\">RAG može da radi potpuno vazdušno izolovano\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-56\" class=\"editorjs-toc__link\">Agenti mogu da rade air-gapped — ali samo sa dostupnim alatima\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-60\" class=\"editorjs-toc__link\">MCP ne zaobilazi air gap\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-64\" class=\"editorjs-toc__link\">Identitet i autentifikacija takođe moraju da rade offline\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-68\" class=\"editorjs-toc__link\">Vreme, sertifikati i trust store-ovi postaju lokalne zavisnosti\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-72\" class=\"editorjs-toc__link\">Telemetrija i izveštavanje o padovima zahtevaju eksplicitnu politiku\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-76\" class=\"editorjs-toc__link\">Air-gapped sistemi i dalje zahtevaju zakrpe\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-80\" class=\"editorjs-toc__link\">Kontrolisana putanja ažuriranja\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-82\" class=\"editorjs-toc__link\">Granica prenosa je najosetljiviji operativni interfejs\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-86\" class=\"editorjs-toc__link\">Prenosivi mediji nisu neutralna cev\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-90\" class=\"editorjs-toc__link\">Air-gapping povećava važnost lanca snabdevanja\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-94\" class=\"editorjs-toc__link\">Spremnost za vazdušni zid treba testirati, a ne pretpostavljati\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-97\" class=\"editorjs-toc__link\">Keširano jednom nije isto kao spremno za vazdušni zid\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-101\" class=\"editorjs-toc__link\">Koje pretnje ostaju unutar vazdušnog zida?\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-103\" class=\"editorjs-toc__link\">Šta vazdušni zid zapravo poboljšava\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-107\" class=\"editorjs-toc__link\">Šta vazdušni zid otežava\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-109\" class=\"editorjs-toc__link\">Vazdušno izolovana AI vs privatna AI\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-113\" class=\"editorjs-toc__link\">Vazdušno izolovana AI vs suverena AI\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-117\" class=\"editorjs-toc__link\">Dokazi iz originalne implementacije: šta Aaasaasa AI Client dokazuje — a šta ne\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-123\" class=\"editorjs-toc__link\">Kada je vazdušno izolovana AI opravdana?\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-127\" class=\"editorjs-toc__link\">Praktičan redosled projektovanja vazdušno izolovanih AI sistema\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-129\" class=\"editorjs-toc__link\">Kontrolna lista arhitekture vazdušno izolovanog AI sistema\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-131\" class=\"editorjs-toc__link\">Česti načini neuspeha vazdušno izolovanog AI sistema\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-133\" class=\"editorjs-toc__link\">Česte zablude\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-135\" class=\"editorjs-toc__link\">Ograničenja\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-141\" class=\"editorjs-toc__link\">Šta bi promenilo ovaj odgovor?\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-145\" class=\"editorjs-toc__link\">Povezano kanonsko znanje\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-150\" class=\"editorjs-toc__link\">Često postavljana pitanja\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-152\" class=\"editorjs-toc__link\">Pojmovnik\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-154\" class=\"editorjs-toc__link\">Zaključak\u003C\u002Fa>\u003C\u002Fli>\u003Cli class=\"editorjs-toc__item\">\u003Ca href=\"#section-158\" class=\"editorjs-toc__link\">Primarni izvori i reference trenutne implementacije\u003C\u002Fa>\u003C\u002Fli>\u003C\u002Fol>\u003C\u002Fnav>\n\u003Ch2 id=\"section-7\">Šta air-gapped AI zaista znači\u003C\u002Fh2>\n\u003Cp>Reč AI ne menja osnovni bezbednosni koncept. Air gap je granica između bezbednosnih domena. AI samo čini izolovanu stranu operativno zahtevnijom jer moderni AI stack-ovi obično podrazumevaju modele koji se preuzimaju, registre paketa, telemetriju, API-je, model hub-ove i česta ažuriranja softvera.\u003C\u002Fp>\n\u003Cp>Izolovano okruženje i dalje može da sadrži mnogo povezanih mašina. Interni klaster može imati GPU-ove, aplikacione servere, skladište, baze podataka, servise identiteta i monitoring međusobno povezane. Air gap postoji između tog enklava i spoljnog domena.\u003C\u002Fp>\n\u003Cp>Relevantno pitanje stoga nije „Da li ovaj GPU ima Wi-Fi?“ već „Može li ovo AI okruženje da razmenjuje informacije sa spoljnim domenom kroz automatizovanu fizičku ili logičku putanju?“\u003C\u002Fp>\n\u003Ch2 id=\"section-11\">Najjednostavniji primer\u003C\u002Fh2>\n\u003Cp>Zamislite da kompanija želi internog asistenta za poverljive tehničke dokumente, ali okruženju nije dozvoljeno da te dokumente šalje na internet.\u003C\u002Fp>\n\u003Cp>Kompanija preuzima odobreni LLM, model za embedding, kontejnerske slike i softverske pakete u povezanom staging okruženju. Nakon validacije, odobreni artefakti se prenose u izolovano okruženje.\u003C\u002Fp>\n\u003Cp>Unutar enklava, model server, parser dokumenata, vektorska baza podataka, aplikacija i servisi identiteta rade lokalno. Korisnici mogu da postavljaju pitanja i koriste RAG nad internim dokumentima bez cloud modela ili javnog model registry-ja.\u003C\u002Fp>\n\u003Cp>Kada je potrebno ažuriranje, ono ponovo prolazi kroz kontrolisani proces uvoza umesto da ga produkcijski AI server preuzima direktno.\u003C\u002Fp>\n\u003Csection class=\"editorjs-process my-6\">\u003Ch3 class=\"mb-3 text-lg font-semibold\">Osnovni air-gapped AI operativni ciklus\u003C\u002Fh3>\u003Cdiv class=\"grid grid-cols-1 md:grid-cols-2 xl:grid-cols-3 gap-4\">\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">1\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">1. Nabavka izvan enklava\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Preuzmite odobrene modele, pakete, kontejnere, drajvere, potpise i dokumentaciju u povezanom staging okruženju.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">2\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">2. Verifikacija pre prenosa\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Proverite poreklo, potpise\u002Fchecksum-ove, status malvera, licenciranje i kompatibilnost u skladu sa organizacionom politikom.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">3\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">3. Prenos kroz kontrolisanu granicu\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Premestite odobrene artefakte koristeći autorizovani ručni ili posredovani proces.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">4\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">4. Interna objava\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Postavite artefakte u interne repozitorijume modela, kontejnera, paketa ili datoteka.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">5\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">5. Lokalno postavljanje\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Pokrenite inferenciju, RAG, aplikacije i alate bez spoljnih zavisnosti.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">6\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">6. Praćenje unutar enklava\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Prikupljajte logove, metrike, status modela\u002Fruntime-a i bezbednosne događaje lokalno.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">7\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">7. Izvoz samo odobrenih dokaza\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Premestite izabrane izveštaje ili artefakte ka spolja kroz obrnuti kontrolisani proces gde politika dozvoljava.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">8\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">8. Ponavljanje za ažuriranja\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Tretirajte nove modele, zakrpe, korpuse i zavisnosti kao nove uvoze u lancu snabdevanja.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003C\u002Fdiv>\u003C\u002Fsection>\n\u003Ch2 id=\"section-17\">Gde se jednostavan primer zaustavlja\u003C\u002Fh2>\n\u003Cp>Produkcijsko air-gapped okruženje može biti mnogo veće od jedne radne stanice. Može uključivati Kubernetes\u002FOpenShift, interne registry-je, object storage, provajdere identiteta, vektorske baze podataka, observability, infrastrukturu za backup i nekoliko čvorova za serviranje modela.\u003C\u002Fp>\n\u003Cp>Što više servisa postoji unutar enklave, organizacija mora više da reprodukuje sposobnosti koje povezana okruženja obično konzumiraju sa interneta.\u003C\u002Fp>\n\u003Cp>Vazdušno izolovanje stoga premešta složenost. Ono smanjuje direktnu spoljnu povezanost, ali povećava upravljanje artefaktima, zakrpe, zavisnosti, lanac snabdevanja i operativnu odgovornost unutar izolovanog domena.\u003C\u002Fp>\n\u003Ch2 id=\"section-21\">Vazdušno izolovana vs oflajn vs lokalna vs na lokaciji vs privatna vs suverena AI\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Termin\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Šta prvenstveno opisuje\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Potrebna internet\u002Fspoljna povezanost?\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalna AI\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Izvršavanje\u002Finferencija se odvija na lokalnom hardveru\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ne; ali i dalje može pozivati cloud servise\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Oflajn AI\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Može nastaviti sa radom bez interneta\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ne tokom oflajn rada; ponovno povezivanje može biti normalno\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Diskonektovano okruženje\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nema direktne putanje ka spoljnom internetu iz okruženja za implementaciju\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Obično ne; može koristiti kontrolisane mirror-e\u002Fbastione\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">AI na lokaciji\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Infrastruktura se izvršava u sopstvenom\u002Fna lokaciji okruženju organizacije\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Može i dalje imati punu internet povezanost\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Privatna AI\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">AI obrada je kontrolisana da zadovolji zahteve privatnosti\u002Fpoverljivosti\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Zavisi od arhitekture; može biti povezana ili diskonektovana\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Vazdušno izolovana AI\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Bezbednosni domeni su fizički diskonektovani i prenos preko granice nije automatizovan\u002Fručni je pod strogom definicijom\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nema automatizovane spoljne putanje\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Suverena AI\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontrola\u002Fjurisdikcija nad modelima, podacima, infrastrukturom i zavisnostima\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ne nužno; suverenost je šira od mrežne izolacije\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Cp>Ovi termini se mogu preklapati, ali nisu sinonimi. Lokalni Ollama server povezan na internet je lokalna AI, a ne vazdušno izolovana AI. RAG platforma na lokaciji koja poziva cloud model je aplikaciona infrastruktura na lokaciji sa cloud inferencijom, a ne vazdušno izolovana AI.\u003C\u002Fp>\n\u003Cp>Vazdušno izolovan sistem je često privatan po dizajnu jer podaci ostaju unutar enklave, ali privatnost takođe zavisi od autorizacije, evidentiranja, rukovanja podacima, fizičke bezbednosti i operativne politike.\u003C\u002Fp>\n\u003Ch2 id=\"section-25\">Strogi vazdušni jaz vs praktična diskonektovana implementacija\u003C\u002Fh2>\n\u003Csection class=\"editorjs-comparison my-6\">\u003Ch3 class=\"mb-3 text-lg font-semibold\">Dva značenja koja se često nazivaju „vazdušno izolovano“\u003C\u002Fh3>\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 bg-gray-50 px-4 py-3 text-left dark:border-gray-700 dark:bg-gray-900\">\u003C\u002Fth>\u003Cth class=\"border border-gray-300 bg-gray-50 px-4 py-3 text-left font-semibold dark:border-gray-700 dark:bg-gray-900\">Strogi vazdušni jaz\u003C\u002Fth>\u003Cth class=\"border border-gray-300 bg-gray-50 px-4 py-3 text-left font-semibold dark:border-gray-700 dark:bg-gray-900\">Diskonektovana \u002F implementacija bez interneta\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-3 text-left font-semibold dark:border-gray-700\">Spoljna fizička veza\u003C\u002Fth>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-3 text-left font-semibold dark:border-gray-700\">Prenos preko granice\u003C\u002Fth>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-3 text-left font-semibold dark:border-gray-700\">Pristup internetu iz AI radnog opterećenja\u003C\u002Fth>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-3 text-left font-semibold dark:border-gray-700\">Interna mreža\u003C\u002Fth>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-3 text-left font-semibold dark:border-gray-700\">Koristite termin kada\u003C\u002Fth>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-3 dark:border-gray-700\">\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\u003C\u002Fsection>\n\u003Caside class=\"editorjs-callout editorjs-callout--success my-6 rounded-xl border p-5 border-emerald-300 bg-emerald-50 dark:border-emerald-900 dark:bg-emerald-950\u002F20\" role=\"note\">\u003Cstrong class=\"block mb-2 text-gray-900 dark:text-gray-100\">Dokumentujte granicu umesto oslanjanja na oznaku\u003C\u002Fstrong>\u003Cdiv class=\"text-gray-700 dark:text-gray-200\">Za arhitektonske i bezbednosne preglede napišite stvarno pravilo: \u003Cstrong>nema odlaznog interneta\u003C\u002Fstrong>, \u003Cstrong>nema fizičke spoljne mrežne putanje\u003C\u002Fstrong>, \u003Cstrong>samo ručni prenos\u003C\u002Fstrong>, ili \u003Cstrong>diskonektovani klaster sa odobrenim bastionom\u002Fmirror-om\u003C\u002Fstrong>. To je preciznije od samo „vazdušno izolovano“.\u003C\u002Fdiv>\u003C\u002Faside>\n\u003Ch2 id=\"section-28\">Praktična vazdušno izolovana AI arhitektura\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Sloj\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Šta mora postojati unutar izolovanog okruženja\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Korisnički\u002Faplikacioni sloj\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Chat UI, API-ji, poslovna aplikacija ili interfejs internog agenta\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Identitet & autorizacija\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalna\u002Finterna autentifikacija, RBAC, dozvole za tenant\u002Fresurse\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">AI gateway\u002Fruntime\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Usmeravanje modela, politika zahteva, sastavljanje konteksta i kontrole izvršavanja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Posluživanje modela\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalni server(i) modela, težine, tokenizer\u002Fkonfiguracija i runtime akceleratora\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">RAG \u002F znanje\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Skladište dokumenata, parser, embeddings, vektorski\u002Fleksički indeksi, metapodaci i poreklo\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Alati\u002Fservisi\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Samo interni\u002Flokalni API-ji i odobreni sistemi dostupni iz enklave\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Repozitorijumi artefakata\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalni container registry, mirror paketa, skladište modela i opciono OS\u002Frepozitorijumi za ažuriranja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Opservabilnost\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Interni logovi, metrike, tragovi i revizorski zapisi\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Backup\u002Foporavak\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalni ili odvojeno kontrolisani proces backup-a primeren bezbednosnom domenu\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Granica prenosa\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontrolisani proces uvoza\u002Fizvoza sa inspekcijom i odobrenjem\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Cp>Kompletna arhitektura treba da može da se pokrene i radi bez DNS upita, provera licence, preuzimanja paketa ili API poziva ka javnim servisima, osim ako te zavisnosti imaju odobrene interne zamene.\u003C\u002Fp>\n\u003Cp>Koristan test dizajna je da diskonektujete implementaciju od svakog spoljnog servisa i hladno pokrenete stack. Skrivene zavisnosti obično se pojavljuju tokom pokretanja, učitavanja modela, autentifikacije, razrešavanja paketa ili inicijalizacije telemetrije.\u003C\u002Fp>\n\u003Ch2 id=\"section-32\">Modeli moraju biti unapred pripremljeni\u003C\u002Fh2>\n\u003Cp>Cloud API-ji modela su po definiciji nedostupni ako izolovano radno opterećenje nema putanju do njih. Enklava stoga zahteva lokalno pokretljive artefakte modela ili interno hostovan servis za inferenciju.\u003C\u002Fp>\n\u003Cp>NVIDIA-ina trenutna NIM dokumentacija za vazdušni jaz eksplicitno koristi dvofazni obrazac: preuzmite i pripremite resurse modela na povezanoj mašini, prenesite ih, zatim pokrenite izolovani NIM iz lokalnog skladišta bez odlaznog pristupa registry-ju ili cloud API ključeva.\u003C\u002Fp>\n\u003Cp>Težine modela su samo deo skupa zavisnosti. Tokenizeri, konfiguracione datoteke, adapteri, metapodaci kvantizacije i bilo koji potreban runtime kod takođe moraju biti prisutni.\u003C\u002Fp>\n\u003Ch2 id=\"section-36\">Modeli sa zavisnostima udaljenog koda su opasnost za vazdušni jaz\u003C\u002Fh2>\n\u003Cp>Neki repozitorijumi modela sadrže prilagođeni Python kod ili runtime hook-ove koji obično preuzimaju dodatni kod ili resurse.\u003C\u002Fp>\n\u003Cp>Trenutna Red Hat AI Inference dokumentacija eksplicitno upozorava da neki Hugging Face modeli koji zahtevaju udaljeni kod ne mogu normalno da rade u diskonektovanim okruženjima jer biblioteka pokušava pristup mreži čak i kada je režim rada bez mreže konfigurisan.\u003C\u002Fp>\n\u003Cp>Praktična lekcija je da testirate ceo put učitavanja modela bez mreže pre nego što ga odobrite za izolovano postavljanje. „Preuzeo sam težine“ nije dokaz da je model samostalan.\u003C\u002Fp>\n\u003Ch2 id=\"section-40\">Kontejneri, paketi i drajveri postaju lokalni artefakti lanca snabdevanja\u003C\u002Fh2>\n\u003Cp>Povezana okruženja rutinski preuzimaju kontejnerske slike, Python pakete, ažuriranja OS-a i GPU komponente iz javnih registara. Vazdušno izolovano okruženje ne može da računa na nijednu od tih usluga.\u003C\u002Fp>\n\u003Cp>Red Hat-ov model za diskonektovano AI postavljanje koristi interne mirror registre za kontejnerske slike i kataloge operatora. Modeli mogu biti preslikani kao OCI artefakti ili preneti na trajno skladište.\u003C\u002Fp>\n\u003Cp>Za šire stack-ove, isti obrazac se često primenjuje na jezičke pakete, Linux repozitorijume, JavaScript pakete i interne binarne datoteke: odobreni artefakti ulaze jednom kroz proces prenosa i zatim se serviraju iz pouzdanih internih repozitorijuma.\u003C\u002Fp>\n\u003Ch2 id=\"section-44\">Poznajte kompletan račun zavisnosti\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Klasa zavisnosti\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Primeri\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Artefakti modela\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Težine, tokenizer, konfiguracija, adapteri, metapodaci kvantizacije\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Inference runtime\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">vLLM, llama.cpp, Ollama, NIM ili drugi serving runtime\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">GPU\u002Fruntime stack\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Drajveri, CUDA\u002FROCm biblioteke, kontejnerski runtime\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Aplikacijski paketi\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Python wheels, npm paketi, sistemske biblioteke\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontejneri\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Aplikacija, inference, DB, vektorska DB, slike za monitoring\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">RAG modeli\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Model za embedding, reranker, OCR\u002Fvizuelni modeli\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Podaci\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Korpus znanja, metapodaci, šeme, skupovi podataka za evaluaciju\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Bezbednosni materijal\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Sertifikati, CA paketi, politika\u002Fkonfiguracija, potpisi malvera gde je primenljivo\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Operativni artefakti\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Dashboard-i, pravila upozorenja, alati za backup, runbook-ovi\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Licenciranje\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Licence\u002Fprava kompatibilne sa radom bez mreže gde je potrebno\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-46\">Interni mirrori su infrastruktura, a ne pogodnost\u003C\u002Fh2>\n\u003Cp>Diskonektovano postavljanje postaje održivo kada izolovani domen ima poznate interne izvore za odobrene artefakte.\u003C\u002Fp>\n\u003Cp>Red Hat-ov dokumentovani pristup koristi mirror registar dostupan diskonektovanom klasteru tako da radna opterećenja ne zahtevaju javne registre.\u003C\u002Fp>\n\u003Cp>Ista arhitektonska ideja može se primeniti na skladišta modela i repozitorijume paketa. Cilj je da poreklo artefakta, verzija i odobrenje budu eksplicitni, umesto da se nasumične datoteke ručno kopiraju na svaki server.\u003C\u002Fp>\n\u003Ch2 id=\"section-50\">RAG može da radi potpuno vazdušno izolovano\u003C\u002Fh2>\n\u003Cp>RAG ne zahteva javni internet. Zahteva korpus koji se može pretraživati, pipeline za ingestiju\u002Findeksiranje i model koji može da koristi preuzeti kontekst.\u003C\u002Fp>\n\u003Cp>Unutar vazdušno izolovanog okruženja, skladište dokumenata, parser\u002FOCR, model za embedding, vektorski ili leksički indeks, reranker i model za generisanje mogu svi da rade lokalno.\u003C\u002Fp>\n\u003Cp>Ono što se menja je nabavka izvora. Pretraga weba uživo i cloud konektori za dokumente nisu dostupni osim ako se ekvivalentni podaci ne uvezu kroz kontrolisanu granicu.\u003C\u002Fp>\n\u003Cp>Korpus stoga postaje upravljani artefakt. Svaki uvoz treba da sačuva identitet izvora, datum\u002Fverziju i poreklo kako bi korisnici znali koje znanje izolovani sistem zapravo sadrži.\u003C\u002Fp>\n\u003Caside class=\"editorjs-referral my-6\">\u003Ca href=\"https:\u002F\u002Fstajic.de\u002Fsr\u002Fblog\u002Fwhat-is-rag-the-simplest-explanation-of-how-it-works\" class=\"flex flex-col sm:flex-row gap-4 rounded-xl border border-gray-200 dark:border-gray-700 p-4 transition hover:border-primary-500\">\u003Cdiv class=\"min-w-0 flex-1\">\u003Cstrong class=\"block text-lg text-gray-900 dark:text-gray-100\">Šta je RAG? Najjednostavnije objašnjenje kako funkcioniše\u003C\u002Fstrong>\u003Cp class=\"mt-2 text-sm text-gray-600 dark:text-gray-300\">Sam RAG je nezavisan od cloud hostinga. U air-gapped arhitekturi, pronalaženje i generisanje jednostavno moraju biti obezbeđeni od strane lokalnih\u002Finternih komponenti.\u003C\u002Fp>\u003Cspan class=\"mt-3 inline-flex text-sm font-medium text-primary-600 dark:text-primary-400\">Pročitajte osnove RAG-a →\u003C\u002Fspan>\u003C\u002Fdiv>\u003C\u002Fa>\u003C\u002Faside>\n\u003Ch2 id=\"section-56\">Agenti mogu da rade air-gapped — ali samo sa dostupnim alatima\u003C\u002Fh2>\n\u003Cp>Petlja agenta može u potpunosti da se izvršava unutar izolovane enklave ako su model\u002Fruntime i potrebni alati lokalni ili dostupni na internoj mreži.\u003C\u002Fp>\n\u003Cp>Alat koji zavisi od GitHub-a, javnog web pretraživanja, cloud email-a ili eksternog SaaS API-ja neće raditi osim ako arhitektura ne obezbeđuje odobreni interni ekvivalent ili kontrolisani asinhroni proces razmene.\u003C\u002Fp>\n\u003Cp>Zbog toga dizajn air-gapped agenta treba da počne inventarom sposobnosti: svaka tačka pristupa alata mora biti klasifikovana kao interna, uvezena, nedostupna ili namerno isključena.\u003C\u002Fp>\n\u003Ch2 id=\"section-60\">MCP ne zaobilazi air gap\u003C\u002Fh2>\n\u003Cp>MCP može da izloži lokalne alate i resurse unutar izolovanog AI okruženja, ali protokol ne stvara povezanost kroz bezbednosnu granicu.\u003C\u002Fp>\n\u003Cp>Lokalni MCP server koji čita interne dokumente može savršeno da radi offline. Udaljeni MCP server na javnom internetu ne može se dosegnuti iz strogo air-gapped enklave.\u003C\u002Fp>\n\u003Cp>Isti princip važi za bilo koji protokol konektora: interoperabilnost je odvojena od mrežnog ovlašćenja.\u003C\u002Fp>\n\u003Ch2 id=\"section-64\">Identitet i autentifikacija takođe moraju da rade offline\u003C\u002Fh2>\n\u003Cp>AI aplikacija može biti lokalno hostovana dok i dalje zavisi od cloud provajdera identiteta. Ta skrivena zavisnost prekida istinski diskonektovan rad.\u003C\u002Fp>\n\u003Cp>Air-gapped dizajni stoga zahtevaju arhitekturu identiteta koja funkcioniše unutar enklave: lokalni direktorijum, interni provajder identiteta, interna PKI, lokalni servisni akreditivi ili drugi odobreni mehanizam.\u003C\u002Fp>\n\u003Cp>Autorizacija ostaje neophodna iako internet nije prisutan. Air gap-ovi ne zamenjuju RBAC, izolaciju zakupaca ili najmanje privilegije.\u003C\u002Fp>\n\u003Ch2 id=\"section-68\">Vreme, sertifikati i trust store-ovi postaju lokalne zavisnosti\u003C\u002Fh2>\n\u003Cp>Mnogi sistemi za autentifikaciju i logovanje zavise od pouzdanog vremena. Sertifikati ističu. Trust store-ovi se menjaju. Potpisani artefakti zahtevaju validaciju.\u003C\u002Fp>\n\u003Cp>Diskonektovana enklava stoga treba da ima internu vremensku sinhronizaciju i životni ciklus sertifikata\u002Fpoverenja koji ne zavisi od pristupa javnim servisima tokom redovnog rada.\u003C\u002Fp>\n\u003Cp>To su obične infrastrukturne brige koje postaju vidljive samo kada se arhitektura testira bez pristupa internetu.\u003C\u002Fp>\n\u003Ch2 id=\"section-72\">Telemetrija i izveštavanje o padovima zahtevaju eksplicitnu politiku\u003C\u002Fh2>\n\u003Cp>Mnoge moderne biblioteke podrazumevano pokušavaju analitiku, provere ažuriranja ili prijavljivanje grešaka.\u003C\u002Fp>\n\u003Cp>U izolovanom okruženju ti pozivi bi trebalo ili da budu onemogućeni ili preusmereni na internu observabilnost. Ponovljeni neuspešni pokušaji telemetrije mogu da izazovu kašnjenja, bučne logove i neočekivano ponašanje pri pokretanju.\u003C\u002Fp>\n\u003Cp>Air-gapped implementacija treba da zna koji komponenti pokušavaju izlazni saobraćaj čak i ako bi ih firewall blokirao.\u003C\u002Fp>\n\u003Ch2 id=\"section-76\">Air-gapped sistemi i dalje zahtevaju zakrpe\u003C\u002Fh2>\n\u003Cp>Mrežna izolacija ne sprečava softver da razvije ranjivosti. Ona samo menja način na koji zakrpe stižu do sistema.\u003C\u002Fp>\n\u003Cp>NIST definiše upravljanje zakrpama kao preventivno održavanje: organizacije i dalje moraju da identifikuju, nabave, prioritizuju, instaliraju i verifikuju zakrpe i ažuriranja.\u003C\u002Fp>\n\u003Cp>Air-gapped operacije stoga zahtevaju ponovljiv ritam uvoza za OS pakete, kontejnerske slike, drajvere, AI runtime-ove i bezbednosna ažuriranja. Kompromis je između stabilnosti izolacije i izloženosti ranjivostima zbog zastarelog softvera.\u003C\u002Fp>\n\u003Ch2 id=\"section-80\">Kontrolisana putanja ažuriranja\u003C\u002Fh2>\n\u003Csection class=\"editorjs-process my-6\">\u003Ch3 class=\"mb-3 text-lg font-semibold\">Primer životnog ciklusa ažuriranja za izolovano AI okruženje\u003C\u002Fh3>\u003Cdiv class=\"grid grid-cols-1 md:grid-cols-2 xl:grid-cols-3 gap-4\">\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">1\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">1. Identifikujte potrebno ažuriranje\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Bezbednosni savet, poboljšanje modela\u002Fruntime-a ili operativna potreba pokreće promenu.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">2\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">2. Nabavite u povezanom staging okruženju\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Preuzmite tačne verzije plus potpise\u002Fkontrolne sume i metapodatke.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">3\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">3. Validirajte dokaze o lancu snabdevanja\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Verifikujte izvor, integritet, kompatibilnost i zahteve politike.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">4\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">4. Testirajte u reprezentativnom offline staging okruženju\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Potvrdite da ažuriranje funkcioniše bez neočekivanih mrežnih zavisnosti.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">5\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">5. Odobrite prenos\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Primenite organizacioni proces promena i bezbednosti.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">6\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">6. Uvezite u repozitorijum enklave\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Objavite artefakt na interni pouzdani izvor.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">7\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">7. Postepeno implementirajte\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Primenite na test\u002Fcanary čvorove pre šireg uvođenja gde arhitektura to dozvoljava.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">8\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">8. Verifikujte i zabeležite\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Potvrdite verziju, zdravlje, ponašanje i stanje za vraćanje.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003C\u002Fdiv>\u003C\u002Fsection>\n\u003Ch2 id=\"section-82\">Granica prenosa je najosetljiviji operativni interfejs\u003C\u002Fh2>\n\u003Cp>Ako eksterne informacije moraju da uđu u air-gapped sistem, kanal za uvoz postaje glavna tačka bezbednosne kontrole.\u003C\u002Fp>\n\u003Cp>NSA Cybersecurity Technical Cyber Threat Framework eksplicitno prepoznaje replikaciju putem prenosivih medija kao putanju koju protivnici mogu da koriste da pređu u diskonektovane ili air-gapped mreže.\u003C\u002Fp>\n\u003Cp>Zato kontrolisano rukovanje medijima, inspekcija, poreklo, enkripcija gde je potrebno, skeniranje na malware i razdvajanje uloga mogu biti jednako važni kao i sam AI stack.\u003C\u002Fp>\n\u003Ch2 id=\"section-86\">Prenosivi mediji nisu neutralna cev\u003C\u002Fh2>\n\u003Cp>USB drajvovi i drugi prenosivi mediji mogu da nose i legitimne artefakte modela\u002Fpodataka i zlonamerni sadržaj.\u003C\u002Fp>\n\u003Cp>NIST smernice za sanitizaciju medija tretiraju storage medije kao objekat životnog ciklusa poverljivosti koji može zahtevati brisanje, čišćenje ili uništenje u skladu sa osetljivošću i potrebama ponovne upotrebe.\u003C\u002Fp>\n\u003Cp>Tačan postupak prenosa je specifičan za organizaciju, ali arhitektonski princip je stabilan: mediji koji prelaze granice treba da budu vođeni kao bezbednosno sredstvo, a ne tretirani kao neformalna pogodnost.\u003C\u002Fp>\n\u003Ch2 id=\"section-90\">Air-gapping povećava važnost lanca snabdevanja\u003C\u002Fh2>\n\u003Cp>Izolovani sistem prima manje živih spoljnih ulaza, ali svaki uvezeni binarni fajl, model, kontejner i paket postaje značajniji jer enklava može da mu veruje dugo vremena.\u003C\u002Fp>\n\u003Cp>NIST smernice za lanac snabdevanja softverom naglašavaju poreklo, rizik dobavljača, upravljanje ranjivostima, verifikaciju softvera i prakse zasnovane na SBOM-u. Ovi problemi postaju direktno relevantni za offline uvoz AI artefakata.\u003C\u002Fp>\n\u003Cp>Lanac snabdevanja modela zaslužuje istu pažnju kao lanac snabdevanja aplikacija: poreklo modela, licenca, heš, format, potreban kod, tokenizator, adapteri i status evaluacije treba da budu poznati pre uvoza.\u003C\u002Fp>\n\u003Ch2 id=\"section-94\">Spremnost za vazdušni zid treba testirati, a ne pretpostavljati\u003C\u002Fh2>\n\u003Caside class=\"editorjs-callout editorjs-callout--note my-6 rounded-xl border p-5 border-gray-300 bg-gray-50 dark:border-gray-700 dark:bg-gray-900\u002F40\" role=\"note\">\u003Cstrong class=\"block mb-2 text-gray-900 dark:text-gray-100\">Predloženi obrazac validacije\u003C\u002Fstrong>\u003Cdiv class=\"text-gray-700 dark:text-gray-200\">Sledeći test spremnosti za vazdušni zid je inženjerska sinteza, a ne NIST ili metod sertifikacije dobavljača. Dizajniran je da otkrije skrivene spoljne zavisnosti pre implementacije.\u003C\u002Fdiv>\u003C\u002Faside>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Test\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Šta dokazuje\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Hladan start sa blokiranim svim odlaznim mrežnim saobraćajem\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Runtime ne zahteva javne servise tokom pokretanja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Učitavanje svakog odobrenog modela iz lokalnog skladišta\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Težine\u002Ftokenizatori\u002Fkonfiguracije su kompletni\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ponovna izgradnja\u002Fimplementacija samo iz internih registara\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontejnerski\u002Fmirrori paketa su dovoljni\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Autentifikacija korisnika dok je spoljni IdP nedostupan\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Identitet funkcioniše unutar enklave\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Pokretanje RAG unosa i upita offline\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Sloj za ugrađivanje\u002Findeksiranje\u002Fpronalaženje je lokalni\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Pokretanje reprezentativnih agentskih alata\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Alati ne zavise od spoljnih API-ja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Restart nakon brisanja keša\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Offline rad se ne oslanja slučajno na prethodno keširana preuzimanja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Unapređenje simuliranog životnog ciklusa sertifikata\u002Fažuriranja\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Zavisnosti poverenja i održavanja su razumljive\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Uvoz novog modela kroz pripremnu putanju\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Procedura prenosa\u002Fpromene je operativna\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Oporavak iz rezervne kopije\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Oporavak ne zahteva nedostupno cloud skladište\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-97\">Keširano jednom nije isto kao spremno za vazdušni zid\u003C\u002Fh2>\n\u003Cp>Sistem može izgledati offline jer su model i paketi već keširani od ranijeg pristupa internetu.\u003C\u002Fp>\n\u003Cp>Brisanje keša ili implementacija na čistom čvoru može otkriti nedostajuće datoteke tokenizatora, Python pakete, manifeste modela ili zavisnosti udaljenog koda.\u003C\u002Fp>\n\u003Cp>Spremnost za vazdušni zid stoga treba validirati iz čistih internih artefakata, a ne samo sa razvojne radne stanice koja je prethodno bila povezana.\u003C\u002Fp>\n\u003Ch2 id=\"section-101\">Koje pretnje ostaju unutar vazdušnog zida?\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Pretnja\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Zašto je vazdušni zid ne uklanja\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kompromitovani uvezeni artefakt\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Malver\u002Fmodel\u002Fpaket može ući kroz odobrenu putanju prenosa\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Zlonamerni prenosivi mediji\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Fizički prenos može nositi izvršne korisne terete\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Zloupotreba od strane insajdera\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ovlašćeni korisnici već postoje unutar enklave\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ubacivanje upita u uvezene dokumente\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nepouzdan sadržaj može uticati na RAG\u002Fagente bez interneta\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Alati agenata sa prekomernim privilegijama\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalni alati i dalje mogu oštetiti lokalne sisteme\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Curenje podataka između zakupaca\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Greške u internoj autorizaciji ostaju moguće\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ranjivi interni softver\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nedostatak spoljne veze ne uklanja greške koje se mogu iskoristiti\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lateralno kretanje\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kompromitovani čvor može napasti druge interno povezane čvorove\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Zastarele zavisnosti\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Spor tempo ažuriranja može ostaviti poznate ranjivosti nezakrpljene\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Fizička krađa\u002Fneovlašćeno menjanje\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Bezbednost hardvera i medija ostaje kritična\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Loše ponašanje modela\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Halucinacija, pristrasnost i neuspeh zadatka su nezavisni od umrežavanja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Trovanje lanca snabdevanja\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Pouzdani izvori uvoza i dalje mogu biti kompromitovani\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-103\">Šta vazdušni zid zapravo poboljšava\u003C\u002Fh2>\n\u003Cp>Pravi vazdušni zid može materijalno smanjiti napadačke putanje koje zavise od direktne udaljene povezanosti: spoljno komandovanje i kontrola, zloupotreba cloud akreditiva, iskorišćavanje servisa okrenutih internetu i slučajno iznošenje podataka kroz obične odlazne API-je.\u003C\u002Fp>\n\u003Cp>Takođe čini rezidentnost podataka jednostavnom u jednom uskom smislu: podaci zaključivanja ne mogu se poslati spoljnom cloud servisu ako putanja ne postoji.\u003C\u002Fp>\n\u003Cp>Te prednosti su najjače kada su granica prenosa i interne kontrole pristupa jednako disciplinovane. Loše vođen USB proces može potkopati predviđenu izolaciju.\u003C\u002Fp>\n\u003Ch2 id=\"section-107\">Šta vazdušni zid otežava\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Oblast\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Operativna posledica\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ažuriranja modela\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Ručni\u002Fpripremljeni prenos umesto direktnog povlačenja iz model-hub-a\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Bezbednosne zakrpe\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Odložen i vođen tok uvoza\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Instalacija paketa\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Potrebni interni mirrori ili unapred izgrađeni artefakti\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Cloud AI API-ji\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nedostupni\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Web pretraga\u002Fkonektori\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nedostupni osim ako se podaci uvoze odvojeno\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Autentifikacija\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Potrebni interni\u002Foffline servisi identiteta\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nadzor\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Potrebna interna observabilnost i kontrolisani izvoz\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Licenciranje\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Proizvodi koji zahtevaju online aktivaciju mogu biti neprikladni\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Rešavanje problema\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nema lakog pristupa resursima dobavljača uživo iz produkcione enklave\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kapacitet\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Sva računarska snaga za zaključivanje mora postojati lokalno\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Oporavak od katastrofe\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Cloud rezervne kopije mogu biti nedostupne ili politički ograničene\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Svežina znanja\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Spoljne informacije stižu samo onoliko brzo koliko proces uvoza dozvoljava\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-109\">Vazdušno izolovana AI vs privatna AI\u003C\u002Fh2>\n\u003Cp>Privatna AI se prvenstveno odnosi na kontrolu osetljivih podataka i AI obrade. Privatna AI platforma može biti na lokaciji i dalje pristupati odobrenim cloud modelima ili eksternim servisima.\u003C\u002Fp>\n\u003Cp>Vazdušno izolovana AI je stroža po pitanju povezanosti. Sistem može biti privatan bez vazdušne izolacije, a vazdušno izolovan sistem može i dalje imati slabu privatnost ako svaki interni korisnik ima neograničen pristup.\u003C\u002Fp>\n\u003Cp>Bezbednosni cilj treba da odredi arhitekturu: poverljivost, suverenitet, otpornost i izolacija su povezani ali različiti zahtevi.\u003C\u002Fp>\n\u003Ch2 id=\"section-113\">Vazdušno izolovana AI vs suverena AI\u003C\u002Fh2>\n\u003Cp>Suverena AI se tiče kontrole nad širim lancem zavisnosti: podaci, modeli, infrastruktura, operatori, jurisdikcija i strateške zavisnosti.\u003C\u002Fp>\n\u003Cp>Vazdušna izolacija može podržati suverenitet smanjenjem eksterne zavisnosti u vreme izvršavanja, ali ne garantuje suverenu kontrolu. Enklava može i dalje zavisiti od strane hardvera, vlasničkih licenci modela ili eksternih dobavljača ažuriranja.\u003C\u002Fp>\n\u003Cp>Sledeći kanonski članak eksplicitno razdvaja te dimenzije kontrole.\u003C\u002Fp>\n\u003Ch2 id=\"section-117\">Dokazi iz originalne implementacije: šta Aaasaasa AI Client dokazuje — a šta ne\u003C\u002Fh2>\n\u003Caside class=\"editorjs-callout editorjs-callout--note my-6 rounded-xl border p-5 border-gray-300 bg-gray-50 dark:border-gray-700 dark:bg-gray-900\u002F40\" role=\"note\">\u003Cstrong class=\"block mb-2 text-gray-900 dark:text-gray-100\">Granica implementacije\u003C\u002Fstrong>\u003Cdiv class=\"text-gray-700 dark:text-gray-200\">Aaasaasa AI Client je koristan dokaz za \u003Cstrong>arhitekturu lokalnog izvršavanja\u003C\u002Fstrong>, apstrakciju provajdera i razdvajanje lokacije izvršavanja\u002Fmodela. To \u003Cstrong>nije dokaz o postavljenom vazdušno izolovanom okruženju\u003C\u002Fstrong>. Repozitorijum takođe podržava cloud i udaljene putanje, i nijedan verifikovani dokaz projekta ne uspostavlja fizički izolovan bezbednosni domen.\u003C\u002Fdiv>\u003C\u002Faside>\n\u003Cp>AI Hub razdvaja agent\u002Fklijent, provajdera, model i lokaciju veze. Podržava lokalno Ollama izvršavanje i rad Codex-a sa lokalnim provajderom kao različite izbore, umesto da pretpostavlja da svaki AI zahtev ide ka cloud modelu.\u003C\u002Fp>\n\u003Cp>Repozitorijum eksplicitno napominje da lokalno izvršavanje i dalje može koristiti cloud model, dok je Direct Ollama chat lokalno izvršavanje. Ova razlika je direktno relevantna za arhitekturu vazdušne izolacije: lokalno izvršavanje ne dokazuje da su model ili okolne zavisnosti isključene.\u003C\u002Fp>\n\u003Cp>Apstrakcija provajdera, otkrivanje lokalnih modela i lokalno izvršavanje su stoga gradivni blokovi za arhitekturu proizvoda sposobnog za vazdušnu izolaciju, ali mrežna granica, offline ogledalo zavisnosti, kontrolisani proces prenosa i offline identitet\u002Foperacije moraju se i dalje posebno projektovati.\u003C\u002Fp>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Verifikovana sposobnost projekta\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Relevantnost za vazdušnu izolaciju\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalno Ollama izvršavanje\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Podržava lokalno izvršavanje modela\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Putanje lokalnog provajdera\u002Fizvršavanja\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Smanjuje zavisnost od cloud izvršavanja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Razdvajanje provajdera\u002Fmodela\u002Fizvršavanja\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Čini cloud zavisnosti eksplicitnim umesto skrivenim\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Centralne dozvole\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Podržava kontrolu pristupa lokalnim alatima\u002Fpodacima\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Podrška za cloud\u002Fudaljene provajdere takođe postoji\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Dokazuje da je sam proizvod hibridno sposoban, a ne inherentno vazdušno izolovan\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nema verifikovane izolovane granice postavljanja\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Sprečava preterano tvrdnje o zrelosti vazdušne izolacije\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-123\">Kada je vazdušno izolovana AI opravdana?\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Vazdušna izolacija može biti opravdana kada\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Povezana privatna arhitektura može biti bolja kada\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Bezbednosna politika eksplicitno zahteva fizički razdvojene domene\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Glavni zahtev je samo da promptovi\u002Fpodaci ne budu korišćeni od strane javnih potrošačkih servisa\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Klasifikovani ili izuzetno osetljivi podaci ne smeju prelaziti eksterne mreže\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Odobreni enterprise cloud\u002Fprivatni endpointi zadovoljavaju kontrole podataka\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Operativno okruženje nema pouzdanu eksternu povezanost\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Internet je dostupan i operativna agilnost je važna\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontinuitet misije ne sme zavisiti od dostupnosti cloud\u002Fprovajdera\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Upravljani kvalitet modela i brze nadogradnje su vredniji\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Regulisano\u002Fkritično okruženje zahteva kontrolisani prenos\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Standardne bezbednosne kontrole mogu zadovoljiti stvarni model pretnji\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Eksterni SaaS\u002FAPI pristup je zabranjen\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Poslovni tok rada se u velikoj meri oslanja na eksterne konektore\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Cp>Vazdušna izolacija treba da bude zahtev izveden iz modela pretnji ili politike, a ne prestižna funkcija. Ima stvarnu bezbednosnu vrednost kada je eliminisana putanja povezivanja sama po sebi neprihvatljiva.\u003C\u002Fp>\n\u003Cp>Za mnoge enterprise slučajeve upotrebe, strogo kontrolisana privatna mreža sa ograničenjima izlaznog saobraćaja, lokalnim izvršavanjem i odobrenim kanalima ažuriranja može pružiti bolji balans bezbednosti i održivosti od stroge fizičke vazdušne izolacije.\u003C\u002Fp>\n\u003Ch2 id=\"section-127\">Praktičan redosled projektovanja vazdušno izolovanih AI sistema\u003C\u002Fh2>\n\u003Csection class=\"editorjs-process my-6\">\u003Ch3 class=\"mb-3 text-lg font-semibold\">Projektovanje od granice ka unutrašnjosti\u003C\u002Fh3>\u003Cdiv class=\"grid grid-cols-1 md:grid-cols-2 xl:grid-cols-3 gap-4\">\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">1\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">1. Definišite šta vazdušni jaz razdvaja\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Imenujte bezbednosne domene i utvrdite da li je zahtev strogo fizičko razdvajanje ili samo odsustvo interneta.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">2\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">2. Popišite svaku spoljnu zavisnost\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Modeli, paketi, registri, identitet, telemetrija, licenciranje, skladištenje, API-ji, DNS\u002Fvreme i usluge podrške.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">3\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">3. Izaberite modele i okruženja koja rade bez mreže\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Proverite da li se resursi modela i kod okruženja mogu učitati bez udaljenih poziva.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">4\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">4. Izgradite interne repozitorijume artefakata\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Napravite pouzdane izvore za kontejnere, pakete, modele i ažuriranja.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">5\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">5. Projektujte kontrolisani prenos\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Definišite pripremu, verifikaciju, rukovanje medijima\u002Fgejtvejom, odobravanje i poreklo.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">6\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">6. Izgradite interni identitet i autorizaciju\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Osigurajte da korisnici, servisi i alati mogu da se autentifikuju bez zavisnosti od oblaka.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">7\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">7. Zadržite RAG i alate lokalno\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Postavite znanje, embedding-e, indekse i potrebne servisne API-je unutar enklave.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">8\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">8. Izgradite internu opservabilnost\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Upravljajte logovima, metrikama, tragovima i bezbednosnim nadzorom lokalno.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">9\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">9. Definišite ritam ažuriranja zakrpa\u002Fmodela\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Uravnotežite odgovor na ranjivosti sa kontrolisanim procesom uvoza.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">10\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">10. Testirajte iz čistog nepovezanog stanja\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Hladni start i rad bez nasleđenih keševa ili skrivenog pristupa internetu.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">11\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">11. Testirajte puteve kompromitovanja\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Vežbajte scenarije prenosivih medija, lanca snabdevanja, prompt-injection, insajdera i lateralnog kretanja.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv class=\"editorjs-process__step min-w-0  rounded-xl border border-gray-200 dark:border-gray-700 p-4\">\u003Cdiv class=\"text-xs font-semibold text-gray-500 dark:text-gray-400\">12\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 font-semibold text-gray-900 dark:text-gray-100\">12. Dokumentujte izuzetke i izvoze\u003C\u002Fdiv>\u003Cdiv class=\"mt-1 text-sm text-gray-600 dark:text-gray-300\">Svaki dozvoljeni put preko granice treba da ima imenovanu svrhu, vlasnika i skup kontrola.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003C\u002Fdiv>\u003C\u002Fsection>\n\u003Ch2 id=\"section-129\">Kontrolna lista arhitekture vazdušno izolovanog AI sistema\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Pitanje\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Očekivani dokaz\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Šta je tačno izolovano od čega?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Dokumentovana granica bezbednosnog domena\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Da li je granica fizički nepovezana?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Dokaz o mrežnoj\u002Ffizičkoj arhitekturi ako se tvrdi strogi vazdušni jaz\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kako podaci prelaze granicu?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Autorizovani neautomatski\u002Fručni ili eksplicitno dokumentovani nepovezani tok rada\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Može li svaki model da se hladno pokrene bez mreže?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Test učitavanja bez mreže\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Da li su tokenizer\u002Fconfig\u002Fruntime resursi kompletni?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Verifikovani interni paket modela\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Odakle dolaze kontejneri\u002Fpaketi?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Interni pouzdani mirror\u002Frepozitorijum\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Može li identitet da funkcioniše bez cloud servisa?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Interni IdP\u002FPKI\u002Fput servisnih akreditiva\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Može li RAG ingest\u002Fupit bez mreže?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalni ingestion, embedding, indeks i pretraga\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Koji agent alati ostaju dostupni?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Interni inventar sposobnosti\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kako se uvoze zakrpe?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontrolisani proces održavanja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kako se verifikuju artefakti?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontrole integriteta\u002Fporekla\u002Fmalvera\u002Flanca snabdevanja\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kako se upravlja prenosivim medijima?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Politika rukovanja i sanitizacije medija\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Može li sistem da radi nakon brisanja keša?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Test bez mreže u čistom okruženju\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Gde se čuvaju logovi i tragovi?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Interna platforma za opservabilnost\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kako se odobravaju izvozi?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontrolisani proces izlaza\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Šta dokazuje da je ovo vazdušno izolovano, a ne samo lokalno?\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Dokaz o granici i prenosu, a ne lokacija modela\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-131\">Česti načini neuspeha vazdušno izolovanog AI sistema\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Način neuspeha\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Šta je zapravo zakazalo\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalni model i dalje preuzima tokenizer\u002Fconfig pri pokretanju\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Paket modela je bio nekompletan\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Kontejner referencira javni registar\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Implementacija nije bila samodovoljna\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Cloud identitet je potreban za prijavu\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Aplikacija je bila lokalna, ali identitet nije\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Licencni server je potreban eksterno\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Zavisnost od dobavljača je protivrečila radu bez mreže\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nedostaje model za embedding\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Chat radi, ali RAG ingestion ne uspeva\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Agent alati pozivaju javni SaaS\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Arhitektura agenta nije bila kompatibilna sa vazdušnim jazom\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Izolovan je samo GPU čvor\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Baza podataka, UI ili monitoring i dalje zavise od eksternih servisa\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">USB uvozi su neformalni\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Granica prenosa postaje nekontrolisan put napada\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Nema procesa zakrpa\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Izolacija stvara rastući dug ranjivosti\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Keširani razvojni računar se koristi kao dokaz\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Sveža implementacija ne uspeva bez interneta\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Vazdušni jaz zamenjuje razmišljanje o autorizaciji\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Interni korisnici\u002Fservisi postaju prekomerno privilegovani\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Oznaka vazdušno izolovanog se koristi za blokiranje izlaza samo firewall-om\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Bezbednosna dokumentacija precenjuje stvarnu granicu\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-133\">Česte zablude\u003C\u002Fh2>\n\u003Cdiv class=\"overflow-x-auto\">\u003Ctable class=\"w-full border-collapse\">\u003Cthead>\u003Ctr>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Zabluda\u003C\u002Fth>\u003Cth class=\"border border-gray-300 px-4 py-2 text-left font-semibold\">Ispravka\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Lokalni AI je vazdušno izolovani AI.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Lokalno opisuje gde se izvršava inferencija; vazdušni jaz opisuje bezbednosnu\u002Fmrežnu granicu.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Vazdušno izolovano znači jedan samostalni računar.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Izolovana enklava može da sadrži celu internu mrežu ili klaster.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Nema interneta jednako je strogom vazdušnom jazu.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Prema NIST definiciji, razdvojeni sistemi takođe nemaju fizičku vezu, a prenos preko granice je neautomatski.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Vazdušni jazovi eliminišu sajber rizik.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Rizici lanca snabdevanja, prenosivih medija, insajdera, interne mreže i aplikacija ostaju.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„RAG zahteva cloud.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">RAG može u potpunosti da radi sa lokalnim modelima, indeksima i podacima.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Agenti ne mogu da rade bez mreže.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Agenti mogu da koriste interne\u002Flokalne alate; jednostavno ne mogu da dosegnu nedostupne eksterne servise.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Kada se instalira, sistemu nisu potrebna ažuriranja.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Zakrpe, drajveri, modeli i zavisnosti i dalje zahtevaju upravljanje životnim ciklusom.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Preuzeti model je samodovoljan.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Tokenizers, udaljeni kod, biblioteke ili resursi modela i dalje mogu da pokrenu mrežne zavisnosti.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Privatni AI i vazdušno izolovani AI su identični.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Privatni AI je svojstvo podataka\u002Fkontrole; vazdušni jaz je svojstvo povezanosti.\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd class=\"border border-gray-300 px-4 py-2\">„Vazdušni jaz garantuje suverenitet.“\u003C\u002Ftd>\u003Ctd class=\"border border-gray-300 px-4 py-2\">Eksterni hardver, licence, modeli i lanac snabdevanja mogu ostati zavisnosti.\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003C\u002Fdiv>\n\u003Ch2 id=\"section-135\">Ograničenja\u003C\u002Fh2>\n\u003Cp>Strogi vazdušni jazovi čine svežinu eksternog znanja sporijom jer svaki novi izvor mora da prođe kroz proces prenosa.\u003C\u002Fp>\n\u003Cp>Oni mogu da ograniče izbor modela kada licence, zahtevi za udaljenim kodom, hardverske potrebe ili API-ji samo kod provajdera ne mogu da se zadovolje bez mreže.\u003C\u002Fp>\n\u003Cp>Oni povećavaju operativne troškove jer infrastruktura koja se obično troši kao cloud servisi mora da se poseduje i održava interno.\u003C\u002Fp>\n\u003Cp>Oni takođe mogu da stvore kašnjenje zakrpa: jača kontrola promena može da održi sisteme stabilnim dok odlaže hitno otklanjanje ranjivosti.\u003C\u002Fp>\n\u003Cp>Vazdušno izolovani AI bi stoga trebalo procenjivati kao jednu bezbednosnu arhitekturu među nekoliko, a ne pretpostavljati da je univerzalno superiorna.\u003C\u002Fp>\n\u003Ch2 id=\"section-141\">Šta bi promenilo ovaj odgovor?\u003C\u002Fh2>\n\u003Cp>Podrška dobavljača za rad bez mreže menja se brzo. Novi formati modela, potpisani OCI artefakti, mehanizmi licenciranja bez mreže i integrisani registri modela mogu da smanje operativno trenje.\u003C\u002Fp>\n\u003Cp>Razlika između strogog vazdušnog jaza i nepovezane implementacije ostaće važna čak i ako dobavljači nastave labavo da koriste te termine.\u003C\u002Fp>\n\u003Cp>Stabilan princip je da istinske tvrdnje o vazdušnom jazu zavise od granice sistema i mehanizma prenosa, a ne od toga da li LLM slučajno radi lokalno.\u003C\u002Fp>\n\u003Ch2 id=\"section-145\">Povezano kanonsko znanje\u003C\u002Fh2>\n\u003Cp>Air-Gapped AI je čvor arhitekture za bezbednost i implementaciju. Privatna AI, suverena AI i apstrakcija provajdera odgovaraju na različita pitanja o poverljivosti, kontroli i zavisnosti.\u003C\u002Fp>\n\u003Cp>MLOps\u002FLLMOps postaje zahtevniji u nepovezanom okruženju jer životni ciklusi modela, paketa i ažuriranja moraju da funkcionišu kroz interne repozitorijume i kontrolisani prenos.\u003C\u002Fp>\n\u003Cp>RAG i agentna AI ostaju validni obrasci unutar enklave sve dok su njihovi podaci i alati dostupni interno.\u003C\u002Fp>\n\u003Caside class=\"editorjs-referral my-6\">\u003Ca href=\"https:\u002F\u002Fstajic.de\u002Fsr\u002Fblog\u002Fai-agent-memory-is-not-rag-how-to-separate-memory-retrieval-state-and-context\" class=\"flex flex-col sm:flex-row gap-4 rounded-xl border border-gray-200 dark:border-gray-700 p-4 transition hover:border-primary-500\">\u003Cdiv class=\"min-w-0 flex-1\">\u003Cstrong class=\"block text-lg text-gray-900 dark:text-gray-100\">Memorija AI agenta nije RAG: Kako razdvojiti memoriju, pretragu, stanje i kontekst\u003C\u002Fstrong>\u003Cp class=\"mt-2 text-sm text-gray-600 dark:text-gray-300\">Air-gapped AI i dalje zahteva ispravne interne granice između trajne memorije, autoritativnog stanja, pretrage i konteksta modela.\u003C\u002Fp>\u003Cspan class=\"mt-3 inline-flex text-sm font-medium text-primary-600 dark:text-primary-400\">Pročitajte članak o arhitekturi memorije →\u003C\u002Fspan>\u003C\u002Fdiv>\u003C\u002Fa>\u003C\u002Faside>\n\u003Ch2 id=\"section-150\">Često postavljana pitanja\u003C\u002Fh2>\n\u003Csection class=\"editorjs-faq my-6 rounded-xl border border-gray-200 p-5 dark:border-gray-700\">\u003Ch3 class=\"mb-3 text-lg font-semibold\">Air-gapped AI FAQ\u003C\u002Fh3>\u003Cdiv id=\"faq1\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Šta je air-gapped AI?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Air-gapped AI je AI koji se implementira unutar bezbednosnog domena fizički odvojenog od eksternih sistema od kojih je izolovan, pri čemu se prenos preko granice obavlja kroz kontrolisane, neautomatizovane procedure prema strogoj NIST definiciji.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq2\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Da li air-gapped AI zahteva pristup internetu?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Ne za normalno izvršavanje i rad. Potrebni modeli, paketi, podaci i servisi moraju biti dostupni unutar izolovanog okruženja.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq3\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Da li je lokalni LLM automatski air-gapped?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Ne. Lokalni model može da radi na mašini koja i dalje ima pristup internetu ili koristi cloud identitet, alate ili skladište. Air gap opisuje kompletnu granicu sistema.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq4\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Može li RAG da funkcioniše u air-gapped mreži?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Da. Dokumenti, modeli za ugrađivanje, vektorski ili leksički indeksi, reranker-i i modeli za generisanje mogu svi da rade lokalno. Eksterno znanje mora se uneti kroz kontrolisanu granicu.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq5\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Mogu li AI agenti da rade air-gapped?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Da, ako su njihovi alati i potrebni sistemi dostupni unutar izolovane mreže. Javni SaaS i cloud API-ji nisu dostupni bez dozvoljenog mehanizma prelaska granice.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq6\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Kako se modeli ažuriraju u air-gapped okruženju?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Modeli se obično pribavljaju i validiraju u povezanom staging okruženju, prenose kroz odobreni proces i objavljuju u interni repozitorijum modela\u002Fartefakata.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq7\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Da li je on-premises AI isto što i air-gapped AI?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Ne. On-premises opisuje lokaciju infrastrukture. On-prem sistemi mogu ostati povezani na internet.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq8\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Da li je privatna AI isto što i air-gapped AI?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Ne. Privatna AI se odnosi na zahteve za podacima\u002Fkontrolom i može i dalje koristiti povezanu infrastrukturu. Air gap specifično opisuje mrežnu\u002Fdomensku razdvojenost.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq9\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Da li air gap čini AI bezbednim?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Uklanja ili smanjuje neke rizike udaljene povezanosti, ali ne uklanja rizike lanca snabdevanja, prenosivih medija, insajdera, interne autorizacije, fizičke rizike ili rizike ponašanja modela.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003Cdiv id=\"faq10\" class=\"border-t border-gray-200 py-4 first:border-t-0 dark:border-gray-700\">\u003Ch4 class=\"font-semibold text-gray-900 dark:text-gray-100\">Koji je najbolji test za air-gap spremnost?\u003C\u002Fh4>\u003Cdiv class=\"mt-2 text-gray-600 dark:text-gray-300\">Implementirajte ili hladno pokrenite kompletan stek u čistom okruženju sa svim eksternim vezama nedostupnim i proverite da modeli, identitet, RAG, alati, nadzor, ažuriranja i oporavak zavise samo od odobrenih internih artefakata i servisa.\u003C\u002Fdiv>\u003C\u002Fdiv>\u003C\u002Fsection>\n\u003Ch2 id=\"section-152\">Pojmovnik\u003C\u002Fh2>\n\u003Csection class=\"editorjs-glossary my-6 rounded-xl border border-gray-200 dark:border-gray-700 p-5\">\u003Ch3 class=\"mb-3 text-lg font-semibold\">Ključni air-gapped AI pojmovi\u003C\u002Fh3>\u003Cdl>\u003Cdiv id=\"air-gap\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Air gap\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Interfejs bezbednosnog domena gde sistemi nisu fizički povezani i svaki logički prenos preko granice je neautomatizovan\u002Fmanuelni prema NIST definiciji pojmovnika.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"air-gapped-ai\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Air-gapped AI\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">AI sistem implementiran unutar air-gapped bezbednosnog domena sa lokalno dostupnim izvršavanjem i operativnim zavisnostima.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"disconnected-environment\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Nepovezano okruženje\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Okruženje za implementaciju bez direktnog pristupa spoljnom internetu; implementacije mogu koristiti kontrolisane mirror ili bastion tokove.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"offline-capable-ai\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">AI sa mogućnošću rada van mreže\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">AI aplikacija sposobna da radi za neke ili sve funkcije bez internet konekcije, bez neophodne trajne izolacije.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"local-ai\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Lokalna AI\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">AI izvršavanje ili runtime koji se izvršava na lokalnom hardveru, a ne na udaljenoj model endpoint tački; ne podrazumeva mrežnu izolaciju.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"mirror-registry\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Mirror registar\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Interni repozitorijum koji sadrži odobrene kopije kontejnerskih slika ili drugih artefakata potrebnih za nepovezanu implementaciju.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"staging-environment\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Staging okruženje\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Povezana ili kontrolisana zona gde se artefakti pribavljaju, verifikuju i pripremaju pre prenosa u izolovani domen.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"controlled-transfer\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Kontrolisani prenos\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Upravljano kretanje podataka ili softvera preko izolacione granice korišćenjem odobrenih medija\u002Fprocesa i verifikacije.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"artifact-provenance\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Poreklo artefakta\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Informacija koja pokazuje odakle model, paket, kontejner ili drugi uvezeni artefakt potiče i kako je proizveden ili verifikovan.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"removable-media\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Prenosivi mediji\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Prenosivo skladište koje se koristi za prenos podataka između sistema; potencijalna bezbednosna putanja preko nepovezanih domena.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"internal-model-store\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Interno skladište modela\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Repozitorijum unutar izolovanog okruženja iz kojeg se serviraju ili implementiraju odobreni artefakti modela.\u003C\u002Fdd>\u003C\u002Fdiv>\u003Cdiv id=\"air-gap-readiness\" class=\"border-t border-gray-200 dark:border-gray-700 py-3 first:border-t-0\">\u003Cdt class=\"font-semibold text-gray-900 dark:text-gray-100\">Air-gap spremnost\u003C\u002Fdt>\u003Cdd class=\"mt-1 text-gray-600 dark:text-gray-300\">Dokazana sposobnost kompletnog AI steka da se instalira, pokrene, radi, ažurira i oporavi bez neodobrene eksterne povezanosti.\u003C\u002Fdd>\u003C\u002Fdiv>\u003C\u002Fdl>\u003C\u002Fsection>\n\u003Ch2 id=\"section-154\">Zaključak\u003C\u002Fh2>\n\u003Cp>Air-gapped AI nije posebna vrsta modela. To je AI arhitektura koja radi unutar namerno izolovanog bezbednosnog domena.\u003C\u002Fp>\n\u003Cp>Model može biti lakši deo. Spremnost za produkciju zavisi od toga da li svaka okolna zavisnost — sredstva modela, paketi, registri, identitet, RAG, alati, nadzor, ažuriranja i oporavak — može da funkcioniše bez automatizovane eksterne putanje.\u003C\u002Fp>\n\u003Cp>Najkraće pouzdano pravilo je: lokalno izvršavanje dokazuje gde se model izvršava; air-gap dokaz dokazuje kako je kompletan sistem razdvojen i kako svaki dozvoljeni prenos prelazi tu granicu.\u003C\u002Fp>\n\u003Ch2 id=\"section-158\">Primarni izvori i reference trenutne implementacije\u003C\u002Fh2>\n\u003Cp>Izvori u nastavku uspostavljaju bezbednosnu definiciju, trenutne obrasce implementacije nepovezane AI i rizike životnog ciklusa. Korišćenje termina „air-gapped“ od strane dobavljača namerno se razlikuje od strože NIST definicije.\u003C\u002Fp>\n\u003Ca href=\"https:\u002F\u002Fcsrc.nist.gov\u002Fglossary\u002Fterm\u002Fair_gap\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">NIST CSRC — Air gap\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">NIST definicija pojmovnika: fizički nepovezani sistemi sa neautomatizovanim, ručno kontrolisanim logičkim prenosom preko granice.\u003C\u002Fp>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fdocs.nvidia.com\u002Fnim\u002Flarge-language-models\u002Flatest\u002Fdeploy-air-gap.html\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">NVIDIA NIM — Air-Gap Deployment\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">Trenutne operativne smernice za staging artefakata modela na povezanom sistemu i pokretanje NIM-a iz lokalnog skladišta bez interneta, javnih registara ili cloud API ključeva.\u003C\u002Fp>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fdocs.redhat.com\u002Fen\u002Fdocumentation\u002Fred_hat_ai_inference\u002F3.5\u002Fhtml\u002Fdeploy_the_standalone_red_hat_ai_inference_container_in_a_disconnected_environment\u002Findex\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">Red Hat AI Inference — Disconnected deployment\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">Trenutne Red Hat smernice za serviranje LLM-ova u nepovezanim okruženjima sa mirror-ovanim artefaktima i internom infrastrukturom.\u003C\u002Fp>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fdocs.redhat.com\u002Fen\u002Fdocumentation\u002Fred_hat_ai_inference\u002F3.5\u002Fhtml\u002Fdeploy_the_standalone_red_hat_ai_inference_container_in_a_disconnected_environment\u002Fstoring-models-in-disconnected-environments_disconnected-deploy\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">Red Hat AI Inference — Čuvanje modela u nepovezanim okruženjima\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">Aktuelne smernice koje pokrivaju OCI slike modela, trajno skladištenje modela i ograničenja modela koji zahtevaju daljinski kod.\u003C\u002Fp>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fwww.nsa.gov\u002Fportals\u002F75\u002Fdocuments\u002Fwhat-we-do\u002Fcybersecurity\u002Fprofessional-resources\u002Fctr-nsa-css-technical-cyber-threat-framework.pdf\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">NSA — Tehnički okvir za sajber pretnje\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">Okvir pretnji koji eksplicitno identifikuje replikaciju putem prenosivih medija kao put u nepovezane ili izolovane mreže.\u003C\u002Fp>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fwww.nist.gov\u002Fpublications\u002Fguidelines-media-sanitization\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">NIST SP 800-88 Rev. 1 — Smernice za sanitizaciju medija\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">Smernice za upravljanje i sanitizaciju medija za skladištenje u skladu sa zahtevima poverljivosti informacija.\u003C\u002Fp>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F40\u002Fr4\u002Ffinal\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">NIST SP 800-40 Rev. 4 — Planiranje upravljanja zakrpama u preduzeću\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">Smernice koje definišu zakrpe i ažuriranja kao preventivno održavanje u sistemima preduzeća.\u003C\u002Fp>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fexecutive-order-14028-improving-nations-cybersecurity\u002Fsoftware-security-supply-chains\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"editorjs-link-tool block border border-gray-200 dark:border-gray-700 rounded-lg p-4 transition text-gray-900 dark:text-gray-100 hover:border-primary-500 hover:bg-primary-50 dark:hover:bg-gray-900 hover:text-gray-900 dark:hover:text-gray-100\">\u003Cstrong class=\"block font-semibold\">NIST — Bezbednost softvera u lancima snabdevanja\u003C\u002Fstrong>\u003Cp class=\"text-sm text-gray-600 dark:text-gray-400\">NIST smernice koje pokrivaju rizik lanca snabdevanja softvera, poreklo, verifikaciju, prakse povezane sa SBOM-om i upravljanje ranjivostima.\u003C\u002Fp>\u003C\u002Fa>",{"time":212,"blocks":213,"version":1687},1791488156372,[214,220,228,235,241,248,256,261,266,271,276,281,286,291,296,301,333,338,343,348,353,358,396,401,406,411,446,453,458,496,501,506,511,516,521,526,531,536,541,546,551,556,561,566,571,609,614,619,624,629,634,639,644,649,654,663,668,673,678,683,688,693,698,703,708,713,718,723,728,733,738,743,748,753,758,763,768,773,778,783,788,818,823,828,833,838,843,848,853,858,863,868,873,878,883,889,927,932,937,942,947,952,996,1001,1006,1011,1016,1021,1064,1069,1074,1079,1084,1089,1094,1099,1104,1109,1115,1120,1125,1130,1156,1161,1187,1192,1197,1202,1244,1249,1305,1310,1354,1359,1397,1402,1407,1412,1417,1422,1427,1432,1437,1442,1447,1452,1457,1462,1467,1475,1480,1526,1531,1584,1589,1594,1599,1604,1609,1614,1624,1633,1642,1651,1660,1669,1678],{"id":215,"data":216,"type":218,"tunes":219},"intro",{"text":217},"Air-gapped AI je AI sistem koji se koristi unutar bezbednosnog domena koji nema fizičku mrežnu vezu sa spoljnim sistemima od kojih je odvojen, pri čemu se svaki prenos preko te granice obavlja kroz namerno kontrolisane, neautomatizovane procedure. AI model, runtime, podaci, indeksi za pretragu, alati i operativne zavisnosti potrebne za inferenciju stoga moraju biti dostupni unutar izolovanog okruženja. Air-gapped AI nije jednostavno „lokalni model“ ili „on-premise server“: definišuće svojstvo je mrežna i transferna granica oko kompletnog sistema.","paragraph",{},{"id":221,"data":222,"type":226,"tunes":227},"direct",{"body":223,"title":224,"variant":225},"Air-gapped AI sistem može da izvršava LLM inferenciju, RAG, analizu dokumenata, pa čak i agentske tokove rada bez interneta ili cloud API-ja ako je svaka potrebna zavisnost dostupna unutar izolovanog domena.\u003Cbr>\u003Cbr>Praktična arhitektura je:\u003Cbr>\u003Cstrong>kontrolisani uvoz → interni repozitorijumi artefakata\u002Fmodela → lokalni AI runtime → lokalni podaci\u002FRAG → lokalni alati → interni korisnici\u002Fservisi → lokalno praćenje\u002Frevizija\u003C\u002Fstrong>.\u003Cbr>\u003Cbr>Težak deo nije naterati jedan LLM da odgovara offline. Teško je upravljati celim AI životnim ciklusom — ažuriranjima, modelima, drajverima, paketima, uvozom podataka, akreditivima, evidentiranjem i bezbednošću — bez tihog oslanjanja na spoljne servise.","Direktan odgovor","info","callout",{},{"id":229,"data":230,"type":226,"tunes":234},"nist-boundary",{"body":231,"title":232,"variant":233},"NIST-ov glosar sajber bezbednosti definiše air gap kao interfejs gde dva sistema \u003Cstrong>nisu fizički povezana\u003C\u002Fstrong> i gde svaki logički prenos \u003Cstrong>nije automatizovan\u003C\u002Fstrong>; podaci prelaze samo ručno pod ljudskom kontrolom. Dokumentacija dobavljača ponekad šire koristi „air-gapped“ ili „disconnected“ za okruženja bez veze sa spoljnim internetom, ali sa internim umrežavanjem i kontrolisanom staging infrastrukturom. Arhitektonska dokumentacija treba da navede koje se značenje zapravo primenjuje.","Air gap ima strože značenje od „nema interneta“","warning",{},{"id":236,"data":237,"type":226,"tunes":240},"not-security",{"body":238,"title":239,"variant":233},"Uklanjanje direktne mrežne povezanosti eliminiše mnoge udaljene putanje, ali ne eliminiše zlonamerne prenosive medije, kompromitovane softverske\u002Fmodelske uvoze, pretnje iznutra, ranjive interne servise, fizički kompromis, prompt injection kroz uvezene dokumente ili lateralno kretanje unutar izolovane mreže.","Air-gapped ne znači bezbedno po definiciji",{},{"id":242,"data":243,"type":226,"tunes":247},"current",{"body":244,"title":245,"variant":246},"Aktuelna NVIDIA NIM i Red Hat AI Inference dokumentacija podržavaju LLM serviranje bez pristupa spoljnom internetu unapred pripremljenim modelima i kontejnerskim artefaktima. NVIDIA dokumentuje povezanu fazu pripreme praćenu izolovanom fazom izvršavanja sa lokalnim artefaktima i bez cloud registry akreditiva. Red Hat koristi mirror-ovane kontejnerske\u002Fmodel repozitorijume za disconnected OpenShift okruženja. Ovo su korisni primeri implementacije, ali ne nadjačavaju strožu NIST definiciju air gap-a.","Napomena o aktuelnim izvorima — 8. oktobar 2026.","note",{},{"id":249,"data":250,"type":254,"tunes":255},"toc",{"title":251,"maxLevel":252,"minLevel":253},"Sadržaj",3,2,"tableOfContents",{},{"id":257,"data":258,"type":42,"tunes":260},"h-meaning",{"text":259,"level":253},"Šta air-gapped AI zaista znači",{},{"id":262,"data":263,"type":218,"tunes":265},"p-meaning-1",{"text":264},"Reč AI ne menja osnovni bezbednosni koncept. Air gap je granica između bezbednosnih domena. AI samo čini izolovanu stranu operativno zahtevnijom jer moderni AI stack-ovi obično podrazumevaju modele koji se preuzimaju, registre paketa, telemetriju, API-je, model hub-ove i česta ažuriranja softvera.",{},{"id":267,"data":268,"type":218,"tunes":270},"p-meaning-2",{"text":269},"Izolovano okruženje i dalje može da sadrži mnogo povezanih mašina. Interni klaster može imati GPU-ove, aplikacione servere, skladište, baze podataka, servise identiteta i monitoring međusobno povezane. Air gap postoji između tog enklava i spoljnog domena.",{},{"id":272,"data":273,"type":218,"tunes":275},"p-meaning-3",{"text":274},"Relevantno pitanje stoga nije „Da li ovaj GPU ima Wi-Fi?“ već „Može li ovo AI okruženje da razmenjuje informacije sa spoljnim domenom kroz automatizovanu fizičku ili logičku putanju?“",{},{"id":277,"data":278,"type":42,"tunes":280},"h-simple",{"text":279,"level":253},"Najjednostavniji primer",{},{"id":282,"data":283,"type":218,"tunes":285},"p-simple-1",{"text":284},"Zamislite da kompanija želi internog asistenta za poverljive tehničke dokumente, ali okruženju nije dozvoljeno da te dokumente šalje na internet.",{},{"id":287,"data":288,"type":218,"tunes":290},"p-simple-2",{"text":289},"Kompanija preuzima odobreni LLM, model za embedding, kontejnerske slike i softverske pakete u povezanom staging okruženju. Nakon validacije, odobreni artefakti se prenose u izolovano okruženje.",{},{"id":292,"data":293,"type":218,"tunes":295},"p-simple-3",{"text":294},"Unutar enklava, model server, parser dokumenata, vektorska baza podataka, aplikacija i servisi identiteta rade lokalno. Korisnici mogu da postavljaju pitanja i koriste RAG nad internim dokumentima bez cloud modela ili javnog model registry-ja.",{},{"id":297,"data":298,"type":218,"tunes":300},"p-simple-4",{"text":299},"Kada je potrebno ažuriranje, ono ponovo prolazi kroz kontrolisani proces uvoza umesto da ga produkcijski AI server preuzima direktno.",{},{"id":302,"data":303,"type":331,"tunes":332},"simple-flow",{"steps":304,"title":329,"orientation":330},[305,308,311,314,317,320,323,326],{"label":306,"description":307},"1. Nabavka izvan enklava","Preuzmite odobrene modele, pakete, kontejnere, drajvere, potpise i dokumentaciju u povezanom staging okruženju.",{"label":309,"description":310},"2. Verifikacija pre prenosa","Proverite poreklo, potpise\u002Fchecksum-ove, status malvera, licenciranje i kompatibilnost u skladu sa organizacionom politikom.",{"label":312,"description":313},"3. Prenos kroz kontrolisanu granicu","Premestite odobrene artefakte koristeći autorizovani ručni ili posredovani proces.",{"label":315,"description":316},"4. Interna objava","Postavite artefakte u interne repozitorijume modela, kontejnera, paketa ili datoteka.",{"label":318,"description":319},"5. Lokalno postavljanje","Pokrenite inferenciju, RAG, aplikacije i alate bez spoljnih zavisnosti.",{"label":321,"description":322},"6. Praćenje unutar enklava","Prikupljajte logove, metrike, status modela\u002Fruntime-a i bezbednosne događaje lokalno.",{"label":324,"description":325},"7. Izvoz samo odobrenih dokaza","Premestite izabrane izveštaje ili artefakte ka spolja kroz obrnuti kontrolisani proces gde politika dozvoljava.",{"label":327,"description":328},"8. Ponavljanje za ažuriranja","Tretirajte nove modele, zakrpe, korpuse i zavisnosti kao nove uvoze u lancu snabdevanja.","Osnovni air-gapped AI operativni ciklus","auto","processFlow",{},{"id":334,"data":335,"type":42,"tunes":337},"h-stops",{"text":336,"level":253},"Gde se jednostavan primer zaustavlja",{},{"id":339,"data":340,"type":218,"tunes":342},"p-stops-1",{"text":341},"Produkcijsko air-gapped okruženje može biti mnogo veće od jedne radne stanice. Može uključivati Kubernetes\u002FOpenShift, interne registry-je, object storage, provajdere identiteta, vektorske baze podataka, observability, infrastrukturu za backup i nekoliko čvorova za serviranje modela.",{},{"id":344,"data":345,"type":218,"tunes":347},"p-stops-2",{"text":346},"Što više servisa postoji unutar enklave, organizacija mora više da reprodukuje sposobnosti koje povezana okruženja obično konzumiraju sa interneta.",{},{"id":349,"data":350,"type":218,"tunes":352},"p-stops-3",{"text":351},"Vazdušno izolovanje stoga premešta složenost. Ono smanjuje direktnu spoljnu povezanost, ali povećava upravljanje artefaktima, zakrpe, zavisnosti, lanac snabdevanja i operativnu odgovornost unutar izolovanog domena.",{},{"id":354,"data":355,"type":42,"tunes":357},"h-terms",{"text":356,"level":253},"Vazdušno izolovana vs oflajn vs lokalna vs na lokaciji vs privatna vs suverena AI",{},{"id":359,"data":360,"type":394,"tunes":395},"terms-table",{"content":361,"stretched":43,"withHeadings":14},[362,366,370,374,378,382,386,390],[363,364,365],"Termin","Šta prvenstveno opisuje","Potrebna internet\u002Fspoljna povezanost?",[367,368,369],"Lokalna AI","Izvršavanje\u002Finferencija se odvija na lokalnom hardveru","Ne; ali i dalje može pozivati cloud servise",[371,372,373],"Oflajn AI","Može nastaviti sa radom bez interneta","Ne tokom oflajn rada; ponovno povezivanje može biti normalno",[375,376,377],"Diskonektovano okruženje","Nema direktne putanje ka spoljnom internetu iz okruženja za implementaciju","Obično ne; može koristiti kontrolisane mirror-e\u002Fbastione",[379,380,381],"AI na lokaciji","Infrastruktura se izvršava u sopstvenom\u002Fna lokaciji okruženju organizacije","Može i dalje imati punu internet povezanost",[383,384,385],"Privatna AI","AI obrada je kontrolisana da zadovolji zahteve privatnosti\u002Fpoverljivosti","Zavisi od arhitekture; može biti povezana ili diskonektovana",[387,388,389],"Vazdušno izolovana AI","Bezbednosni domeni su fizički diskonektovani i prenos preko granice nije automatizovan\u002Fručni je pod strogom definicijom","Nema automatizovane spoljne putanje",[391,392,393],"Suverena AI","Kontrola\u002Fjurisdikcija nad modelima, podacima, infrastrukturom i zavisnostima","Ne nužno; suverenost je šira od mrežne izolacije","table",{},{"id":397,"data":398,"type":218,"tunes":400},"p-terms-1",{"text":399},"Ovi termini se mogu preklapati, ali nisu sinonimi. Lokalni Ollama server povezan na internet je lokalna AI, a ne vazdušno izolovana AI. RAG platforma na lokaciji koja poziva cloud model je aplikaciona infrastruktura na lokaciji sa cloud inferencijom, a ne vazdušno izolovana AI.",{},{"id":402,"data":403,"type":218,"tunes":405},"p-terms-2",{"text":404},"Vazdušno izolovan sistem je često privatan po dizajnu jer podaci ostaju unutar enklave, ali privatnost takođe zavisi od autorizacije, evidentiranja, rukovanja podacima, fizičke bezbednosti i operativne politike.",{},{"id":407,"data":408,"type":42,"tunes":410},"h-strict",{"text":409,"level":253},"Strogi vazdušni jaz vs praktična diskonektovana implementacija",{},{"id":412,"data":413,"type":444,"tunes":445},"strict-comparison",{"rows":414,"title":436,"layout":394,"columns":437},[415,420,424,428,432],{"id":416,"label":417,"values":418},"physical","Spoljna fizička veza",[419,419],"",{"id":421,"label":422,"values":423},"transfer","Prenos preko granice",[419,419],{"id":425,"label":426,"values":427},"internet","Pristup internetu iz AI radnog opterećenja",[419,419],{"id":429,"label":430,"values":431},"internalnet","Interna mreža",[419,419],{"id":433,"label":434,"values":435},"best","Koristite termin kada",[419,419],"Dva značenja koja se često nazivaju „vazdušno izolovano“",[438,441],{"id":439,"label":440},"strict","Strogi vazdušni jaz",{"id":442,"label":443},"disconnected","Diskonektovana \u002F implementacija bez interneta","comparison",{},{"id":447,"data":448,"type":226,"tunes":452},"naming-rule",{"body":449,"title":450,"variant":451},"Za arhitektonske i bezbednosne preglede napišite stvarno pravilo: \u003Cstrong>nema odlaznog interneta\u003C\u002Fstrong>, \u003Cstrong>nema fizičke spoljne mrežne putanje\u003C\u002Fstrong>, \u003Cstrong>samo ručni prenos\u003C\u002Fstrong>, ili \u003Cstrong>diskonektovani klaster sa odobrenim bastionom\u002Fmirror-om\u003C\u002Fstrong>. To je preciznije od samo „vazdušno izolovano“.","Dokumentujte granicu umesto oslanjanja na oznaku","success",{},{"id":454,"data":455,"type":42,"tunes":457},"h-architecture",{"text":456,"level":253},"Praktična vazdušno izolovana AI arhitektura",{},{"id":459,"data":460,"type":394,"tunes":495},"architecture-table",{"content":461,"stretched":43,"withHeadings":14},[462,465,468,471,474,477,480,483,486,489,492],[463,464],"Sloj","Šta mora postojati unutar izolovanog okruženja",[466,467],"Korisnički\u002Faplikacioni sloj","Chat UI, API-ji, poslovna aplikacija ili interfejs internog agenta",[469,470],"Identitet & autorizacija","Lokalna\u002Finterna autentifikacija, RBAC, dozvole za tenant\u002Fresurse",[472,473],"AI gateway\u002Fruntime","Usmeravanje modela, politika zahteva, sastavljanje konteksta i kontrole izvršavanja",[475,476],"Posluživanje modela","Lokalni server(i) modela, težine, tokenizer\u002Fkonfiguracija i runtime akceleratora",[478,479],"RAG \u002F znanje","Skladište dokumenata, parser, embeddings, vektorski\u002Fleksički indeksi, metapodaci i poreklo",[481,482],"Alati\u002Fservisi","Samo interni\u002Flokalni API-ji i odobreni sistemi dostupni iz enklave",[484,485],"Repozitorijumi artefakata","Lokalni container registry, mirror paketa, skladište modela i opciono OS\u002Frepozitorijumi za ažuriranja",[487,488],"Opservabilnost","Interni logovi, metrike, tragovi i revizorski zapisi",[490,491],"Backup\u002Foporavak","Lokalni ili odvojeno kontrolisani proces backup-a primeren bezbednosnom domenu",[493,494],"Granica prenosa","Kontrolisani proces uvoza\u002Fizvoza sa inspekcijom i odobrenjem",{},{"id":497,"data":498,"type":218,"tunes":500},"p-architecture-1",{"text":499},"Kompletna arhitektura treba da može da se pokrene i radi bez DNS upita, provera licence, preuzimanja paketa ili API poziva ka javnim servisima, osim ako te zavisnosti imaju odobrene interne zamene.",{},{"id":502,"data":503,"type":218,"tunes":505},"p-architecture-2",{"text":504},"Koristan test dizajna je da diskonektujete implementaciju od svakog spoljnog servisa i hladno pokrenete stack. Skrivene zavisnosti obično se pojavljuju tokom pokretanja, učitavanja modela, autentifikacije, razrešavanja paketa ili inicijalizacije telemetrije.",{},{"id":507,"data":508,"type":42,"tunes":510},"h-models",{"text":509,"level":253},"Modeli moraju biti unapred pripremljeni",{},{"id":512,"data":513,"type":218,"tunes":515},"p-models-1",{"text":514},"Cloud API-ji modela su po definiciji nedostupni ako izolovano radno opterećenje nema putanju do njih. Enklava stoga zahteva lokalno pokretljive artefakte modela ili interno hostovan servis za inferenciju.",{},{"id":517,"data":518,"type":218,"tunes":520},"p-models-2",{"text":519},"NVIDIA-ina trenutna NIM dokumentacija za vazdušni jaz eksplicitno koristi dvofazni obrazac: preuzmite i pripremite resurse modela na povezanoj mašini, prenesite ih, zatim pokrenite izolovani NIM iz lokalnog skladišta bez odlaznog pristupa registry-ju ili cloud API ključeva.",{},{"id":522,"data":523,"type":218,"tunes":525},"p-models-3",{"text":524},"Težine modela su samo deo skupa zavisnosti. Tokenizeri, konfiguracione datoteke, adapteri, metapodaci kvantizacije i bilo koji potreban runtime kod takođe moraju biti prisutni.",{},{"id":527,"data":528,"type":42,"tunes":530},"h-remote-code",{"text":529,"level":253},"Modeli sa zavisnostima udaljenog koda su opasnost za vazdušni jaz",{},{"id":532,"data":533,"type":218,"tunes":535},"p-remote-1",{"text":534},"Neki repozitorijumi modela sadrže prilagođeni Python kod ili runtime hook-ove koji obično preuzimaju dodatni kod ili resurse.",{},{"id":537,"data":538,"type":218,"tunes":540},"p-remote-2",{"text":539},"Trenutna Red Hat AI Inference dokumentacija eksplicitno upozorava da neki Hugging Face modeli koji zahtevaju udaljeni kod ne mogu normalno da rade u diskonektovanim okruženjima jer biblioteka pokušava pristup mreži čak i kada je režim rada bez mreže konfigurisan.",{},{"id":542,"data":543,"type":218,"tunes":545},"p-remote-3",{"text":544},"Praktična lekcija je da testirate ceo put učitavanja modela bez mreže pre nego što ga odobrite za izolovano postavljanje. „Preuzeo sam težine“ nije dokaz da je model samostalan.",{},{"id":547,"data":548,"type":42,"tunes":550},"h-artifacts",{"text":549,"level":253},"Kontejneri, paketi i drajveri postaju lokalni artefakti lanca snabdevanja",{},{"id":552,"data":553,"type":218,"tunes":555},"p-artifacts-1",{"text":554},"Povezana okruženja rutinski preuzimaju kontejnerske slike, Python pakete, ažuriranja OS-a i GPU komponente iz javnih registara. Vazdušno izolovano okruženje ne može da računa na nijednu od tih usluga.",{},{"id":557,"data":558,"type":218,"tunes":560},"p-artifacts-2",{"text":559},"Red Hat-ov model za diskonektovano AI postavljanje koristi interne mirror registre za kontejnerske slike i kataloge operatora. Modeli mogu biti preslikani kao OCI artefakti ili preneti na trajno skladište.",{},{"id":562,"data":563,"type":218,"tunes":565},"p-artifacts-3",{"text":564},"Za šire stack-ove, isti obrazac se često primenjuje na jezičke pakete, Linux repozitorijume, JavaScript pakete i interne binarne datoteke: odobreni artefakti ulaze jednom kroz proces prenosa i zatim se serviraju iz pouzdanih internih repozitorijuma.",{},{"id":567,"data":568,"type":42,"tunes":570},"h-bom",{"text":569,"level":253},"Poznajte kompletan račun zavisnosti",{},{"id":572,"data":573,"type":394,"tunes":608},"dependency-table",{"content":574,"stretched":43,"withHeadings":14},[575,578,581,584,587,590,593,596,599,602,605],[576,577],"Klasa zavisnosti","Primeri",[579,580],"Artefakti modela","Težine, tokenizer, konfiguracija, adapteri, metapodaci kvantizacije",[582,583],"Inference runtime","vLLM, llama.cpp, Ollama, NIM ili drugi serving runtime",[585,586],"GPU\u002Fruntime stack","Drajveri, CUDA\u002FROCm biblioteke, kontejnerski runtime",[588,589],"Aplikacijski paketi","Python wheels, npm paketi, sistemske biblioteke",[591,592],"Kontejneri","Aplikacija, inference, DB, vektorska DB, slike za monitoring",[594,595],"RAG modeli","Model za embedding, reranker, OCR\u002Fvizuelni modeli",[597,598],"Podaci","Korpus znanja, metapodaci, šeme, skupovi podataka za evaluaciju",[600,601],"Bezbednosni materijal","Sertifikati, CA paketi, politika\u002Fkonfiguracija, potpisi malvera gde je primenljivo",[603,604],"Operativni artefakti","Dashboard-i, pravila upozorenja, alati za backup, runbook-ovi",[606,607],"Licenciranje","Licence\u002Fprava kompatibilne sa radom bez mreže gde je potrebno",{},{"id":610,"data":611,"type":42,"tunes":613},"h-mirror",{"text":612,"level":253},"Interni mirrori su infrastruktura, a ne pogodnost",{},{"id":615,"data":616,"type":218,"tunes":618},"p-mirror-1",{"text":617},"Diskonektovano postavljanje postaje održivo kada izolovani domen ima poznate interne izvore za odobrene artefakte.",{},{"id":620,"data":621,"type":218,"tunes":623},"p-mirror-2",{"text":622},"Red Hat-ov dokumentovani pristup koristi mirror registar dostupan diskonektovanom klasteru tako da radna opterećenja ne zahtevaju javne registre.",{},{"id":625,"data":626,"type":218,"tunes":628},"p-mirror-3",{"text":627},"Ista arhitektonska ideja može se primeniti na skladišta modela i repozitorijume paketa. Cilj je da poreklo artefakta, verzija i odobrenje budu eksplicitni, umesto da se nasumične datoteke ručno kopiraju na svaki server.",{},{"id":630,"data":631,"type":42,"tunes":633},"h-rag",{"text":632,"level":253},"RAG može da radi potpuno vazdušno izolovano",{},{"id":635,"data":636,"type":218,"tunes":638},"p-rag-1",{"text":637},"RAG ne zahteva javni internet. Zahteva korpus koji se može pretraživati, pipeline za ingestiju\u002Findeksiranje i model koji može da koristi preuzeti kontekst.",{},{"id":640,"data":641,"type":218,"tunes":643},"p-rag-2",{"text":642},"Unutar vazdušno izolovanog okruženja, skladište dokumenata, parser\u002FOCR, model za embedding, vektorski ili leksički indeks, reranker i model za generisanje mogu svi da rade lokalno.",{},{"id":645,"data":646,"type":218,"tunes":648},"p-rag-3",{"text":647},"Ono što se menja je nabavka izvora. Pretraga weba uživo i cloud konektori za dokumente nisu dostupni osim ako se ekvivalentni podaci ne uvezu kroz kontrolisanu granicu.",{},{"id":650,"data":651,"type":218,"tunes":653},"p-rag-4",{"text":652},"Korpus stoga postaje upravljani artefakt. Svaki uvoz treba da sačuva identitet izvora, datum\u002Fverziju i poreklo kako bi korisnici znali koje znanje izolovani sistem zapravo sadrži.",{},{"id":655,"data":656,"type":661,"tunes":662},"ref-rag",{"url":657,"title":658,"excerpt":659,"ctaLabel":660},"https:\u002F\u002Fstajic.de\u002Fsr\u002Fblog\u002Fwhat-is-rag-the-simplest-explanation-of-how-it-works","Šta je RAG? Najjednostavnije objašnjenje kako funkcioniše","Sam RAG je nezavisan od cloud hostinga. U air-gapped arhitekturi, pronalaženje i generisanje jednostavno moraju biti obezbeđeni od strane lokalnih\u002Finternih komponenti.","Pročitajte osnove RAG-a","referralArticle",{},{"id":664,"data":665,"type":42,"tunes":667},"h-agents",{"text":666,"level":253},"Agenti mogu da rade air-gapped — ali samo sa dostupnim alatima",{},{"id":669,"data":670,"type":218,"tunes":672},"p-agents-1",{"text":671},"Petlja agenta može u potpunosti da se izvršava unutar izolovane enklave ako su model\u002Fruntime i potrebni alati lokalni ili dostupni na internoj mreži.",{},{"id":674,"data":675,"type":218,"tunes":677},"p-agents-2",{"text":676},"Alat koji zavisi od GitHub-a, javnog web pretraživanja, cloud email-a ili eksternog SaaS API-ja neće raditi osim ako arhitektura ne obezbeđuje odobreni interni ekvivalent ili kontrolisani asinhroni proces razmene.",{},{"id":679,"data":680,"type":218,"tunes":682},"p-agents-3",{"text":681},"Zbog toga dizajn air-gapped agenta treba da počne inventarom sposobnosti: svaka tačka pristupa alata mora biti klasifikovana kao interna, uvezena, nedostupna ili namerno isključena.",{},{"id":684,"data":685,"type":42,"tunes":687},"h-mcp",{"text":686,"level":253},"MCP ne zaobilazi air gap",{},{"id":689,"data":690,"type":218,"tunes":692},"p-mcp-1",{"text":691},"MCP može da izloži lokalne alate i resurse unutar izolovanog AI okruženja, ali protokol ne stvara povezanost kroz bezbednosnu granicu.",{},{"id":694,"data":695,"type":218,"tunes":697},"p-mcp-2",{"text":696},"Lokalni MCP server koji čita interne dokumente može savršeno da radi offline. Udaljeni MCP server na javnom internetu ne može se dosegnuti iz strogo air-gapped enklave.",{},{"id":699,"data":700,"type":218,"tunes":702},"p-mcp-3",{"text":701},"Isti princip važi za bilo koji protokol konektora: interoperabilnost je odvojena od mrežnog ovlašćenja.",{},{"id":704,"data":705,"type":42,"tunes":707},"h-identity",{"text":706,"level":253},"Identitet i autentifikacija takođe moraju da rade offline",{},{"id":709,"data":710,"type":218,"tunes":712},"p-id-1",{"text":711},"AI aplikacija može biti lokalno hostovana dok i dalje zavisi od cloud provajdera identiteta. Ta skrivena zavisnost prekida istinski diskonektovan rad.",{},{"id":714,"data":715,"type":218,"tunes":717},"p-id-2",{"text":716},"Air-gapped dizajni stoga zahtevaju arhitekturu identiteta koja funkcioniše unutar enklave: lokalni direktorijum, interni provajder identiteta, interna PKI, lokalni servisni akreditivi ili drugi odobreni mehanizam.",{},{"id":719,"data":720,"type":218,"tunes":722},"p-id-3",{"text":721},"Autorizacija ostaje neophodna iako internet nije prisutan. Air gap-ovi ne zamenjuju RBAC, izolaciju zakupaca ili najmanje privilegije.",{},{"id":724,"data":725,"type":42,"tunes":727},"h-time",{"text":726,"level":253},"Vreme, sertifikati i trust store-ovi postaju lokalne zavisnosti",{},{"id":729,"data":730,"type":218,"tunes":732},"p-time-1",{"text":731},"Mnogi sistemi za autentifikaciju i logovanje zavise od pouzdanog vremena. Sertifikati ističu. Trust store-ovi se menjaju. Potpisani artefakti zahtevaju validaciju.",{},{"id":734,"data":735,"type":218,"tunes":737},"p-time-2",{"text":736},"Diskonektovana enklava stoga treba da ima internu vremensku sinhronizaciju i životni ciklus sertifikata\u002Fpoverenja koji ne zavisi od pristupa javnim servisima tokom redovnog rada.",{},{"id":739,"data":740,"type":218,"tunes":742},"p-time-3",{"text":741},"To su obične infrastrukturne brige koje postaju vidljive samo kada se arhitektura testira bez pristupa internetu.",{},{"id":744,"data":745,"type":42,"tunes":747},"h-telemetry",{"text":746,"level":253},"Telemetrija i izveštavanje o padovima zahtevaju eksplicitnu politiku",{},{"id":749,"data":750,"type":218,"tunes":752},"p-tel-1",{"text":751},"Mnoge moderne biblioteke podrazumevano pokušavaju analitiku, provere ažuriranja ili prijavljivanje grešaka.",{},{"id":754,"data":755,"type":218,"tunes":757},"p-tel-2",{"text":756},"U izolovanom okruženju ti pozivi bi trebalo ili da budu onemogućeni ili preusmereni na internu observabilnost. Ponovljeni neuspešni pokušaji telemetrije mogu da izazovu kašnjenja, bučne logove i neočekivano ponašanje pri pokretanju.",{},{"id":759,"data":760,"type":218,"tunes":762},"p-tel-3",{"text":761},"Air-gapped implementacija treba da zna koji komponenti pokušavaju izlazni saobraćaj čak i ako bi ih firewall blokirao.",{},{"id":764,"data":765,"type":42,"tunes":767},"h-updates",{"text":766,"level":253},"Air-gapped sistemi i dalje zahtevaju zakrpe",{},{"id":769,"data":770,"type":218,"tunes":772},"p-update-1",{"text":771},"Mrežna izolacija ne sprečava softver da razvije ranjivosti. Ona samo menja način na koji zakrpe stižu do sistema.",{},{"id":774,"data":775,"type":218,"tunes":777},"p-update-2",{"text":776},"NIST definiše upravljanje zakrpama kao preventivno održavanje: organizacije i dalje moraju da identifikuju, nabave, prioritizuju, instaliraju i verifikuju zakrpe i ažuriranja.",{},{"id":779,"data":780,"type":218,"tunes":782},"p-update-3",{"text":781},"Air-gapped operacije stoga zahtevaju ponovljiv ritam uvoza za OS pakete, kontejnerske slike, drajvere, AI runtime-ove i bezbednosna ažuriranja. Kompromis je između stabilnosti izolacije i izloženosti ranjivostima zbog zastarelog softvera.",{},{"id":784,"data":785,"type":42,"tunes":787},"h-patch-flow",{"text":786,"level":253},"Kontrolisana putanja ažuriranja",{},{"id":789,"data":790,"type":331,"tunes":817},"patch-flow",{"steps":791,"title":816,"orientation":330},[792,795,798,801,804,807,810,813],{"label":793,"description":794},"1. Identifikujte potrebno ažuriranje","Bezbednosni savet, poboljšanje modela\u002Fruntime-a ili operativna potreba pokreće promenu.",{"label":796,"description":797},"2. Nabavite u povezanom staging okruženju","Preuzmite tačne verzije plus potpise\u002Fkontrolne sume i metapodatke.",{"label":799,"description":800},"3. Validirajte dokaze o lancu snabdevanja","Verifikujte izvor, integritet, kompatibilnost i zahteve politike.",{"label":802,"description":803},"4. Testirajte u reprezentativnom offline staging okruženju","Potvrdite da ažuriranje funkcioniše bez neočekivanih mrežnih zavisnosti.",{"label":805,"description":806},"5. Odobrite prenos","Primenite organizacioni proces promena i bezbednosti.",{"label":808,"description":809},"6. Uvezite u repozitorijum enklave","Objavite artefakt na interni pouzdani izvor.",{"label":811,"description":812},"7. Postepeno implementirajte","Primenite na test\u002Fcanary čvorove pre šireg uvođenja gde arhitektura to dozvoljava.",{"label":814,"description":815},"8. Verifikujte i zabeležite","Potvrdite verziju, zdravlje, ponašanje i stanje za vraćanje.","Primer životnog ciklusa ažuriranja za izolovano AI okruženje",{},{"id":819,"data":820,"type":42,"tunes":822},"h-transfer",{"text":821,"level":253},"Granica prenosa je najosetljiviji operativni interfejs",{},{"id":824,"data":825,"type":218,"tunes":827},"p-transfer-1",{"text":826},"Ako eksterne informacije moraju da uđu u air-gapped sistem, kanal za uvoz postaje glavna tačka bezbednosne kontrole.",{},{"id":829,"data":830,"type":218,"tunes":832},"p-transfer-2",{"text":831},"NSA Cybersecurity Technical Cyber Threat Framework eksplicitno prepoznaje replikaciju putem prenosivih medija kao putanju koju protivnici mogu da koriste da pređu u diskonektovane ili air-gapped mreže.",{},{"id":834,"data":835,"type":218,"tunes":837},"p-transfer-3",{"text":836},"Zato kontrolisano rukovanje medijima, inspekcija, poreklo, enkripcija gde je potrebno, skeniranje na malware i razdvajanje uloga mogu biti jednako važni kao i sam AI stack.",{},{"id":839,"data":840,"type":42,"tunes":842},"h-media",{"text":841,"level":253},"Prenosivi mediji nisu neutralna cev",{},{"id":844,"data":845,"type":218,"tunes":847},"p-media-1",{"text":846},"USB drajvovi i drugi prenosivi mediji mogu da nose i legitimne artefakte modela\u002Fpodataka i zlonamerni sadržaj.",{},{"id":849,"data":850,"type":218,"tunes":852},"p-media-2",{"text":851},"NIST smernice za sanitizaciju medija tretiraju storage medije kao objekat životnog ciklusa poverljivosti koji može zahtevati brisanje, čišćenje ili uništenje u skladu sa osetljivošću i potrebama ponovne upotrebe.",{},{"id":854,"data":855,"type":218,"tunes":857},"p-media-3",{"text":856},"Tačan postupak prenosa je specifičan za organizaciju, ali arhitektonski princip je stabilan: mediji koji prelaze granice treba da budu vođeni kao bezbednosno sredstvo, a ne tretirani kao neformalna pogodnost.",{},{"id":859,"data":860,"type":42,"tunes":862},"h-supply",{"text":861,"level":253},"Air-gapping povećava važnost lanca snabdevanja",{},{"id":864,"data":865,"type":218,"tunes":867},"p-supply-1",{"text":866},"Izolovani sistem prima manje živih spoljnih ulaza, ali svaki uvezeni binarni fajl, model, kontejner i paket postaje značajniji jer enklava može da mu veruje dugo vremena.",{},{"id":869,"data":870,"type":218,"tunes":872},"p-supply-2",{"text":871},"NIST smernice za lanac snabdevanja softverom naglašavaju poreklo, rizik dobavljača, upravljanje ranjivostima, verifikaciju softvera i prakse zasnovane na SBOM-u. Ovi problemi postaju direktno relevantni za offline uvoz AI artefakata.",{},{"id":874,"data":875,"type":218,"tunes":877},"p-supply-3",{"text":876},"Lanac snabdevanja modela zaslužuje istu pažnju kao lanac snabdevanja aplikacija: poreklo modela, licenca, heš, format, potreban kod, tokenizator, adapteri i status evaluacije treba da budu poznati pre uvoza.",{},{"id":879,"data":880,"type":42,"tunes":882},"h-readiness",{"text":881,"level":253},"Spremnost za vazdušni zid treba testirati, a ne pretpostavljati",{},{"id":884,"data":885,"type":226,"tunes":888},"readiness-note",{"body":886,"title":887,"variant":246},"Sledeći test spremnosti za vazdušni zid je inženjerska sinteza, a ne NIST ili metod sertifikacije dobavljača. Dizajniran je da otkrije skrivene spoljne zavisnosti pre implementacije.","Predloženi obrazac validacije",{},{"id":890,"data":891,"type":394,"tunes":926},"readiness-table",{"content":892,"stretched":43,"withHeadings":14},[893,896,899,902,905,908,911,914,917,920,923],[894,895],"Test","Šta dokazuje",[897,898],"Hladan start sa blokiranim svim odlaznim mrežnim saobraćajem","Runtime ne zahteva javne servise tokom pokretanja",[900,901],"Učitavanje svakog odobrenog modela iz lokalnog skladišta","Težine\u002Ftokenizatori\u002Fkonfiguracije su kompletni",[903,904],"Ponovna izgradnja\u002Fimplementacija samo iz internih registara","Kontejnerski\u002Fmirrori paketa su dovoljni",[906,907],"Autentifikacija korisnika dok je spoljni IdP nedostupan","Identitet funkcioniše unutar enklave",[909,910],"Pokretanje RAG unosa i upita offline","Sloj za ugrađivanje\u002Findeksiranje\u002Fpronalaženje je lokalni",[912,913],"Pokretanje reprezentativnih agentskih alata","Alati ne zavise od spoljnih API-ja",[915,916],"Restart nakon brisanja keša","Offline rad se ne oslanja slučajno na prethodno keširana preuzimanja",[918,919],"Unapređenje simuliranog životnog ciklusa sertifikata\u002Fažuriranja","Zavisnosti poverenja i održavanja su razumljive",[921,922],"Uvoz novog modela kroz pripremnu putanju","Procedura prenosa\u002Fpromene je operativna",[924,925],"Oporavak iz rezervne kopije","Oporavak ne zahteva nedostupno cloud skladište",{},{"id":928,"data":929,"type":42,"tunes":931},"h-cache",{"text":930,"level":253},"Keširano jednom nije isto kao spremno za vazdušni zid",{},{"id":933,"data":934,"type":218,"tunes":936},"p-cache-1",{"text":935},"Sistem može izgledati offline jer su model i paketi već keširani od ranijeg pristupa internetu.",{},{"id":938,"data":939,"type":218,"tunes":941},"p-cache-2",{"text":940},"Brisanje keša ili implementacija na čistom čvoru može otkriti nedostajuće datoteke tokenizatora, Python pakete, manifeste modela ili zavisnosti udaljenog koda.",{},{"id":943,"data":944,"type":218,"tunes":946},"p-cache-3",{"text":945},"Spremnost za vazdušni zid stoga treba validirati iz čistih internih artefakata, a ne samo sa razvojne radne stanice koja je prethodno bila povezana.",{},{"id":948,"data":949,"type":42,"tunes":951},"h-threats",{"text":950,"level":253},"Koje pretnje ostaju unutar vazdušnog zida?",{},{"id":953,"data":954,"type":394,"tunes":995},"threat-table",{"content":955,"stretched":43,"withHeadings":14},[956,959,962,965,968,971,974,977,980,983,986,989,992],[957,958],"Pretnja","Zašto je vazdušni zid ne uklanja",[960,961],"Kompromitovani uvezeni artefakt","Malver\u002Fmodel\u002Fpaket može ući kroz odobrenu putanju prenosa",[963,964],"Zlonamerni prenosivi mediji","Fizički prenos može nositi izvršne korisne terete",[966,967],"Zloupotreba od strane insajdera","Ovlašćeni korisnici već postoje unutar enklave",[969,970],"Ubacivanje upita u uvezene dokumente","Nepouzdan sadržaj može uticati na RAG\u002Fagente bez interneta",[972,973],"Alati agenata sa prekomernim privilegijama","Lokalni alati i dalje mogu oštetiti lokalne sisteme",[975,976],"Curenje podataka između zakupaca","Greške u internoj autorizaciji ostaju moguće",[978,979],"Ranjivi interni softver","Nedostatak spoljne veze ne uklanja greške koje se mogu iskoristiti",[981,982],"Lateralno kretanje","Kompromitovani čvor može napasti druge interno povezane čvorove",[984,985],"Zastarele zavisnosti","Spor tempo ažuriranja može ostaviti poznate ranjivosti nezakrpljene",[987,988],"Fizička krađa\u002Fneovlašćeno menjanje","Bezbednost hardvera i medija ostaje kritična",[990,991],"Loše ponašanje modela","Halucinacija, pristrasnost i neuspeh zadatka su nezavisni od umrežavanja",[993,994],"Trovanje lanca snabdevanja","Pouzdani izvori uvoza i dalje mogu biti kompromitovani",{},{"id":997,"data":998,"type":42,"tunes":1000},"h-benefits",{"text":999,"level":253},"Šta vazdušni zid zapravo poboljšava",{},{"id":1002,"data":1003,"type":218,"tunes":1005},"p-benefit-1",{"text":1004},"Pravi vazdušni zid može materijalno smanjiti napadačke putanje koje zavise od direktne udaljene povezanosti: spoljno komandovanje i kontrola, zloupotreba cloud akreditiva, iskorišćavanje servisa okrenutih internetu i slučajno iznošenje podataka kroz obične odlazne API-je.",{},{"id":1007,"data":1008,"type":218,"tunes":1010},"p-benefit-2",{"text":1009},"Takođe čini rezidentnost podataka jednostavnom u jednom uskom smislu: podaci zaključivanja ne mogu se poslati spoljnom cloud servisu ako putanja ne postoji.",{},{"id":1012,"data":1013,"type":218,"tunes":1015},"p-benefit-3",{"text":1014},"Te prednosti su najjače kada su granica prenosa i interne kontrole pristupa jednako disciplinovane. Loše vođen USB proces može potkopati predviđenu izolaciju.",{},{"id":1017,"data":1018,"type":42,"tunes":1020},"h-costs",{"text":1019,"level":253},"Šta vazdušni zid otežava",{},{"id":1022,"data":1023,"type":394,"tunes":1063},"cost-table",{"content":1024,"stretched":43,"withHeadings":14},[1025,1028,1031,1034,1037,1040,1043,1046,1049,1051,1054,1057,1060],[1026,1027],"Oblast","Operativna posledica",[1029,1030],"Ažuriranja modela","Ručni\u002Fpripremljeni prenos umesto direktnog povlačenja iz model-hub-a",[1032,1033],"Bezbednosne zakrpe","Odložen i vođen tok uvoza",[1035,1036],"Instalacija paketa","Potrebni interni mirrori ili unapred izgrađeni artefakti",[1038,1039],"Cloud AI API-ji","Nedostupni",[1041,1042],"Web pretraga\u002Fkonektori","Nedostupni osim ako se podaci uvoze odvojeno",[1044,1045],"Autentifikacija","Potrebni interni\u002Foffline servisi identiteta",[1047,1048],"Nadzor","Potrebna interna observabilnost i kontrolisani izvoz",[606,1050],"Proizvodi koji zahtevaju online aktivaciju mogu biti neprikladni",[1052,1053],"Rešavanje problema","Nema lakog pristupa resursima dobavljača uživo iz produkcione enklave",[1055,1056],"Kapacitet","Sva računarska snaga za zaključivanje mora postojati lokalno",[1058,1059],"Oporavak od katastrofe","Cloud rezervne kopije mogu biti nedostupne ili politički ograničene",[1061,1062],"Svežina znanja","Spoljne informacije stižu samo onoliko brzo koliko proces uvoza dozvoljava",{},{"id":1065,"data":1066,"type":42,"tunes":1068},"h-private",{"text":1067,"level":253},"Vazdušno izolovana AI vs privatna AI",{},{"id":1070,"data":1071,"type":218,"tunes":1073},"p-private-1",{"text":1072},"Privatna AI se prvenstveno odnosi na kontrolu osetljivih podataka i AI obrade. Privatna AI platforma može biti na lokaciji i dalje pristupati odobrenim cloud modelima ili eksternim servisima.",{},{"id":1075,"data":1076,"type":218,"tunes":1078},"p-private-2",{"text":1077},"Vazdušno izolovana AI je stroža po pitanju povezanosti. Sistem može biti privatan bez vazdušne izolacije, a vazdušno izolovan sistem može i dalje imati slabu privatnost ako svaki interni korisnik ima neograničen pristup.",{},{"id":1080,"data":1081,"type":218,"tunes":1083},"p-private-3",{"text":1082},"Bezbednosni cilj treba da odredi arhitekturu: poverljivost, suverenitet, otpornost i izolacija su povezani ali različiti zahtevi.",{},{"id":1085,"data":1086,"type":42,"tunes":1088},"h-sovereign",{"text":1087,"level":253},"Vazdušno izolovana AI vs suverena AI",{},{"id":1090,"data":1091,"type":218,"tunes":1093},"p-sovereign-1",{"text":1092},"Suverena AI se tiče kontrole nad širim lancem zavisnosti: podaci, modeli, infrastruktura, operatori, jurisdikcija i strateške zavisnosti.",{},{"id":1095,"data":1096,"type":218,"tunes":1098},"p-sovereign-2",{"text":1097},"Vazdušna izolacija može podržati suverenitet smanjenjem eksterne zavisnosti u vreme izvršavanja, ali ne garantuje suverenu kontrolu. Enklava može i dalje zavisiti od strane hardvera, vlasničkih licenci modela ili eksternih dobavljača ažuriranja.",{},{"id":1100,"data":1101,"type":218,"tunes":1103},"p-sovereign-3",{"text":1102},"Sledeći kanonski članak eksplicitno razdvaja te dimenzije kontrole.",{},{"id":1105,"data":1106,"type":42,"tunes":1108},"h-implementation",{"text":1107,"level":253},"Dokazi iz originalne implementacije: šta Aaasaasa AI Client dokazuje — a šta ne",{},{"id":1110,"data":1111,"type":226,"tunes":1114},"impl-note",{"body":1112,"title":1113,"variant":246},"Aaasaasa AI Client je koristan dokaz za \u003Cstrong>arhitekturu lokalnog izvršavanja\u003C\u002Fstrong>, apstrakciju provajdera i razdvajanje lokacije izvršavanja\u002Fmodela. To \u003Cstrong>nije dokaz o postavljenom vazdušno izolovanom okruženju\u003C\u002Fstrong>. Repozitorijum takođe podržava cloud i udaljene putanje, i nijedan verifikovani dokaz projekta ne uspostavlja fizički izolovan bezbednosni domen.","Granica implementacije",{},{"id":1116,"data":1117,"type":218,"tunes":1119},"p-impl-1",{"text":1118},"AI Hub razdvaja agent\u002Fklijent, provajdera, model i lokaciju veze. Podržava lokalno Ollama izvršavanje i rad Codex-a sa lokalnim provajderom kao različite izbore, umesto da pretpostavlja da svaki AI zahtev ide ka cloud modelu.",{},{"id":1121,"data":1122,"type":218,"tunes":1124},"p-impl-2",{"text":1123},"Repozitorijum eksplicitno napominje da lokalno izvršavanje i dalje može koristiti cloud model, dok je Direct Ollama chat lokalno izvršavanje. Ova razlika je direktno relevantna za arhitekturu vazdušne izolacije: lokalno izvršavanje ne dokazuje da su model ili okolne zavisnosti isključene.",{},{"id":1126,"data":1127,"type":218,"tunes":1129},"p-impl-3",{"text":1128},"Apstrakcija provajdera, otkrivanje lokalnih modela i lokalno izvršavanje su stoga gradivni blokovi za arhitekturu proizvoda sposobnog za vazdušnu izolaciju, ali mrežna granica, offline ogledalo zavisnosti, kontrolisani proces prenosa i offline identitet\u002Foperacije moraju se i dalje posebno projektovati.",{},{"id":1131,"data":1132,"type":394,"tunes":1155},"impl-table",{"content":1133,"stretched":43,"withHeadings":14},[1134,1137,1140,1143,1146,1149,1152],[1135,1136],"Verifikovana sposobnost projekta","Relevantnost za vazdušnu izolaciju",[1138,1139],"Lokalno Ollama izvršavanje","Podržava lokalno izvršavanje modela",[1141,1142],"Putanje lokalnog provajdera\u002Fizvršavanja","Smanjuje zavisnost od cloud izvršavanja",[1144,1145],"Razdvajanje provajdera\u002Fmodela\u002Fizvršavanja","Čini cloud zavisnosti eksplicitnim umesto skrivenim",[1147,1148],"Centralne dozvole","Podržava kontrolu pristupa lokalnim alatima\u002Fpodacima",[1150,1151],"Podrška za cloud\u002Fudaljene provajdere takođe postoji","Dokazuje da je sam proizvod hibridno sposoban, a ne inherentno vazdušno izolovan",[1153,1154],"Nema verifikovane izolovane granice postavljanja","Sprečava preterano tvrdnje o zrelosti vazdušne izolacije",{},{"id":1157,"data":1158,"type":42,"tunes":1160},"h-when",{"text":1159,"level":253},"Kada je vazdušno izolovana AI opravdana?",{},{"id":1162,"data":1163,"type":394,"tunes":1186},"when-table",{"content":1164,"stretched":43,"withHeadings":14},[1165,1168,1171,1174,1177,1180,1183],[1166,1167],"Vazdušna izolacija može biti opravdana kada","Povezana privatna arhitektura može biti bolja kada",[1169,1170],"Bezbednosna politika eksplicitno zahteva fizički razdvojene domene","Glavni zahtev je samo da promptovi\u002Fpodaci ne budu korišćeni od strane javnih potrošačkih servisa",[1172,1173],"Klasifikovani ili izuzetno osetljivi podaci ne smeju prelaziti eksterne mreže","Odobreni enterprise cloud\u002Fprivatni endpointi zadovoljavaju kontrole podataka",[1175,1176],"Operativno okruženje nema pouzdanu eksternu povezanost","Internet je dostupan i operativna agilnost je važna",[1178,1179],"Kontinuitet misije ne sme zavisiti od dostupnosti cloud\u002Fprovajdera","Upravljani kvalitet modela i brze nadogradnje su vredniji",[1181,1182],"Regulisano\u002Fkritično okruženje zahteva kontrolisani prenos","Standardne bezbednosne kontrole mogu zadovoljiti stvarni model pretnji",[1184,1185],"Eksterni SaaS\u002FAPI pristup je zabranjen","Poslovni tok rada se u velikoj meri oslanja na eksterne konektore",{},{"id":1188,"data":1189,"type":218,"tunes":1191},"p-when-1",{"text":1190},"Vazdušna izolacija treba da bude zahtev izveden iz modela pretnji ili politike, a ne prestižna funkcija. Ima stvarnu bezbednosnu vrednost kada je eliminisana putanja povezivanja sama po sebi neprihvatljiva.",{},{"id":1193,"data":1194,"type":218,"tunes":1196},"p-when-2",{"text":1195},"Za mnoge enterprise slučajeve upotrebe, strogo kontrolisana privatna mreža sa ograničenjima izlaznog saobraćaja, lokalnim izvršavanjem i odobrenim kanalima ažuriranja može pružiti bolji balans bezbednosti i održivosti od stroge fizičke vazdušne izolacije.",{},{"id":1198,"data":1199,"type":42,"tunes":1201},"h-design",{"text":1200,"level":253},"Praktičan redosled projektovanja vazdušno izolovanih AI sistema",{},{"id":1203,"data":1204,"type":331,"tunes":1243},"design-flow",{"steps":1205,"title":1242,"orientation":330},[1206,1209,1212,1215,1218,1221,1224,1227,1230,1233,1236,1239],{"label":1207,"description":1208},"1. Definišite šta vazdušni jaz razdvaja","Imenujte bezbednosne domene i utvrdite da li je zahtev strogo fizičko razdvajanje ili samo odsustvo interneta.",{"label":1210,"description":1211},"2. Popišite svaku spoljnu zavisnost","Modeli, paketi, registri, identitet, telemetrija, licenciranje, skladištenje, API-ji, DNS\u002Fvreme i usluge podrške.",{"label":1213,"description":1214},"3. Izaberite modele i okruženja koja rade bez mreže","Proverite da li se resursi modela i kod okruženja mogu učitati bez udaljenih poziva.",{"label":1216,"description":1217},"4. Izgradite interne repozitorijume artefakata","Napravite pouzdane izvore za kontejnere, pakete, modele i ažuriranja.",{"label":1219,"description":1220},"5. Projektujte kontrolisani prenos","Definišite pripremu, verifikaciju, rukovanje medijima\u002Fgejtvejom, odobravanje i poreklo.",{"label":1222,"description":1223},"6. Izgradite interni identitet i autorizaciju","Osigurajte da korisnici, servisi i alati mogu da se autentifikuju bez zavisnosti od oblaka.",{"label":1225,"description":1226},"7. Zadržite RAG i alate lokalno","Postavite znanje, embedding-e, indekse i potrebne servisne API-je unutar enklave.",{"label":1228,"description":1229},"8. Izgradite internu opservabilnost","Upravljajte logovima, metrikama, tragovima i bezbednosnim nadzorom lokalno.",{"label":1231,"description":1232},"9. Definišite ritam ažuriranja zakrpa\u002Fmodela","Uravnotežite odgovor na ranjivosti sa kontrolisanim procesom uvoza.",{"label":1234,"description":1235},"10. Testirajte iz čistog nepovezanog stanja","Hladni start i rad bez nasleđenih keševa ili skrivenog pristupa internetu.",{"label":1237,"description":1238},"11. Testirajte puteve kompromitovanja","Vežbajte scenarije prenosivih medija, lanca snabdevanja, prompt-injection, insajdera i lateralnog kretanja.",{"label":1240,"description":1241},"12. Dokumentujte izuzetke i izvoze","Svaki dozvoljeni put preko granice treba da ima imenovanu svrhu, vlasnika i skup kontrola.","Projektovanje od granice ka unutrašnjosti",{},{"id":1245,"data":1246,"type":42,"tunes":1248},"h-checklist",{"text":1247,"level":253},"Kontrolna lista arhitekture vazdušno izolovanog AI sistema",{},{"id":1250,"data":1251,"type":394,"tunes":1304},"checklist-table",{"content":1252,"stretched":43,"withHeadings":14},[1253,1256,1259,1262,1265,1268,1271,1274,1277,1280,1283,1286,1289,1292,1295,1298,1301],[1254,1255],"Pitanje","Očekivani dokaz",[1257,1258],"Šta je tačno izolovano od čega?","Dokumentovana granica bezbednosnog domena",[1260,1261],"Da li je granica fizički nepovezana?","Dokaz o mrežnoj\u002Ffizičkoj arhitekturi ako se tvrdi strogi vazdušni jaz",[1263,1264],"Kako podaci prelaze granicu?","Autorizovani neautomatski\u002Fručni ili eksplicitno dokumentovani nepovezani tok rada",[1266,1267],"Može li svaki model da se hladno pokrene bez mreže?","Test učitavanja bez mreže",[1269,1270],"Da li su tokenizer\u002Fconfig\u002Fruntime resursi kompletni?","Verifikovani interni paket modela",[1272,1273],"Odakle dolaze kontejneri\u002Fpaketi?","Interni pouzdani mirror\u002Frepozitorijum",[1275,1276],"Može li identitet da funkcioniše bez cloud servisa?","Interni IdP\u002FPKI\u002Fput servisnih akreditiva",[1278,1279],"Može li RAG ingest\u002Fupit bez mreže?","Lokalni ingestion, embedding, indeks i pretraga",[1281,1282],"Koji agent alati ostaju dostupni?","Interni inventar sposobnosti",[1284,1285],"Kako se uvoze zakrpe?","Kontrolisani proces održavanja",[1287,1288],"Kako se verifikuju artefakti?","Kontrole integriteta\u002Fporekla\u002Fmalvera\u002Flanca snabdevanja",[1290,1291],"Kako se upravlja prenosivim medijima?","Politika rukovanja i sanitizacije medija",[1293,1294],"Može li sistem da radi nakon brisanja keša?","Test bez mreže u čistom okruženju",[1296,1297],"Gde se čuvaju logovi i tragovi?","Interna platforma za opservabilnost",[1299,1300],"Kako se odobravaju izvozi?","Kontrolisani proces izlaza",[1302,1303],"Šta dokazuje da je ovo vazdušno izolovano, a ne samo lokalno?","Dokaz o granici i prenosu, a ne lokacija modela",{},{"id":1306,"data":1307,"type":42,"tunes":1309},"h-failures",{"text":1308,"level":253},"Česti načini neuspeha vazdušno izolovanog AI sistema",{},{"id":1311,"data":1312,"type":394,"tunes":1353},"failure-table",{"content":1313,"stretched":43,"withHeadings":14},[1314,1317,1320,1323,1326,1329,1332,1335,1338,1341,1344,1347,1350],[1315,1316],"Način neuspeha","Šta je zapravo zakazalo",[1318,1319],"Lokalni model i dalje preuzima tokenizer\u002Fconfig pri pokretanju","Paket modela je bio nekompletan",[1321,1322],"Kontejner referencira javni registar","Implementacija nije bila samodovoljna",[1324,1325],"Cloud identitet je potreban za prijavu","Aplikacija je bila lokalna, ali identitet nije",[1327,1328],"Licencni server je potreban eksterno","Zavisnost od dobavljača je protivrečila radu bez mreže",[1330,1331],"Nedostaje model za embedding","Chat radi, ali RAG ingestion ne uspeva",[1333,1334],"Agent alati pozivaju javni SaaS","Arhitektura agenta nije bila kompatibilna sa vazdušnim jazom",[1336,1337],"Izolovan je samo GPU čvor","Baza podataka, UI ili monitoring i dalje zavise od eksternih servisa",[1339,1340],"USB uvozi su neformalni","Granica prenosa postaje nekontrolisan put napada",[1342,1343],"Nema procesa zakrpa","Izolacija stvara rastući dug ranjivosti",[1345,1346],"Keširani razvojni računar se koristi kao dokaz","Sveža implementacija ne uspeva bez interneta",[1348,1349],"Vazdušni jaz zamenjuje razmišljanje o autorizaciji","Interni korisnici\u002Fservisi postaju prekomerno privilegovani",[1351,1352],"Oznaka vazdušno izolovanog se koristi za blokiranje izlaza samo firewall-om","Bezbednosna dokumentacija precenjuje stvarnu granicu",{},{"id":1355,"data":1356,"type":42,"tunes":1358},"h-misconceptions",{"text":1357,"level":253},"Česte zablude",{},{"id":1360,"data":1361,"type":394,"tunes":1396},"misconceptions-table",{"content":1362,"stretched":43,"withHeadings":14},[1363,1366,1369,1372,1375,1378,1381,1384,1387,1390,1393],[1364,1365],"Zabluda","Ispravka",[1367,1368],"„Lokalni AI je vazdušno izolovani AI.“","Lokalno opisuje gde se izvršava inferencija; vazdušni jaz opisuje bezbednosnu\u002Fmrežnu granicu.",[1370,1371],"„Vazdušno izolovano znači jedan samostalni računar.“","Izolovana enklava može da sadrži celu internu mrežu ili klaster.",[1373,1374],"„Nema interneta jednako je strogom vazdušnom jazu.“","Prema NIST definiciji, razdvojeni sistemi takođe nemaju fizičku vezu, a prenos preko granice je neautomatski.",[1376,1377],"„Vazdušni jazovi eliminišu sajber rizik.“","Rizici lanca snabdevanja, prenosivih medija, insajdera, interne mreže i aplikacija ostaju.",[1379,1380],"„RAG zahteva cloud.“","RAG može u potpunosti da radi sa lokalnim modelima, indeksima i podacima.",[1382,1383],"„Agenti ne mogu da rade bez mreže.“","Agenti mogu da koriste interne\u002Flokalne alate; jednostavno ne mogu da dosegnu nedostupne eksterne servise.",[1385,1386],"„Kada se instalira, sistemu nisu potrebna ažuriranja.“","Zakrpe, drajveri, modeli i zavisnosti i dalje zahtevaju upravljanje životnim ciklusom.",[1388,1389],"„Preuzeti model je samodovoljan.“","Tokenizers, udaljeni kod, biblioteke ili resursi modela i dalje mogu da pokrenu mrežne zavisnosti.",[1391,1392],"„Privatni AI i vazdušno izolovani AI su identični.“","Privatni AI je svojstvo podataka\u002Fkontrole; vazdušni jaz je svojstvo povezanosti.",[1394,1395],"„Vazdušni jaz garantuje suverenitet.“","Eksterni hardver, licence, modeli i lanac snabdevanja mogu ostati zavisnosti.",{},{"id":1398,"data":1399,"type":42,"tunes":1401},"h-limitations",{"text":1400,"level":253},"Ograničenja",{},{"id":1403,"data":1404,"type":218,"tunes":1406},"p-limit-1",{"text":1405},"Strogi vazdušni jazovi čine svežinu eksternog znanja sporijom jer svaki novi izvor mora da prođe kroz proces prenosa.",{},{"id":1408,"data":1409,"type":218,"tunes":1411},"p-limit-2",{"text":1410},"Oni mogu da ograniče izbor modela kada licence, zahtevi za udaljenim kodom, hardverske potrebe ili API-ji samo kod provajdera ne mogu da se zadovolje bez mreže.",{},{"id":1413,"data":1414,"type":218,"tunes":1416},"p-limit-3",{"text":1415},"Oni povećavaju operativne troškove jer infrastruktura koja se obično troši kao cloud servisi mora da se poseduje i održava interno.",{},{"id":1418,"data":1419,"type":218,"tunes":1421},"p-limit-4",{"text":1420},"Oni takođe mogu da stvore kašnjenje zakrpa: jača kontrola promena može da održi sisteme stabilnim dok odlaže hitno otklanjanje ranjivosti.",{},{"id":1423,"data":1424,"type":218,"tunes":1426},"p-limit-5",{"text":1425},"Vazdušno izolovani AI bi stoga trebalo procenjivati kao jednu bezbednosnu arhitekturu među nekoliko, a ne pretpostavljati da je univerzalno superiorna.",{},{"id":1428,"data":1429,"type":42,"tunes":1431},"h-change",{"text":1430,"level":253},"Šta bi promenilo ovaj odgovor?",{},{"id":1433,"data":1434,"type":218,"tunes":1436},"p-change-1",{"text":1435},"Podrška dobavljača za rad bez mreže menja se brzo. Novi formati modela, potpisani OCI artefakti, mehanizmi licenciranja bez mreže i integrisani registri modela mogu da smanje operativno trenje.",{},{"id":1438,"data":1439,"type":218,"tunes":1441},"p-change-2",{"text":1440},"Razlika između strogog vazdušnog jaza i nepovezane implementacije ostaće važna čak i ako dobavljači nastave labavo da koriste te termine.",{},{"id":1443,"data":1444,"type":218,"tunes":1446},"p-change-3",{"text":1445},"Stabilan princip je da istinske tvrdnje o vazdušnom jazu zavise od granice sistema i mehanizma prenosa, a ne od toga da li LLM slučajno radi lokalno.",{},{"id":1448,"data":1449,"type":42,"tunes":1451},"h-related",{"text":1450,"level":253},"Povezano kanonsko znanje",{},{"id":1453,"data":1454,"type":218,"tunes":1456},"p-related-1",{"text":1455},"Air-Gapped AI je čvor arhitekture za bezbednost i implementaciju. Privatna AI, suverena AI i apstrakcija provajdera odgovaraju na različita pitanja o poverljivosti, kontroli i zavisnosti.",{},{"id":1458,"data":1459,"type":218,"tunes":1461},"p-related-2",{"text":1460},"MLOps\u002FLLMOps postaje zahtevniji u nepovezanom okruženju jer životni ciklusi modela, paketa i ažuriranja moraju da funkcionišu kroz interne repozitorijume i kontrolisani prenos.",{},{"id":1463,"data":1464,"type":218,"tunes":1466},"p-related-3",{"text":1465},"RAG i agentna AI ostaju validni obrasci unutar enklave sve dok su njihovi podaci i alati dostupni interno.",{},{"id":1468,"data":1469,"type":661,"tunes":1474},"ref-memory",{"url":1470,"title":1471,"excerpt":1472,"ctaLabel":1473},"https:\u002F\u002Fstajic.de\u002Fsr\u002Fblog\u002Fai-agent-memory-is-not-rag-how-to-separate-memory-retrieval-state-and-context","Memorija AI agenta nije RAG: Kako razdvojiti memoriju, pretragu, stanje i kontekst","Air-gapped AI i dalje zahteva ispravne interne granice između trajne memorije, autoritativnog stanja, pretrage i konteksta modela.","Pročitajte članak o arhitekturi memorije",{},{"id":1476,"data":1477,"type":42,"tunes":1479},"h-faq",{"text":1478,"level":253},"Često postavljana pitanja",{},{"id":1481,"data":1482,"type":1481,"tunes":1525},"faq",{"items":1483,"title":1524},[1484,1488,1492,1496,1500,1504,1508,1512,1516,1520],{"id":1485,"answer":1486,"question":1487},"faq1","Air-gapped AI je AI koji se implementira unutar bezbednosnog domena fizički odvojenog od eksternih sistema od kojih je izolovan, pri čemu se prenos preko granice obavlja kroz kontrolisane, neautomatizovane procedure prema strogoj NIST definiciji.","Šta je air-gapped AI?",{"id":1489,"answer":1490,"question":1491},"faq2","Ne za normalno izvršavanje i rad. Potrebni modeli, paketi, podaci i servisi moraju biti dostupni unutar izolovanog okruženja.","Da li air-gapped AI zahteva pristup internetu?",{"id":1493,"answer":1494,"question":1495},"faq3","Ne. Lokalni model može da radi na mašini koja i dalje ima pristup internetu ili koristi cloud identitet, alate ili skladište. Air gap opisuje kompletnu granicu sistema.","Da li je lokalni LLM automatski air-gapped?",{"id":1497,"answer":1498,"question":1499},"faq4","Da. Dokumenti, modeli za ugrađivanje, vektorski ili leksički indeksi, reranker-i i modeli za generisanje mogu svi da rade lokalno. Eksterno znanje mora se uneti kroz kontrolisanu granicu.","Može li RAG da funkcioniše u air-gapped mreži?",{"id":1501,"answer":1502,"question":1503},"faq5","Da, ako su njihovi alati i potrebni sistemi dostupni unutar izolovane mreže. Javni SaaS i cloud API-ji nisu dostupni bez dozvoljenog mehanizma prelaska granice.","Mogu li AI agenti da rade air-gapped?",{"id":1505,"answer":1506,"question":1507},"faq6","Modeli se obično pribavljaju i validiraju u povezanom staging okruženju, prenose kroz odobreni proces i objavljuju u interni repozitorijum modela\u002Fartefakata.","Kako se modeli ažuriraju u air-gapped okruženju?",{"id":1509,"answer":1510,"question":1511},"faq7","Ne. On-premises opisuje lokaciju infrastrukture. On-prem sistemi mogu ostati povezani na internet.","Da li je on-premises AI isto što i air-gapped AI?",{"id":1513,"answer":1514,"question":1515},"faq8","Ne. Privatna AI se odnosi na zahteve za podacima\u002Fkontrolom i može i dalje koristiti povezanu infrastrukturu. Air gap specifično opisuje mrežnu\u002Fdomensku razdvojenost.","Da li je privatna AI isto što i air-gapped AI?",{"id":1517,"answer":1518,"question":1519},"faq9","Uklanja ili smanjuje neke rizike udaljene povezanosti, ali ne uklanja rizike lanca snabdevanja, prenosivih medija, insajdera, interne autorizacije, fizičke rizike ili rizike ponašanja modela.","Da li air gap čini AI bezbednim?",{"id":1521,"answer":1522,"question":1523},"faq10","Implementirajte ili hladno pokrenite kompletan stek u čistom okruženju sa svim eksternim vezama nedostupnim i proverite da modeli, identitet, RAG, alati, nadzor, ažuriranja i oporavak zavise samo od odobrenih internih artefakata i servisa.","Koji je najbolji test za air-gap spremnost?","Air-gapped AI FAQ",{},{"id":1527,"data":1528,"type":42,"tunes":1530},"h-glossary",{"text":1529,"level":253},"Pojmovnik",{},{"id":1532,"data":1533,"type":1532,"tunes":1583},"glossary",{"title":1534,"entries":1535},"Ključni air-gapped AI pojmovi",[1536,1540,1544,1548,1552,1555,1559,1563,1567,1571,1575,1579],{"term":1537,"anchor":1538,"definition":1539},"Air gap","air-gap","Interfejs bezbednosnog domena gde sistemi nisu fizički povezani i svaki logički prenos preko granice je neautomatizovan\u002Fmanuelni prema NIST definiciji pojmovnika.",{"term":1541,"anchor":1542,"definition":1543},"Air-gapped AI","air-gapped-ai","AI sistem implementiran unutar air-gapped bezbednosnog domena sa lokalno dostupnim izvršavanjem i operativnim zavisnostima.",{"term":1545,"anchor":1546,"definition":1547},"Nepovezano okruženje","disconnected-environment","Okruženje za implementaciju bez direktnog pristupa spoljnom internetu; implementacije mogu koristiti kontrolisane mirror ili bastion tokove.",{"term":1549,"anchor":1550,"definition":1551},"AI sa mogućnošću rada van mreže","offline-capable-ai","AI aplikacija sposobna da radi za neke ili sve funkcije bez internet konekcije, bez neophodne trajne izolacije.",{"term":367,"anchor":1553,"definition":1554},"local-ai","AI izvršavanje ili runtime koji se izvršava na lokalnom hardveru, a ne na udaljenoj model endpoint tački; ne podrazumeva mrežnu izolaciju.",{"term":1556,"anchor":1557,"definition":1558},"Mirror registar","mirror-registry","Interni repozitorijum koji sadrži odobrene kopije kontejnerskih slika ili drugih artefakata potrebnih za nepovezanu implementaciju.",{"term":1560,"anchor":1561,"definition":1562},"Staging okruženje","staging-environment","Povezana ili kontrolisana zona gde se artefakti pribavljaju, verifikuju i pripremaju pre prenosa u izolovani domen.",{"term":1564,"anchor":1565,"definition":1566},"Kontrolisani prenos","controlled-transfer","Upravljano kretanje podataka ili softvera preko izolacione granice korišćenjem odobrenih medija\u002Fprocesa i verifikacije.",{"term":1568,"anchor":1569,"definition":1570},"Poreklo artefakta","artifact-provenance","Informacija koja pokazuje odakle model, paket, kontejner ili drugi uvezeni artefakt potiče i kako je proizveden ili verifikovan.",{"term":1572,"anchor":1573,"definition":1574},"Prenosivi mediji","removable-media","Prenosivo skladište koje se koristi za prenos podataka između sistema; potencijalna bezbednosna putanja preko nepovezanih domena.",{"term":1576,"anchor":1577,"definition":1578},"Interno skladište modela","internal-model-store","Repozitorijum unutar izolovanog okruženja iz kojeg se serviraju ili implementiraju odobreni artefakti modela.",{"term":1580,"anchor":1581,"definition":1582},"Air-gap spremnost","air-gap-readiness","Dokazana sposobnost kompletnog AI steka da se instalira, pokrene, radi, ažurira i oporavi bez neodobrene eksterne povezanosti.",{},{"id":1585,"data":1586,"type":42,"tunes":1588},"h-conclusion",{"text":1587,"level":253},"Zaključak",{},{"id":1590,"data":1591,"type":218,"tunes":1593},"p-conclusion-1",{"text":1592},"Air-gapped AI nije posebna vrsta modela. To je AI arhitektura koja radi unutar namerno izolovanog bezbednosnog domena.",{},{"id":1595,"data":1596,"type":218,"tunes":1598},"p-conclusion-2",{"text":1597},"Model može biti lakši deo. Spremnost za produkciju zavisi od toga da li svaka okolna zavisnost — sredstva modela, paketi, registri, identitet, RAG, alati, nadzor, ažuriranja i oporavak — može da funkcioniše bez automatizovane eksterne putanje.",{},{"id":1600,"data":1601,"type":218,"tunes":1603},"p-conclusion-3",{"text":1602},"Najkraće pouzdano pravilo je: lokalno izvršavanje dokazuje gde se model izvršava; air-gap dokaz dokazuje kako je kompletan sistem razdvojen i kako svaki dozvoljeni prenos prelazi tu granicu.",{},{"id":1605,"data":1606,"type":42,"tunes":1608},"h-sources",{"text":1607,"level":253},"Primarni izvori i reference trenutne implementacije",{},{"id":1610,"data":1611,"type":218,"tunes":1613},"p-sources-note",{"text":1612},"Izvori u nastavku uspostavljaju bezbednosnu definiciju, trenutne obrasce implementacije nepovezane AI i rizike životnog ciklusa. Korišćenje termina „air-gapped“ od strane dobavljača namerno se razlikuje od strože NIST definicije.",{},{"id":1615,"data":1616,"type":1622,"tunes":1623},"src-nist-airgap",{"link":1617,"meta":1618},"https:\u002F\u002Fcsrc.nist.gov\u002Fglossary\u002Fterm\u002Fair_gap",{"image":1619,"title":1620,"description":1621},{"url":419},"NIST CSRC — Air gap","NIST definicija pojmovnika: fizički nepovezani sistemi sa neautomatizovanim, ručno kontrolisanim logičkim prenosom preko granice.","linkTool",{},{"id":1625,"data":1626,"type":1622,"tunes":1632},"src-nvidia-airgap",{"link":1627,"meta":1628},"https:\u002F\u002Fdocs.nvidia.com\u002Fnim\u002Flarge-language-models\u002Flatest\u002Fdeploy-air-gap.html",{"image":1629,"title":1630,"description":1631},{"url":419},"NVIDIA NIM — Air-Gap Deployment","Trenutne operativne smernice za staging artefakata modela na povezanom sistemu i pokretanje NIM-a iz lokalnog skladišta bez interneta, javnih registara ili cloud API ključeva.",{},{"id":1634,"data":1635,"type":1622,"tunes":1641},"src-redhat-disconnected",{"link":1636,"meta":1637},"https:\u002F\u002Fdocs.redhat.com\u002Fen\u002Fdocumentation\u002Fred_hat_ai_inference\u002F3.5\u002Fhtml\u002Fdeploy_the_standalone_red_hat_ai_inference_container_in_a_disconnected_environment\u002Findex",{"image":1638,"title":1639,"description":1640},{"url":419},"Red Hat AI Inference — Disconnected deployment","Trenutne Red Hat smernice za serviranje LLM-ova u nepovezanim okruženjima sa mirror-ovanim artefaktima i internom infrastrukturom.",{},{"id":1643,"data":1644,"type":1622,"tunes":1650},"src-redhat-models",{"link":1645,"meta":1646},"https:\u002F\u002Fdocs.redhat.com\u002Fen\u002Fdocumentation\u002Fred_hat_ai_inference\u002F3.5\u002Fhtml\u002Fdeploy_the_standalone_red_hat_ai_inference_container_in_a_disconnected_environment\u002Fstoring-models-in-disconnected-environments_disconnected-deploy",{"image":1647,"title":1648,"description":1649},{"url":419},"Red Hat AI Inference — Čuvanje modela u nepovezanim okruženjima","Aktuelne smernice koje pokrivaju OCI slike modela, trajno skladištenje modela i ograničenja modela koji zahtevaju daljinski kod.",{},{"id":1652,"data":1653,"type":1622,"tunes":1659},"src-nsa-framework",{"link":1654,"meta":1655},"https:\u002F\u002Fwww.nsa.gov\u002Fportals\u002F75\u002Fdocuments\u002Fwhat-we-do\u002Fcybersecurity\u002Fprofessional-resources\u002Fctr-nsa-css-technical-cyber-threat-framework.pdf",{"image":1656,"title":1657,"description":1658},{"url":419},"NSA — Tehnički okvir za sajber pretnje","Okvir pretnji koji eksplicitno identifikuje replikaciju putem prenosivih medija kao put u nepovezane ili izolovane mreže.",{},{"id":1661,"data":1662,"type":1622,"tunes":1668},"src-nist-media",{"link":1663,"meta":1664},"https:\u002F\u002Fwww.nist.gov\u002Fpublications\u002Fguidelines-media-sanitization",{"image":1665,"title":1666,"description":1667},{"url":419},"NIST SP 800-88 Rev. 1 — Smernice za sanitizaciju medija","Smernice za upravljanje i sanitizaciju medija za skladištenje u skladu sa zahtevima poverljivosti informacija.",{},{"id":1670,"data":1671,"type":1622,"tunes":1677},"src-nist-patch",{"link":1672,"meta":1673},"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F40\u002Fr4\u002Ffinal",{"image":1674,"title":1675,"description":1676},{"url":419},"NIST SP 800-40 Rev. 4 — Planiranje upravljanja zakrpama u preduzeću","Smernice koje definišu zakrpe i ažuriranja kao preventivno održavanje u sistemima preduzeća.",{},{"id":1679,"data":1680,"type":1622,"tunes":1686},"src-nist-supply",{"link":1681,"meta":1682},"https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fexecutive-order-14028-improving-nations-cybersecurity\u002Fsoftware-security-supply-chains",{"image":1683,"title":1684,"description":1685},{"url":419},"NIST — Bezbednost softvera u lancima snabdevanja","NIST smernice koje pokrivaju rizik lanca snabdevanja softvera, poreklo, verifikaciju, prakse povezane sa SBOM-om i upravljanje ranjivostima.",{},"2.31","Air-gapped AI pokreće modele, RAG i AI aplikacije unutar izolovanog bezbednosnog domena bez internet ili cloud zavisnosti. Saznajte kako modeli, podaci, ažuriranja i alati funkcionišu offline.","\u002Fuploads\u002F2026\u002F10\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access-1791487983978-e6xqf0.webp","air-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access-1791487983978-e6xqf0","PUBLISHED","2026-10-08T11:32:00.000Z","2026-10-08T19:32:11.607Z","2026-10-08T21:37:26.788Z",{"en":1696,"de":1697,"sr":1698,"es":1699,"fr":1700,"it":1701,"ru":1702,"zh":1703},"\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u002Fde\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u002Fsr\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u002Fes\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u002Ffr\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u002Fit\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u002Fru\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access","\u002Fzh\u002Fblog\u002Fair-gapped-ai-how-ai-systems-work-without-internet-or-cloud-access",[1705,1709,1713],{"id":1706,"name":1707,"slug":1708},57,"Granice podataka","data-boundaries",{"id":1710,"name":1711,"slug":1712},54,"Model prijetnji","threat-model",{"id":1714,"name":1715,"slug":1716},49,"Kontrole i dokazi","controls",{"id":1718,"login":1719,"email":1720,"displayName":1721},"20","rooth8233","aleksandar@stajic.de","Aleksandar Stajić",[1723,2972],{"lang":1724,"title":1725,"content":1726,"contentJson":1727,"excerpt":2971},"en","Air-Gapped AI: How AI Systems Work Without Internet or Cloud Access","{\"time\":1791495428517,\"blocks\":[{\"id\":\"intro\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapped AI is an AI system deployed inside a security domain that has no physical network connection to the external systems it is separated from, with any transfer across that boundary performed through deliberately controlled, non-automated procedures. The AI model, runtime, data, retrieval indexes, tools and operational dependencies required for inference must therefore be available inside the isolated environment. Air-gapped AI is not simply “a local model” or “an on-premise server”: the defining property is the network and transfer boundary around the complete system.\"},\"tunes\":{}},{\"id\":\"direct\",\"type\":\"callout\",\"data\":{\"variant\":\"info\",\"title\":\"Direct answer\",\"body\":\"An air-gapped AI system can run LLM inference, RAG, document analysis and even agentic workflows without internet or cloud APIs if every required dependency is available inside the isolated domain.\u003Cbr>\u003Cbr>A practical architecture is:\u003Cbr>\u003Cstrong>controlled import → internal artifact\u002Fmodel repositories → local AI runtime → local data\u002FRAG → local tools → internal users\u002Fservices → local monitoring\u002Faudit\u003C\u002Fstrong>.\u003Cbr>\u003Cbr>The difficult part is not making one LLM answer offline. It is operating the whole AI lifecycle — updates, models, drivers, packages, data imports, credentials, logging and security — without silently depending on external services.\"},\"tunes\":{}},{\"id\":\"nist-boundary\",\"type\":\"callout\",\"data\":{\"variant\":\"warning\",\"title\":\"Air gap has a stricter meaning than “no internet”\",\"body\":\"NIST's cybersecurity glossary defines an air gap as an interface where two systems are \u003Cstrong>not physically connected\u003C\u002Fstrong> and where any logical transfer is \u003Cstrong>not automated\u003C\u002Fstrong>; data crosses only manually under human control. Vendor documentation sometimes uses “air-gapped” or “disconnected” more broadly for environments with no outside-internet connection but with internal networking and controlled staging infrastructure. Architecture documentation should state which meaning is actually implemented.\"},\"tunes\":{}},{\"id\":\"not-security\",\"type\":\"callout\",\"data\":{\"variant\":\"warning\",\"title\":\"Air-gapped does not mean secure by definition\",\"body\":\"Removing direct network connectivity eliminates many remote paths, but it does not eliminate malicious removable media, compromised software\u002Fmodel imports, insider threats, vulnerable internal services, physical compromise, prompt injection through imported documents or lateral movement inside the isolated network.\"},\"tunes\":{}},{\"id\":\"current\",\"type\":\"callout\",\"data\":{\"variant\":\"note\",\"title\":\"Current-source note — 8 October 2026\",\"body\":\"Current NVIDIA NIM and Red Hat AI Inference documentation both support LLM serving without outside-internet access by pre-staging model and container assets. NVIDIA documents a connected preparation phase followed by an isolated execution phase with local assets and no cloud registry credentials. Red Hat uses mirrored container\u002Fmodel repositories for disconnected OpenShift environments. These are useful implementation examples, but they do not override the stricter NIST definition of an air gap.\"},\"tunes\":{}},{\"id\":\"toc\",\"type\":\"tableOfContents\",\"data\":{\"title\":\"Contents\",\"minLevel\":2,\"maxLevel\":3},\"tunes\":{}},{\"id\":\"h-meaning\",\"type\":\"header\",\"data\":{\"text\":\"What air-gapped AI really means\",\"level\":2},\"tunes\":{}},{\"id\":\"p-meaning-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"The word AI does not change the basic security concept. An air gap is a boundary between security domains. AI simply makes the isolated side more operationally demanding because modern AI stacks normally assume downloadable models, package registries, telemetry, APIs, model hubs and frequent software updates.\"},\"tunes\":{}},{\"id\":\"p-meaning-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"The isolated environment can still contain many connected machines. An internal cluster may have GPUs, application servers, storage, databases, identity services and monitoring connected to each other. The air gap exists between that enclave and the outside domain.\"},\"tunes\":{}},{\"id\":\"p-meaning-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The relevant question is therefore not “Does this GPU have Wi-Fi?” but “Can this AI environment exchange information with the external domain through an automated physical or logical path?”\"},\"tunes\":{}},{\"id\":\"h-simple\",\"type\":\"header\",\"data\":{\"text\":\"The simplest example\",\"level\":2},\"tunes\":{}},{\"id\":\"p-simple-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Imagine a company wants an internal assistant for confidential technical documents, but the environment is not permitted to send those documents to the internet.\"},\"tunes\":{}},{\"id\":\"p-simple-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"The company downloads an approved LLM, embedding model, container images and software packages in a connected staging environment. After validation, approved artifacts are transferred into the isolated environment.\"},\"tunes\":{}},{\"id\":\"p-simple-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Inside the enclave, the model server, document parser, vector database, application and identity services run locally. Users can ask questions and use RAG against internal documents without a cloud model or public model registry.\"},\"tunes\":{}},{\"id\":\"p-simple-4\",\"type\":\"paragraph\",\"data\":{\"text\":\"When an update is required, the update passes through the controlled import process again rather than being downloaded directly by the production AI server.\"},\"tunes\":{}},{\"id\":\"simple-flow\",\"type\":\"processFlow\",\"data\":{\"title\":\"A basic air-gapped AI operating cycle\",\"orientation\":\"auto\",\"steps\":[{\"label\":\"1. Acquire outside the enclave\",\"description\":\"Download approved models, packages, containers, drivers, signatures and documentation in a connected staging environment.\"},{\"label\":\"2. Verify before transfer\",\"description\":\"Check provenance, signatures\u002Fchecksums, malware status, licensing and compatibility according to organizational policy.\"},{\"label\":\"3. Transfer through controlled boundary\",\"description\":\"Move approved artifacts using the authorized manual or mediated process.\"},{\"label\":\"4. Publish internally\",\"description\":\"Place artifacts in internal model, container, package or file repositories.\"},{\"label\":\"5. Deploy locally\",\"description\":\"Run inference, RAG, applications and tools without external dependencies.\"},{\"label\":\"6. Monitor inside the enclave\",\"description\":\"Collect logs, metrics, model\u002Fruntime status and security events locally.\"},{\"label\":\"7. Export only approved evidence\",\"description\":\"Move selected reports or artifacts outward through the reverse controlled process where policy permits.\"},{\"label\":\"8. Repeat for updates\",\"description\":\"Treat new models, patches, corpora and dependencies as new supply-chain imports.\"}]},\"tunes\":{}},{\"id\":\"h-stops\",\"type\":\"header\",\"data\":{\"text\":\"Where the simple example stops\",\"level\":2},\"tunes\":{}},{\"id\":\"p-stops-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"A production air-gapped environment can be much larger than one workstation. It may include Kubernetes\u002FOpenShift, internal registries, object storage, identity providers, vector databases, observability, backup infrastructure and several model-serving nodes.\"},\"tunes\":{}},{\"id\":\"p-stops-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"The more services exist inside the enclave, the more the organization must reproduce capabilities that connected environments normally consume from the internet.\"},\"tunes\":{}},{\"id\":\"p-stops-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapping therefore shifts complexity. It reduces direct external connectivity but increases artifact-management, patching, dependency, supply-chain and operational responsibility inside the isolated domain.\"},\"tunes\":{}},{\"id\":\"h-terms\",\"type\":\"header\",\"data\":{\"text\":\"Air-gapped vs offline vs local vs on-premises vs private vs sovereign AI\",\"level\":2},\"tunes\":{}},{\"id\":\"terms-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Term\",\"What it primarily describes\",\"Internet\u002Fexternal connectivity required?\"],[\"Local AI\",\"Inference\u002Fruntime runs on local hardware\",\"No; but it may still call cloud services\"],[\"Offline-capable AI\",\"Can continue operating without internet\",\"No during offline operation; reconnection may be normal\"],[\"Disconnected environment\",\"No direct external-internet path from deployment environment\",\"Usually no; may use controlled mirrors\u002Fbastions\"],[\"On-premises AI\",\"Infrastructure runs in an organization's own\u002Fon-prem environment\",\"Could still have full internet connectivity\"],[\"Private AI\",\"AI processing is controlled to meet privacy\u002Fconfidentiality requirements\",\"Architecture-specific; can be connected or disconnected\"],[\"Air-gapped AI\",\"Security domains are physically disconnected and cross-boundary transfer is non-automated\u002Fmanual under strict definition\",\"No automated external path\"],[\"Sovereign AI\",\"Control\u002Fjurisdiction over models, data, infrastructure and dependencies\",\"Not necessarily; sovereignty is broader than network isolation\"]]},\"tunes\":{}},{\"id\":\"p-terms-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"These terms can overlap but are not synonyms. A local Ollama server connected to the internet is local AI, not air-gapped AI. An on-premises RAG platform that calls a cloud model is on-premises application infrastructure with cloud inference, not air-gapped AI.\"},\"tunes\":{}},{\"id\":\"p-terms-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"An air-gapped system is often private by design because data remains inside the enclave, but privacy also depends on authorization, logging, data handling, physical security and operational policy.\"},\"tunes\":{}},{\"id\":\"h-strict\",\"type\":\"header\",\"data\":{\"text\":\"Strict air gap vs practical disconnected deployment\",\"level\":2},\"tunes\":{}},{\"id\":\"strict-comparison\",\"type\":\"comparison\",\"data\":{\"title\":\"Two meanings frequently called “air-gapped”\",\"layout\":\"table\",\"columns\":[{\"id\":\"strict\",\"label\":\"Strict air gap\"},{\"id\":\"disconnected\",\"label\":\"Disconnected \u002F no-internet deployment\"}],\"rows\":[{\"id\":\"physical\",\"label\":\"External physical connection\",\"values\":{\"strict\":\"\",\"disconnected\":\"\"}},{\"id\":\"transfer\",\"label\":\"Cross-boundary transfer\",\"values\":{\"strict\":\"\",\"disconnected\":\"\"}},{\"id\":\"internet\",\"label\":\"Internet access from AI workload\",\"values\":{\"strict\":\"\",\"disconnected\":\"\"}},{\"id\":\"internalnet\",\"label\":\"Internal networking\",\"values\":{\"strict\":\"\",\"disconnected\":\"\"}},{\"id\":\"best\",\"label\":\"Use term when\",\"values\":{\"strict\":\"\",\"disconnected\":\"\"}}]},\"tunes\":{}},{\"id\":\"naming-rule\",\"type\":\"callout\",\"data\":{\"variant\":\"success\",\"title\":\"Document the boundary instead of relying on the label\",\"body\":\"For architecture and security reviews, write the actual rule: \u003Cstrong>no outbound internet\u003C\u002Fstrong>, \u003Cstrong>no physical external network path\u003C\u002Fstrong>, \u003Cstrong>manual transfer only\u003C\u002Fstrong>, or \u003Cstrong>disconnected cluster with approved bastion\u002Fmirror\u003C\u002Fstrong>. That is more precise than saying only “air-gapped.”\"},\"tunes\":{}},{\"id\":\"h-architecture\",\"type\":\"header\",\"data\":{\"text\":\"A practical air-gapped AI architecture\",\"level\":2},\"tunes\":{}},{\"id\":\"architecture-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Layer\",\"What must exist inside the isolated environment\"],[\"User\u002Fapplication layer\",\"Chat UI, APIs, business application or internal agent interface\"],[\"Identity & authorization\",\"Local\u002Finternal authentication, RBAC, tenant\u002Fresource permissions\"],[\"AI gateway\u002Fruntime\",\"Model routing, request policy, context assembly and runtime controls\"],[\"Model serving\",\"Local model server(s), weights, tokenizer\u002Fconfig and accelerator runtime\"],[\"RAG \u002F knowledge\",\"Document store, parser, embeddings, vector\u002Flexical indexes, metadata and provenance\"],[\"Tools\u002Fservices\",\"Only internal\u002Flocal APIs and approved systems reachable from the enclave\"],[\"Artifact repositories\",\"Local container registry, package mirror, model store and optionally OS\u002Fupdate repositories\"],[\"Observability\",\"Internal logs, metrics, traces and audit records\"],[\"Backup\u002Frecovery\",\"Local or separately controlled backup process appropriate to the security domain\"],[\"Transfer boundary\",\"Controlled import\u002Fexport process with inspection and approval\"]]},\"tunes\":{}},{\"id\":\"p-architecture-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"A complete architecture should be able to start and operate without DNS lookups, license checks, package downloads or API calls to public services unless those dependencies have approved internal replacements.\"},\"tunes\":{}},{\"id\":\"p-architecture-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"A useful design test is to disconnect the deployment from every external service and cold-start the stack. Hidden dependencies tend to appear during startup, model loading, authentication, package resolution or telemetry initialization.\"},\"tunes\":{}},{\"id\":\"h-models\",\"type\":\"header\",\"data\":{\"text\":\"Models must be pre-staged\",\"level\":2},\"tunes\":{}},{\"id\":\"p-models-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Cloud model APIs are unavailable by definition if the isolated workload has no path to them. The enclave therefore needs locally runnable model artifacts or an internally hosted inference service.\"},\"tunes\":{}},{\"id\":\"p-models-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"NVIDIA's current NIM air-gap documentation explicitly uses a two-phase pattern: download and prepare model assets on a connected machine, transfer them, then run the isolated NIM from local storage without outbound registry access or cloud API keys.\"},\"tunes\":{}},{\"id\":\"p-models-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Model weights are only part of the dependency set. Tokenizers, configuration files, adapters, quantization metadata and any required runtime code must also be present.\"},\"tunes\":{}},{\"id\":\"h-remote-code\",\"type\":\"header\",\"data\":{\"text\":\"Models with remote-code dependencies are an air-gap hazard\",\"level\":2},\"tunes\":{}},{\"id\":\"p-remote-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Some model repositories contain custom Python code or runtime hooks that normally fetch additional code or assets.\"},\"tunes\":{}},{\"id\":\"p-remote-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"Current Red Hat AI Inference documentation explicitly warns that some Hugging Face models requiring remote code cannot operate normally in disconnected environments because the library attempts network access even when offline mode is configured.\"},\"tunes\":{}},{\"id\":\"p-remote-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The practical lesson is to test a model's entire loading path offline before approving it for an isolated deployment. “I downloaded the weights” is not proof that the model is self-contained.\"},\"tunes\":{}},{\"id\":\"h-artifacts\",\"type\":\"header\",\"data\":{\"text\":\"Containers, packages and drivers become local supply-chain artifacts\",\"level\":2},\"tunes\":{}},{\"id\":\"p-artifacts-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Connected environments routinely pull container images, Python packages, OS updates and GPU components from public registries. An air-gapped environment cannot assume any of those services.\"},\"tunes\":{}},{\"id\":\"p-artifacts-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"Red Hat's disconnected AI deployment model uses internal mirror registries for container images and operator catalogs. Models can be mirrored as OCI artifacts or transferred to persistent storage.\"},\"tunes\":{}},{\"id\":\"p-artifacts-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"For broader stacks, the same pattern often applies to language packages, Linux repositories, JavaScript packages and internal binaries: approved artifacts enter once through the transfer process and are then served from trusted internal repositories.\"},\"tunes\":{}},{\"id\":\"h-bom\",\"type\":\"header\",\"data\":{\"text\":\"Know the complete dependency bill\",\"level\":2},\"tunes\":{}},{\"id\":\"dependency-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Dependency class\",\"Examples\"],[\"Model artifacts\",\"Weights, tokenizer, config, adapters, quantization metadata\"],[\"Inference runtime\",\"vLLM, llama.cpp, Ollama, NIM or other serving runtime\"],[\"GPU\u002Fruntime stack\",\"Drivers, CUDA\u002FROCm libraries, container runtime\"],[\"Application packages\",\"Python wheels, npm packages, system libraries\"],[\"Containers\",\"Application, inference, DB, vector DB, monitoring images\"],[\"RAG models\",\"Embedding model, reranker, OCR\u002Fvision models\"],[\"Data\",\"Knowledge corpus, metadata, schemas, evaluation datasets\"],[\"Security material\",\"Certificates, CA bundles, policy\u002Fconfiguration, malware signatures where applicable\"],[\"Operational artifacts\",\"Dashboards, alert rules, backup tools, runbooks\"],[\"Licensing\",\"Offline-compatible licenses\u002Fentitlements where required\"]]},\"tunes\":{}},{\"id\":\"h-mirror\",\"type\":\"header\",\"data\":{\"text\":\"Internal mirrors are infrastructure, not a convenience\",\"level\":2},\"tunes\":{}},{\"id\":\"p-mirror-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"A disconnected deployment becomes maintainable when the isolated domain has known internal sources for approved artifacts.\"},\"tunes\":{}},{\"id\":\"p-mirror-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"Red Hat's documented approach uses a mirror registry available to the disconnected cluster so workloads do not need public registries.\"},\"tunes\":{}},{\"id\":\"p-mirror-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The same architectural idea can be applied to model stores and package repositories. The objective is to make artifact origin, version and approval explicit rather than copy random files manually to each server.\"},\"tunes\":{}},{\"id\":\"h-rag\",\"type\":\"header\",\"data\":{\"text\":\"RAG can work fully air-gapped\",\"level\":2},\"tunes\":{}},{\"id\":\"p-rag-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"RAG does not require the public internet. It requires a retrievable corpus, an ingestion\u002Findexing pipeline and a model that can use the retrieved context.\"},\"tunes\":{}},{\"id\":\"p-rag-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"Inside an air-gapped environment, the document store, parser\u002FOCR, embedding model, vector or lexical index, reranker and generation model can all run locally.\"},\"tunes\":{}},{\"id\":\"p-rag-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"What changes is source acquisition. Live web search and cloud document connectors are unavailable unless equivalent data is imported through the controlled boundary.\"},\"tunes\":{}},{\"id\":\"p-rag-4\",\"type\":\"paragraph\",\"data\":{\"text\":\"The corpus therefore becomes a governed artifact. Every import should preserve source identity, date\u002Fversion and provenance so users know what knowledge the isolated system actually contains.\"},\"tunes\":{}},{\"id\":\"ref-rag\",\"type\":\"referralArticle\",\"data\":{\"url\":\"https:\u002F\u002Fstajic.de\u002Fblog\u002Fwhat-is-rag-the-simplest-explanation-of-how-it-works\",\"title\":\"What Is RAG? The Simplest Explanation of How It Works\",\"excerpt\":\"RAG itself is independent of cloud hosting. In an air-gapped architecture, retrieval and generation simply have to be supplied by local\u002Finternal components.\",\"ctaLabel\":\"Read the RAG foundation\"},\"tunes\":{}},{\"id\":\"h-agents\",\"type\":\"header\",\"data\":{\"text\":\"Agents can run air-gapped — but only with reachable tools\",\"level\":2},\"tunes\":{}},{\"id\":\"p-agents-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"An agent loop can run entirely inside an isolated enclave if the model\u002Fruntime and required tools are local or reachable on the internal network.\"},\"tunes\":{}},{\"id\":\"p-agents-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"A tool that depends on GitHub, public web search, cloud email or an external SaaS API will fail unless the architecture provides an approved internal equivalent or controlled asynchronous exchange process.\"},\"tunes\":{}},{\"id\":\"p-agents-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"This is why air-gapped agent design should begin with a capability inventory: every tool endpoint must be classified as internal, imported, unavailable or deliberately excluded.\"},\"tunes\":{}},{\"id\":\"h-mcp\",\"type\":\"header\",\"data\":{\"text\":\"MCP does not bypass the air gap\",\"level\":2},\"tunes\":{}},{\"id\":\"p-mcp-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"MCP can expose local tools and resources inside an isolated AI environment, but the protocol does not create connectivity through the security boundary.\"},\"tunes\":{}},{\"id\":\"p-mcp-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"A local MCP server that reads internal documents can work perfectly offline. A remote MCP server on the public internet cannot be reached from a strict air-gapped enclave.\"},\"tunes\":{}},{\"id\":\"p-mcp-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The same principle applies to any connector protocol: interoperability is separate from network authority.\"},\"tunes\":{}},{\"id\":\"h-identity\",\"type\":\"header\",\"data\":{\"text\":\"Identity and authentication must also work offline\",\"level\":2},\"tunes\":{}},{\"id\":\"p-id-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"An AI application can be locally hosted while still depending on a cloud identity provider. That hidden dependency breaks truly disconnected operation.\"},\"tunes\":{}},{\"id\":\"p-id-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapped designs therefore need an identity architecture that functions inside the enclave: local directory, internal identity provider, internal PKI, local service credentials or another approved mechanism.\"},\"tunes\":{}},{\"id\":\"p-id-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Authorization remains necessary even though the internet is absent. Air gaps do not replace RBAC, tenant isolation or least privilege.\"},\"tunes\":{}},{\"id\":\"h-time\",\"type\":\"header\",\"data\":{\"text\":\"Time, certificates and trust stores become local dependencies\",\"level\":2},\"tunes\":{}},{\"id\":\"p-time-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Many authentication and logging systems depend on reliable time. Certificates expire. Trust stores change. Signed artifacts need validation.\"},\"tunes\":{}},{\"id\":\"p-time-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"A disconnected enclave should therefore have internal time synchronization and a certificate\u002Ftrust lifecycle that does not depend on reaching public services during ordinary operation.\"},\"tunes\":{}},{\"id\":\"p-time-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"These are ordinary infrastructure concerns that become visible only when an architecture is tested without internet access.\"},\"tunes\":{}},{\"id\":\"h-telemetry\",\"type\":\"header\",\"data\":{\"text\":\"Telemetry and crash reporting need explicit policy\",\"level\":2},\"tunes\":{}},{\"id\":\"p-tel-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Many modern libraries attempt analytics, update checks or error reporting by default.\"},\"tunes\":{}},{\"id\":\"p-tel-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"In an isolated environment those calls should either be disabled or redirected to internal observability. Repeated failed telemetry attempts can create delays, noisy logs and unexpected startup behavior.\"},\"tunes\":{}},{\"id\":\"p-tel-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"An air-gapped deployment should know which components attempt egress even if the firewall would block them.\"},\"tunes\":{}},{\"id\":\"h-updates\",\"type\":\"header\",\"data\":{\"text\":\"Air-gapped systems still need patches\",\"level\":2},\"tunes\":{}},{\"id\":\"p-update-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Network isolation does not stop software from developing vulnerabilities. It only changes how patches reach the system.\"},\"tunes\":{}},{\"id\":\"p-update-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"NIST frames patch management as preventive maintenance: organizations still need to identify, acquire, prioritize, install and verify patches and updates.\"},\"tunes\":{}},{\"id\":\"p-update-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapped operations therefore need a repeatable import cadence for OS packages, container images, drivers, AI runtimes and security updates. The trade-off is between isolation stability and vulnerability exposure from stale software.\"},\"tunes\":{}},{\"id\":\"h-patch-flow\",\"type\":\"header\",\"data\":{\"text\":\"A controlled update path\",\"level\":2},\"tunes\":{}},{\"id\":\"patch-flow\",\"type\":\"processFlow\",\"data\":{\"title\":\"Example update lifecycle for an isolated AI environment\",\"orientation\":\"auto\",\"steps\":[{\"label\":\"1. Identify required update\",\"description\":\"Security advisory, model\u002Fruntime improvement or operational need triggers change.\"},{\"label\":\"2. Acquire in connected staging\",\"description\":\"Download exact versions plus signatures\u002Fchecksums and metadata.\"},{\"label\":\"3. Validate supply-chain evidence\",\"description\":\"Verify source, integrity, compatibility and policy requirements.\"},{\"label\":\"4. Test in representative offline staging\",\"description\":\"Confirm the update works without unexpected network dependencies.\"},{\"label\":\"5. Approve transfer\",\"description\":\"Apply the organization's change and security process.\"},{\"label\":\"6. Import into enclave repository\",\"description\":\"Publish the artifact to the internal trusted source.\"},{\"label\":\"7. Deploy gradually\",\"description\":\"Apply to test\u002Fcanary nodes before wider rollout where architecture permits.\"},{\"label\":\"8. Verify and record\",\"description\":\"Confirm version, health, behavior and rollback state.\"}]},\"tunes\":{}},{\"id\":\"h-transfer\",\"type\":\"header\",\"data\":{\"text\":\"The transfer boundary is the most sensitive operational interface\",\"level\":2},\"tunes\":{}},{\"id\":\"p-transfer-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"If external information must enter an air-gapped system, the import channel becomes a major security control point.\"},\"tunes\":{}},{\"id\":\"p-transfer-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"The NSA Cybersecurity Technical Cyber Threat Framework explicitly recognizes replication through removable media as a path adversaries can use to cross into disconnected or air-gapped networks.\"},\"tunes\":{}},{\"id\":\"p-transfer-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"That is why controlled media handling, inspection, provenance, encryption where required, malware scanning and role separation can matter as much as the AI stack itself.\"},\"tunes\":{}},{\"id\":\"h-media\",\"type\":\"header\",\"data\":{\"text\":\"Removable media is not a neutral pipe\",\"level\":2},\"tunes\":{}},{\"id\":\"p-media-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"USB drives and other portable media can carry both legitimate model\u002Fdata artifacts and malicious content.\"},\"tunes\":{}},{\"id\":\"p-media-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"NIST's media-sanitization guidance treats storage media as a confidentiality lifecycle object that may require clearing, purging or destruction according to sensitivity and reuse needs.\"},\"tunes\":{}},{\"id\":\"p-media-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The exact transfer procedure is organization-specific, but the architectural principle is stable: cross-boundary media should be governed as a security asset, not treated as an informal convenience.\"},\"tunes\":{}},{\"id\":\"h-supply\",\"type\":\"header\",\"data\":{\"text\":\"Air-gapping increases supply-chain importance\",\"level\":2},\"tunes\":{}},{\"id\":\"p-supply-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"An isolated system receives fewer live external inputs, but every imported binary, model, container and package becomes more consequential because the enclave may trust it for a long time.\"},\"tunes\":{}},{\"id\":\"p-supply-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"NIST software-supply-chain guidance emphasizes provenance, supplier risk, vulnerability management, software verification and SBOM-oriented practices. These concerns become directly relevant to offline AI artifact import.\"},\"tunes\":{}},{\"id\":\"p-supply-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Model supply chain deserves the same attention as application supply chain: model origin, license, hash, format, required code, tokenizer, adapters and evaluation status should be known before import.\"},\"tunes\":{}},{\"id\":\"h-readiness\",\"type\":\"header\",\"data\":{\"text\":\"Air-gap readiness should be tested, not assumed\",\"level\":2},\"tunes\":{}},{\"id\":\"readiness-note\",\"type\":\"callout\",\"data\":{\"variant\":\"note\",\"title\":\"Proposed validation pattern\",\"body\":\"The following air-gap-readiness test is an engineering synthesis, not a NIST or vendor certification method. It is designed to expose hidden external dependencies before deployment.\"},\"tunes\":{}},{\"id\":\"readiness-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Test\",\"What it proves\"],[\"Cold start with all outbound network blocked\",\"Runtime does not require public services during startup\"],[\"Load every approved model from local storage\",\"Weights\u002Ftokenizers\u002Fconfigs are complete\"],[\"Rebuild\u002Fredeploy from internal registries only\",\"Container\u002Fpackage mirrors are sufficient\"],[\"Authenticate users while external IdP is unreachable\",\"Identity works inside the enclave\"],[\"Run RAG ingestion and query offline\",\"Embedding\u002Findexing\u002Fretrieval stack is local\"],[\"Run representative agent tools\",\"Tools do not depend on external APIs\"],[\"Restart after cache deletion\",\"Offline operation is not accidentally relying on previously cached downloads\"],[\"Advance simulated certificate\u002Fupdate lifecycle\",\"Trust and maintenance dependencies are understood\"],[\"Import a new model through staging path\",\"Transfer\u002Fchange procedure is operational\"],[\"Restore from backup\",\"Recovery does not require unavailable cloud storage\"]]},\"tunes\":{}},{\"id\":\"h-cache\",\"type\":\"header\",\"data\":{\"text\":\"Cached once is not the same as air-gap ready\",\"level\":2},\"tunes\":{}},{\"id\":\"p-cache-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"A system may appear offline because the model and packages are already cached from earlier internet access.\"},\"tunes\":{}},{\"id\":\"p-cache-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"Deleting caches or deploying to a clean node can reveal missing tokenizer files, Python packages, model manifests or remote-code dependencies.\"},\"tunes\":{}},{\"id\":\"p-cache-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gap readiness should therefore be validated from clean internal artifacts, not only from a developer workstation that was previously connected.\"},\"tunes\":{}},{\"id\":\"h-threats\",\"type\":\"header\",\"data\":{\"text\":\"What threats remain inside an air gap?\",\"level\":2},\"tunes\":{}},{\"id\":\"threat-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Threat\",\"Why the air gap does not remove it\"],[\"Compromised imported artifact\",\"Malware\u002Fmodel\u002Fpackage can enter through the authorized transfer path\"],[\"Malicious removable media\",\"Physical transfer can carry executable payloads\"],[\"Insider misuse\",\"Authorized users already exist inside the enclave\"],[\"Prompt injection in imported documents\",\"Untrusted content can influence RAG\u002Fagents without internet\"],[\"Overprivileged agent tools\",\"Local tools can still damage local systems\"],[\"Cross-tenant data leakage\",\"Internal authorization bugs remain possible\"],[\"Vulnerable internal software\",\"Lack of external connection does not remove exploitable bugs\"],[\"Lateral movement\",\"A compromised node can attack other internally connected nodes\"],[\"Stale dependencies\",\"Slow update cadence can leave known vulnerabilities unpatched\"],[\"Physical theft\u002Ftampering\",\"Hardware and media security remain critical\"],[\"Bad model behavior\",\"Hallucination, bias and task failure are independent of networking\"],[\"Supply-chain poisoning\",\"Trusted import sources can still be compromised\"]]},\"tunes\":{}},{\"id\":\"h-benefits\",\"type\":\"header\",\"data\":{\"text\":\"What an air gap actually improves\",\"level\":2},\"tunes\":{}},{\"id\":\"p-benefit-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"A genuine air gap can materially reduce attack paths that depend on direct remote connectivity: external command-and-control, cloud credential misuse, internet-facing service exploitation and accidental data exfiltration through ordinary outbound APIs.\"},\"tunes\":{}},{\"id\":\"p-benefit-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"It also makes data residency simple in one narrow sense: inference data cannot be sent to an external cloud service if no path exists.\"},\"tunes\":{}},{\"id\":\"p-benefit-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Those benefits are strongest when the transfer boundary and internal access controls are equally disciplined. A poorly managed USB process can undermine the intended isolation.\"},\"tunes\":{}},{\"id\":\"h-costs\",\"type\":\"header\",\"data\":{\"text\":\"What an air gap makes harder\",\"level\":2},\"tunes\":{}},{\"id\":\"cost-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Area\",\"Operational consequence\"],[\"Model updates\",\"Manual\u002Fstaged transfer instead of direct model-hub pull\"],[\"Security patches\",\"Delayed and governed import workflow\"],[\"Package installation\",\"Internal mirrors or prebuilt artifacts required\"],[\"Cloud AI APIs\",\"Unavailable\"],[\"Web search\u002Fconnectors\",\"Unavailable unless data is imported separately\"],[\"Authentication\",\"Needs internal\u002Foffline-capable identity services\"],[\"Monitoring\",\"Needs internal observability and controlled export\"],[\"Licensing\",\"Products requiring online activation may be unsuitable\"],[\"Troubleshooting\",\"No easy live access to vendor resources from production enclave\"],[\"Capacity\",\"All inference compute must exist locally\"],[\"Disaster recovery\",\"Cloud backups may be unavailable or policy-restricted\"],[\"Knowledge freshness\",\"External information arrives only as fast as the import process\"]]},\"tunes\":{}},{\"id\":\"h-private\",\"type\":\"header\",\"data\":{\"text\":\"Air-gapped AI vs private AI\",\"level\":2},\"tunes\":{}},{\"id\":\"p-private-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Private AI is primarily about controlling sensitive data and AI processing. A private AI platform may be on-premises and still access approved cloud models or external services.\"},\"tunes\":{}},{\"id\":\"p-private-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapped AI is stricter on connectivity. A system can be private without being air-gapped, and an air-gapped system can still have poor privacy if every internal user has unrestricted access.\"},\"tunes\":{}},{\"id\":\"p-private-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The security objective should determine the architecture: confidentiality, sovereignty, resilience and isolation are related but distinct requirements.\"},\"tunes\":{}},{\"id\":\"h-sovereign\",\"type\":\"header\",\"data\":{\"text\":\"Air-gapped AI vs sovereign AI\",\"level\":2},\"tunes\":{}},{\"id\":\"p-sovereign-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Sovereign AI concerns control over the broader dependency chain: data, models, infrastructure, operators, jurisdiction and strategic dependencies.\"},\"tunes\":{}},{\"id\":\"p-sovereign-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"An air gap can support sovereignty by reducing external runtime dependency, but it does not guarantee sovereign control. The enclave may still depend on foreign hardware, proprietary model licenses or external update suppliers.\"},\"tunes\":{}},{\"id\":\"p-sovereign-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The next canonical article separates those control dimensions explicitly.\"},\"tunes\":{}},{\"id\":\"h-implementation\",\"type\":\"header\",\"data\":{\"text\":\"Original implementation evidence: what the Aaasaasa AI Client proves — and what it does not\",\"level\":2},\"tunes\":{}},{\"id\":\"impl-note\",\"type\":\"callout\",\"data\":{\"variant\":\"note\",\"title\":\"Implementation boundary\",\"body\":\"Aaasaasa AI Client is useful evidence for \u003Cstrong>local inference architecture\u003C\u002Fstrong>, provider abstraction and separation of runtime\u002Fmodel location. It is \u003Cstrong>not evidence of a deployed air-gapped environment\u003C\u002Fstrong>. The repository also supports cloud and remote paths, and no verified project evidence establishes a physically isolated security domain.\"},\"tunes\":{}},{\"id\":\"p-impl-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"The AI Hub separates agent\u002Fclient, provider, model and connection location. It supports local Ollama inference and local-provider Codex operation as distinct choices rather than assuming that every AI request goes to a cloud model.\"},\"tunes\":{}},{\"id\":\"p-impl-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"The repository explicitly notes that a local runtime can still use a cloud model, while Direct Ollama chat is local inference. This distinction is directly relevant to air-gap architecture: local execution does not prove that the model or surrounding dependencies are disconnected.\"},\"tunes\":{}},{\"id\":\"p-impl-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"Provider abstraction, local model discovery and local inference are therefore building blocks for an air-gap-capable product architecture, but the network boundary, offline dependency mirror, controlled transfer process and offline identity\u002Foperations must still be engineered separately.\"},\"tunes\":{}},{\"id\":\"impl-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Verified project capability\",\"Air-gap relevance\"],[\"Local Ollama inference\",\"Supports local model execution\"],[\"Local provider\u002Fruntime paths\",\"Reduces dependency on cloud inference\"],[\"Provider\u002Fmodel\u002Fruntime separation\",\"Makes cloud dependencies explicit rather than hidden\"],[\"Central permissions\",\"Supports local tool\u002Fdata access control\"],[\"Cloud\u002Fremote provider support also exists\",\"Proves the product itself is hybrid-capable, not inherently air-gapped\"],[\"No verified isolated deployment boundary\",\"Prevents overclaiming air-gap maturity\"]]},\"tunes\":{}},{\"id\":\"h-when\",\"type\":\"header\",\"data\":{\"text\":\"When is air-gapped AI justified?\",\"level\":2},\"tunes\":{}},{\"id\":\"when-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Air gap may be justified when\",\"A connected private architecture may be better when\"],[\"Security policy explicitly requires physically separated domains\",\"Main requirement is only that prompts\u002Fdata are not used by public consumer services\"],[\"Classified or extremely sensitive data cannot cross external networks\",\"Approved enterprise cloud\u002Fprivate endpoints satisfy data controls\"],[\"Operational environment has no reliable external connectivity\",\"Internet is available and operational agility matters\"],[\"Mission continuity must not depend on cloud\u002Fprovider availability\",\"Managed model quality and rapid upgrades are more valuable\"],[\"Regulated\u002Fcritical environment mandates controlled transfer\",\"Standard security controls can meet the actual threat model\"],[\"External SaaS\u002FAPI access is prohibited\",\"Business workflow relies heavily on external connectors\"]]},\"tunes\":{}},{\"id\":\"p-when-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapping should be a requirement derived from a threat model or policy, not a prestige feature. It has real security value when the eliminated connectivity path is itself unacceptable.\"},\"tunes\":{}},{\"id\":\"p-when-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"For many enterprise use cases, a tightly controlled private network with egress restrictions, local inference and approved update channels may provide a better balance of security and maintainability than a strict physical air gap.\"},\"tunes\":{}},{\"id\":\"h-design\",\"type\":\"header\",\"data\":{\"text\":\"A practical air-gapped AI design sequence\",\"level\":2},\"tunes\":{}},{\"id\":\"design-flow\",\"type\":\"processFlow\",\"data\":{\"title\":\"Design from the boundary inward\",\"orientation\":\"auto\",\"steps\":[{\"label\":\"1. Define what the air gap separates\",\"description\":\"Name the security domains and whether the requirement is strict physical separation or simply no internet.\"},{\"label\":\"2. Inventory every external dependency\",\"description\":\"Models, packages, registries, identity, telemetry, licensing, storage, APIs, DNS\u002Ftime and support services.\"},{\"label\":\"3. Select offline-capable models and runtimes\",\"description\":\"Verify model assets and runtime code can load without remote calls.\"},{\"label\":\"4. Build internal artifact repositories\",\"description\":\"Create trusted sources for containers, packages, models and updates.\"},{\"label\":\"5. Design controlled transfer\",\"description\":\"Define staging, verification, media\u002Fgateway handling, approval and provenance.\"},{\"label\":\"6. Build internal identity and authorization\",\"description\":\"Ensure users, services and tools can authenticate without cloud dependencies.\"},{\"label\":\"7. Keep RAG and tools local\",\"description\":\"Deploy knowledge, embeddings, indexes and required service APIs inside the enclave.\"},{\"label\":\"8. Build internal observability\",\"description\":\"Operate logs, metrics, traces and security monitoring locally.\"},{\"label\":\"9. Define patch\u002Fmodel update cadence\",\"description\":\"Balance vulnerability response with the controlled import process.\"},{\"label\":\"10. Test from a clean disconnected state\",\"description\":\"Cold-start and operate without inherited caches or hidden internet access.\"},{\"label\":\"11. Test compromise paths\",\"description\":\"Exercise removable-media, supply-chain, prompt-injection, insider and lateral-movement scenarios.\"},{\"label\":\"12. Document exceptions and exports\",\"description\":\"Every permitted cross-boundary path should have a named purpose, owner and control set.\"}]},\"tunes\":{}},{\"id\":\"h-checklist\",\"type\":\"header\",\"data\":{\"text\":\"Air-gapped AI architecture checklist\",\"level\":2},\"tunes\":{}},{\"id\":\"checklist-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Question\",\"Expected evidence\"],[\"What exactly is isolated from what?\",\"Documented security-domain boundary\"],[\"Is the boundary physically disconnected?\",\"Network\u002Fphysical architecture evidence if strict air gap is claimed\"],[\"How does data cross the boundary?\",\"Authorized non-automated\u002Fmanual or explicitly documented disconnected workflow\"],[\"Can every model cold-start offline?\",\"Offline loading test\"],[\"Are tokenizer\u002Fconfig\u002Fruntime assets complete?\",\"Verified internal model bundle\"],[\"Where do containers\u002Fpackages come from?\",\"Internal trusted mirror\u002Frepository\"],[\"Can identity work without cloud services?\",\"Internal IdP\u002FPKI\u002Fservice credential path\"],[\"Can RAG ingest\u002Fquery offline?\",\"Local ingestion, embeddings, index and retrieval\"],[\"Which agent tools remain available?\",\"Internal capability inventory\"],[\"How are patches imported?\",\"Controlled maintenance process\"],[\"How are artifacts verified?\",\"Integrity\u002Fprovenance\u002Fmalware\u002Fsupply-chain controls\"],[\"How is removable media governed?\",\"Media handling and sanitization policy\"],[\"Can the system run after caches are cleared?\",\"Clean-environment offline test\"],[\"Where are logs and traces stored?\",\"Internal observability platform\"],[\"How are exports approved?\",\"Controlled egress process\"],[\"What proves this is air-gapped rather than merely local?\",\"Boundary and transfer evidence, not model location\"]]},\"tunes\":{}},{\"id\":\"h-failures\",\"type\":\"header\",\"data\":{\"text\":\"Common air-gapped AI failure modes\",\"level\":2},\"tunes\":{}},{\"id\":\"failure-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Failure mode\",\"What actually failed\"],[\"Local model still downloads tokenizer\u002Fconfig at startup\",\"Model bundle was incomplete\"],[\"Container references public registry\",\"Deployment was not self-contained\"],[\"Cloud identity required for login\",\"Application was local but identity was not\"],[\"License server required externally\",\"Vendor dependency contradicted offline operation\"],[\"Embedding model missing\",\"Chat works but RAG ingestion fails\"],[\"Agent tool calls public SaaS\",\"Agent architecture was not air-gap compatible\"],[\"Only GPU node is isolated\",\"Database, UI or monitoring still depends on external services\"],[\"USB imports are informal\",\"Transfer boundary becomes uncontrolled attack path\"],[\"No patch process\",\"Isolation creates growing vulnerability debt\"],[\"Cached developer machine used as proof\",\"Fresh deployment fails without internet\"],[\"Air gap replaces authorization thinking\",\"Internal users\u002Fservices become overprivileged\"],[\"Air-gapped label used for firewall-only egress block\",\"Security documentation overstates the actual boundary\"]]},\"tunes\":{}},{\"id\":\"h-misconceptions\",\"type\":\"header\",\"data\":{\"text\":\"Common misconceptions\",\"level\":2},\"tunes\":{}},{\"id\":\"misconceptions-table\",\"type\":\"table\",\"data\":{\"withHeadings\":true,\"stretched\":false,\"content\":[[\"Misconception\",\"Correction\"],[\"“Local AI is air-gapped AI.”\",\"Local describes where inference runs; air gap describes the security\u002Fnetwork boundary.\"],[\"“Air-gapped means one standalone PC.”\",\"An isolated enclave can contain an entire internal network or cluster.\"],[\"“No internet equals strict air gap.”\",\"Under NIST's definition, the separated systems also lack physical connection and cross-boundary transfer is non-automated.\"],[\"“Air gaps eliminate cyber risk.”\",\"Supply-chain, removable-media, insider, internal-network and application risks remain.\"],[\"“RAG needs the cloud.”\",\"RAG can run entirely with local models, indexes and data.\"],[\"“Agents cannot work offline.”\",\"Agents can use internal\u002Flocal tools; they simply cannot reach unavailable external services.\"],[\"“Once installed, the system needs no updates.”\",\"Patches, drivers, models and dependencies still require lifecycle management.\"],[\"“A downloaded model is self-contained.”\",\"Tokenizers, remote code, libraries or model assets may still trigger network dependencies.\"],[\"“Private AI and air-gapped AI are identical.”\",\"Private AI is a data\u002Fcontrol property; air gap is a connectivity property.\"],[\"“Air gap guarantees sovereignty.”\",\"External hardware, licenses, models and supply chain can remain dependencies.\"]]},\"tunes\":{}},{\"id\":\"h-limitations\",\"type\":\"header\",\"data\":{\"text\":\"Limitations\",\"level\":2},\"tunes\":{}},{\"id\":\"p-limit-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Strict air gaps make external knowledge freshness slower because every new source must pass through a transfer process.\"},\"tunes\":{}},{\"id\":\"p-limit-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"They can constrain model choice when licenses, remote-code requirements, hardware needs or provider-only APIs cannot be satisfied offline.\"},\"tunes\":{}},{\"id\":\"p-limit-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"They increase operational cost because infrastructure normally consumed as cloud services must be owned and maintained internally.\"},\"tunes\":{}},{\"id\":\"p-limit-4\",\"type\":\"paragraph\",\"data\":{\"text\":\"They can also create patch latency: stronger change control may keep systems stable while delaying urgent vulnerability remediation.\"},\"tunes\":{}},{\"id\":\"p-limit-5\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapped AI should therefore be evaluated as one security architecture among several, not assumed to be universally superior.\"},\"tunes\":{}},{\"id\":\"h-change\",\"type\":\"header\",\"data\":{\"text\":\"What would change this answer?\",\"level\":2},\"tunes\":{}},{\"id\":\"p-change-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Vendor support for disconnected operation changes quickly. New model formats, signed OCI artifacts, offline license mechanisms and integrated model registries can reduce operational friction.\"},\"tunes\":{}},{\"id\":\"p-change-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"The distinction between strict air gap and disconnected deployment will remain important even if vendors continue using the terms loosely.\"},\"tunes\":{}},{\"id\":\"p-change-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The stable principle is that genuine air-gap claims depend on the system boundary and transfer mechanism, not on whether the LLM happens to run locally.\"},\"tunes\":{}},{\"id\":\"h-related\",\"type\":\"header\",\"data\":{\"text\":\"Related canonical knowledge\",\"level\":2},\"tunes\":{}},{\"id\":\"p-related-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-Gapped AI is a deployment\u002Fsecurity architecture node. Private AI, Sovereign AI and provider abstraction answer different questions about confidentiality, control and dependency.\"},\"tunes\":{}},{\"id\":\"p-related-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"MLOps\u002FLLMOps becomes more demanding inside a disconnected environment because model, package and update lifecycles must operate through internal repositories and controlled transfer.\"},\"tunes\":{}},{\"id\":\"p-related-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"RAG and Agentic AI remain valid patterns inside the enclave as long as their data and tools are internally available.\"},\"tunes\":{}},{\"id\":\"ref-memory\",\"type\":\"referralArticle\",\"data\":{\"url\":\"https:\u002F\u002Fstajic.de\u002Fblog\u002Fai-agent-memory-is-not-rag-how-to-separate-memory-retrieval-state-and-context\",\"title\":\"AI Agent Memory Is Not RAG: How to Separate Memory, Retrieval, State and Context\",\"excerpt\":\"Air-gapped AI still needs correct internal boundaries between durable memory, authoritative state, retrieval and model context.\",\"ctaLabel\":\"Read the memory architecture article\"},\"tunes\":{}},{\"id\":\"h-faq\",\"type\":\"header\",\"data\":{\"text\":\"Frequently asked questions\",\"level\":2},\"tunes\":{}},{\"id\":\"faq\",\"type\":\"faq\",\"data\":{\"title\":\"Air-gapped AI FAQ\",\"items\":[{\"id\":\"faq1\",\"question\":\"What is air-gapped AI?\",\"answer\":\"Air-gapped AI is AI deployed inside a security domain physically disconnected from the external systems it is separated from, with cross-boundary transfer performed through controlled non-automated procedures under the strict NIST definition.\"},{\"id\":\"faq2\",\"question\":\"Does air-gapped AI need internet access?\",\"answer\":\"No for normal inference and operation. Required models, packages, data and services must be available inside the isolated environment.\"},{\"id\":\"faq3\",\"question\":\"Is a local LLM automatically air-gapped?\",\"answer\":\"No. A local model can run on a machine that still has internet access or uses cloud identity, tools or storage. Air gap describes the complete system boundary.\"},{\"id\":\"faq4\",\"question\":\"Can RAG work in an air-gapped network?\",\"answer\":\"Yes. Documents, embedding models, vector or lexical indexes, rerankers and generation models can all run locally. External knowledge must be imported through the controlled boundary.\"},{\"id\":\"faq5\",\"question\":\"Can AI agents work air-gapped?\",\"answer\":\"Yes, if their tools and required systems are available inside the isolated network. Public SaaS and cloud APIs are unavailable without a permitted cross-boundary mechanism.\"},{\"id\":\"faq6\",\"question\":\"How are models updated in an air-gapped environment?\",\"answer\":\"Models are typically acquired and validated in a connected staging environment, transferred through an approved process and published to an internal model\u002Fartifact repository.\"},{\"id\":\"faq7\",\"question\":\"Is on-premises AI the same as air-gapped AI?\",\"answer\":\"No. On-premises describes infrastructure location. On-prem systems can remain internet-connected.\"},{\"id\":\"faq8\",\"question\":\"Is private AI the same as air-gapped AI?\",\"answer\":\"No. Private AI is about data\u002Fcontrol requirements and can still use connected infrastructure. Air gap specifically describes network\u002Fdomain separation.\"},{\"id\":\"faq9\",\"question\":\"Does an air gap make AI secure?\",\"answer\":\"It removes or reduces some remote connectivity risks but does not remove supply-chain, removable-media, insider, internal authorization, physical or model-behavior risks.\"},{\"id\":\"faq10\",\"question\":\"What is the best test for air-gap readiness?\",\"answer\":\"Deploy or cold-start the full stack in a clean environment with all external connectivity unavailable and verify that models, identity, RAG, tools, monitoring, updates and recovery depend only on approved internal artifacts and services.\"}]},\"tunes\":{}},{\"id\":\"h-glossary\",\"type\":\"header\",\"data\":{\"text\":\"Glossary\",\"level\":2},\"tunes\":{}},{\"id\":\"glossary\",\"type\":\"glossary\",\"data\":{\"title\":\"Key air-gapped AI terms\",\"entries\":[{\"term\":\"Air gap\",\"definition\":\"Security-domain interface where systems are not physically connected and any cross-boundary logical transfer is non-automated\u002Fmanual under the NIST glossary definition.\",\"anchor\":\"air-gap\"},{\"term\":\"Air-gapped AI\",\"definition\":\"AI system deployed inside an air-gapped security domain with locally available inference and operational dependencies.\",\"anchor\":\"air-gapped-ai\"},{\"term\":\"Disconnected environment\",\"definition\":\"Deployment environment without direct outside-internet access; implementations may use controlled mirror or bastion workflows.\",\"anchor\":\"disconnected-environment\"},{\"term\":\"Offline-capable AI\",\"definition\":\"AI application able to operate for some or all functions without internet connectivity, without necessarily being permanently isolated.\",\"anchor\":\"offline-capable-ai\"},{\"term\":\"Local AI\",\"definition\":\"AI inference or runtime executing on local hardware rather than a remote model endpoint; does not imply network isolation.\",\"anchor\":\"local-ai\"},{\"term\":\"Mirror registry\",\"definition\":\"Internal repository containing approved copies of container images or other artifacts needed by a disconnected deployment.\",\"anchor\":\"mirror-registry\"},{\"term\":\"Staging environment\",\"definition\":\"Connected or controlled zone where artifacts are acquired, verified and prepared before transfer into an isolated domain.\",\"anchor\":\"staging-environment\"},{\"term\":\"Controlled transfer\",\"definition\":\"Governed movement of data or software across the isolation boundary using approved media\u002Fprocesses and verification.\",\"anchor\":\"controlled-transfer\"},{\"term\":\"Artifact provenance\",\"definition\":\"Information showing where a model, package, container or other imported artifact originated and how it was produced or verified.\",\"anchor\":\"artifact-provenance\"},{\"term\":\"Removable media\",\"definition\":\"Portable storage used to transfer data between systems; a potential security path across disconnected domains.\",\"anchor\":\"removable-media\"},{\"term\":\"Internal model store\",\"definition\":\"Repository inside the isolated environment from which approved model artifacts are served or deployed.\",\"anchor\":\"internal-model-store\"},{\"term\":\"Air-gap readiness\",\"definition\":\"Demonstrated ability of the complete AI stack to install, start, operate, update and recover without unapproved external connectivity.\",\"anchor\":\"air-gap-readiness\"}]},\"tunes\":{}},{\"id\":\"h-conclusion\",\"type\":\"header\",\"data\":{\"text\":\"Conclusion\",\"level\":2},\"tunes\":{}},{\"id\":\"p-conclusion-1\",\"type\":\"paragraph\",\"data\":{\"text\":\"Air-gapped AI is not a special kind of model. It is an AI architecture operating inside a deliberately isolated security domain.\"},\"tunes\":{}},{\"id\":\"p-conclusion-2\",\"type\":\"paragraph\",\"data\":{\"text\":\"The model can be the easy part. Production readiness depends on whether every surrounding dependency — model assets, packages, registries, identity, RAG, tools, monitoring, updates and recovery — can function without an automated external path.\"},\"tunes\":{}},{\"id\":\"p-conclusion-3\",\"type\":\"paragraph\",\"data\":{\"text\":\"The shortest reliable rule is: local inference proves where the model runs; air-gap evidence proves how the complete system is separated and how every permitted transfer crosses that boundary.\"},\"tunes\":{}},{\"id\":\"h-sources\",\"type\":\"header\",\"data\":{\"text\":\"Primary sources and current implementation references\",\"level\":2},\"tunes\":{}},{\"id\":\"p-sources-note\",\"type\":\"paragraph\",\"data\":{\"text\":\"The sources below establish the security definition, current disconnected AI deployment patterns and lifecycle risks. Vendor use of “air-gapped” is intentionally distinguished from the stricter NIST definition.\"},\"tunes\":{}},{\"id\":\"src-nist-airgap\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fcsrc.nist.gov\u002Fglossary\u002Fterm\u002Fair_gap\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"NIST CSRC — Air gap\",\"description\":\"NIST glossary definition: physically disconnected systems with non-automated, manually controlled logical transfer across the boundary.\"}},\"tunes\":{}},{\"id\":\"src-nvidia-airgap\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fdocs.nvidia.com\u002Fnim\u002Flarge-language-models\u002Flatest\u002Fdeploy-air-gap.html\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"NVIDIA NIM — Air-Gap Deployment\",\"description\":\"Current operational guidance for staging model assets on a connected system and running NIM from local storage without internet, public registries or cloud API keys.\"}},\"tunes\":{}},{\"id\":\"src-redhat-disconnected\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fdocs.redhat.com\u002Fen\u002Fdocumentation\u002Fred_hat_ai_inference\u002F3.5\u002Fhtml\u002Fdeploy_the_standalone_red_hat_ai_inference_container_in_a_disconnected_environment\u002Findex\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"Red Hat AI Inference — Disconnected deployment\",\"description\":\"Current Red Hat guidance for serving LLMs in disconnected environments with mirrored artifacts and internal infrastructure.\"}},\"tunes\":{}},{\"id\":\"src-redhat-models\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fdocs.redhat.com\u002Fen\u002Fdocumentation\u002Fred_hat_ai_inference\u002F3.5\u002Fhtml\u002Fdeploy_the_standalone_red_hat_ai_inference_container_in_a_disconnected_environment\u002Fstoring-models-in-disconnected-environments_disconnected-deploy\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"Red Hat AI Inference — Storing models in disconnected environments\",\"description\":\"Current guidance covering OCI model images, persistent model storage and limitations of models requiring remote code.\"}},\"tunes\":{}},{\"id\":\"src-nsa-framework\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fwww.nsa.gov\u002Fportals\u002F75\u002Fdocuments\u002Fwhat-we-do\u002Fcybersecurity\u002Fprofessional-resources\u002Fctr-nsa-css-technical-cyber-threat-framework.pdf\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"NSA — Technical Cyber Threat Framework\",\"description\":\"Threat framework explicitly identifying removable-media replication as a path into disconnected or air-gapped networks.\"}},\"tunes\":{}},{\"id\":\"src-nist-media\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fwww.nist.gov\u002Fpublications\u002Fguidelines-media-sanitization\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"NIST SP 800-88 Rev. 1 — Guidelines for Media Sanitization\",\"description\":\"Guidance for managing and sanitizing storage media according to information confidentiality requirements.\"}},\"tunes\":{}},{\"id\":\"src-nist-patch\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F40\u002Fr4\u002Ffinal\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"NIST SP 800-40 Rev. 4 — Enterprise Patch Management Planning\",\"description\":\"Guidance framing patching and updates as preventive maintenance across enterprise systems.\"}},\"tunes\":{}},{\"id\":\"src-nist-supply\",\"type\":\"linkTool\",\"data\":{\"link\":\"https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fexecutive-order-14028-improving-nations-cybersecurity\u002Fsoftware-security-supply-chains\",\"meta\":{\"image\":{\"url\":\"\"},\"title\":\"NIST — Software Security in Supply Chains\",\"description\":\"NIST guidance covering software supply-chain risk, provenance, verification, SBOM-related practices and vulnerability management.\"}},\"tunes\":{}}],\"version\":\"2.31.6\"}",{"time":1728,"blocks":1729,"version":2970},1791495428517,[1730,1734,1739,1744,1749,1754,1758,1762,1766,1770,1774,1778,1782,1786,1790,1794,1823,1827,1831,1835,1839,1843,1878,1882,1886,1890,1915,1920,1924,1960,1964,1968,1972,1976,1980,1984,1988,1992,1996,2000,2004,2008,2012,2016,2020,2055,2059,2063,2067,2071,2075,2079,2083,2087,2091,2098,2102,2106,2110,2114,2118,2122,2126,2130,2134,2138,2142,2146,2150,2154,2158,2162,2166,2170,2174,2178,2182,2186,2190,2194,2198,2227,2231,2235,2239,2243,2247,2251,2255,2259,2263,2267,2271,2275,2279,2284,2320,2324,2328,2332,2336,2340,2383,2387,2391,2395,2399,2403,2445,2449,2453,2457,2461,2465,2469,2473,2477,2481,2486,2490,2494,2498,2523,2527,2552,2556,2560,2564,2605,2609,2664,2668,2711,2715,2752,2756,2760,2764,2768,2772,2776,2780,2784,2788,2792,2796,2800,2804,2808,2815,2819,2853,2857,2893,2897,2901,2905,2909,2913,2917,2923,2929,2935,2942,2949,2956,2963],{"id":215,"data":1731,"type":218,"tunes":1733},{"text":1732},"Air-gapped AI is an AI system deployed inside a security domain that has no physical network connection to the external systems it is separated from, with any transfer across that boundary performed through deliberately controlled, non-automated procedures. The AI model, runtime, data, retrieval indexes, tools and operational dependencies required for inference must therefore be available inside the isolated environment. Air-gapped AI is not simply “a local model” or “an on-premise server”: the defining property is the network and transfer boundary around the complete system.",{},{"id":221,"data":1735,"type":226,"tunes":1738},{"body":1736,"title":1737,"variant":225},"An air-gapped AI system can run LLM inference, RAG, document analysis and even agentic workflows without internet or cloud APIs if every required dependency is available inside the isolated domain.\u003Cbr>\u003Cbr>A practical architecture is:\u003Cbr>\u003Cstrong>controlled import → internal artifact\u002Fmodel repositories → local AI runtime → local data\u002FRAG → local tools → internal users\u002Fservices → local monitoring\u002Faudit\u003C\u002Fstrong>.\u003Cbr>\u003Cbr>The difficult part is not making one LLM answer offline. It is operating the whole AI lifecycle — updates, models, drivers, packages, data imports, credentials, logging and security — without silently depending on external services.","Direct answer",{},{"id":229,"data":1740,"type":226,"tunes":1743},{"body":1741,"title":1742,"variant":233},"NIST's cybersecurity glossary defines an air gap as an interface where two systems are \u003Cstrong>not physically connected\u003C\u002Fstrong> and where any logical transfer is \u003Cstrong>not automated\u003C\u002Fstrong>; data crosses only manually under human control. Vendor documentation sometimes uses “air-gapped” or “disconnected” more broadly for environments with no outside-internet connection but with internal networking and controlled staging infrastructure. Architecture documentation should state which meaning is actually implemented.","Air gap has a stricter meaning than “no internet”",{},{"id":236,"data":1745,"type":226,"tunes":1748},{"body":1746,"title":1747,"variant":233},"Removing direct network connectivity eliminates many remote paths, but it does not eliminate malicious removable media, compromised software\u002Fmodel imports, insider threats, vulnerable internal services, physical compromise, prompt injection through imported documents or lateral movement inside the isolated network.","Air-gapped does not mean secure by definition",{},{"id":242,"data":1750,"type":226,"tunes":1753},{"body":1751,"title":1752,"variant":246},"Current NVIDIA NIM and Red Hat AI Inference documentation both support LLM serving without outside-internet access by pre-staging model and container assets. NVIDIA documents a connected preparation phase followed by an isolated execution phase with local assets and no cloud registry credentials. Red Hat uses mirrored container\u002Fmodel repositories for disconnected OpenShift environments. These are useful implementation examples, but they do not override the stricter NIST definition of an air gap.","Current-source note — 8 October 2026",{},{"id":249,"data":1755,"type":254,"tunes":1757},{"title":1756,"maxLevel":252,"minLevel":253},"Contents",{},{"id":257,"data":1759,"type":42,"tunes":1761},{"text":1760,"level":253},"What air-gapped AI really means",{},{"id":262,"data":1763,"type":218,"tunes":1765},{"text":1764},"The word AI does not change the basic security concept. An air gap is a boundary between security domains. AI simply makes the isolated side more operationally demanding because modern AI stacks normally assume downloadable models, package registries, telemetry, APIs, model hubs and frequent software updates.",{},{"id":267,"data":1767,"type":218,"tunes":1769},{"text":1768},"The isolated environment can still contain many connected machines. An internal cluster may have GPUs, application servers, storage, databases, identity services and monitoring connected to each other. The air gap exists between that enclave and the outside domain.",{},{"id":272,"data":1771,"type":218,"tunes":1773},{"text":1772},"The relevant question is therefore not “Does this GPU have Wi-Fi?” but “Can this AI environment exchange information with the external domain through an automated physical or logical path?”",{},{"id":277,"data":1775,"type":42,"tunes":1777},{"text":1776,"level":253},"The simplest example",{},{"id":282,"data":1779,"type":218,"tunes":1781},{"text":1780},"Imagine a company wants an internal assistant for confidential technical documents, but the environment is not permitted to send those documents to the internet.",{},{"id":287,"data":1783,"type":218,"tunes":1785},{"text":1784},"The company downloads an approved LLM, embedding model, container images and software packages in a connected staging environment. After validation, approved artifacts are transferred into the isolated environment.",{},{"id":292,"data":1787,"type":218,"tunes":1789},{"text":1788},"Inside the enclave, the model server, document parser, vector database, application and identity services run locally. Users can ask questions and use RAG against internal documents without a cloud model or public model registry.",{},{"id":297,"data":1791,"type":218,"tunes":1793},{"text":1792},"When an update is required, the update passes through the controlled import process again rather than being downloaded directly by the production AI server.",{},{"id":302,"data":1795,"type":331,"tunes":1822},{"steps":1796,"title":1821,"orientation":330},[1797,1800,1803,1806,1809,1812,1815,1818],{"label":1798,"description":1799},"1. Acquire outside the enclave","Download approved models, packages, containers, drivers, signatures and documentation in a connected staging environment.",{"label":1801,"description":1802},"2. Verify before transfer","Check provenance, signatures\u002Fchecksums, malware status, licensing and compatibility according to organizational policy.",{"label":1804,"description":1805},"3. Transfer through controlled boundary","Move approved artifacts using the authorized manual or mediated process.",{"label":1807,"description":1808},"4. Publish internally","Place artifacts in internal model, container, package or file repositories.",{"label":1810,"description":1811},"5. Deploy locally","Run inference, RAG, applications and tools without external dependencies.",{"label":1813,"description":1814},"6. Monitor inside the enclave","Collect logs, metrics, model\u002Fruntime status and security events locally.",{"label":1816,"description":1817},"7. Export only approved evidence","Move selected reports or artifacts outward through the reverse controlled process where policy permits.",{"label":1819,"description":1820},"8. Repeat for updates","Treat new models, patches, corpora and dependencies as new supply-chain imports.","A basic air-gapped AI operating cycle",{},{"id":334,"data":1824,"type":42,"tunes":1826},{"text":1825,"level":253},"Where the simple example stops",{},{"id":339,"data":1828,"type":218,"tunes":1830},{"text":1829},"A production air-gapped environment can be much larger than one workstation. It may include Kubernetes\u002FOpenShift, internal registries, object storage, identity providers, vector databases, observability, backup infrastructure and several model-serving nodes.",{},{"id":344,"data":1832,"type":218,"tunes":1834},{"text":1833},"The more services exist inside the enclave, the more the organization must reproduce capabilities that connected environments normally consume from the internet.",{},{"id":349,"data":1836,"type":218,"tunes":1838},{"text":1837},"Air-gapping therefore shifts complexity. It reduces direct external connectivity but increases artifact-management, patching, dependency, supply-chain and operational responsibility inside the isolated domain.",{},{"id":354,"data":1840,"type":42,"tunes":1842},{"text":1841,"level":253},"Air-gapped vs offline vs local vs on-premises vs private vs sovereign AI",{},{"id":359,"data":1844,"type":394,"tunes":1877},{"content":1845,"stretched":43,"withHeadings":14},[1846,1850,1854,1858,1862,1866,1870,1873],[1847,1848,1849],"Term","What it primarily describes","Internet\u002Fexternal connectivity required?",[1851,1852,1853],"Local AI","Inference\u002Fruntime runs on local hardware","No; but it may still call cloud services",[1855,1856,1857],"Offline-capable AI","Can continue operating without internet","No during offline operation; reconnection may be normal",[1859,1860,1861],"Disconnected environment","No direct external-internet path from deployment environment","Usually no; may use controlled mirrors\u002Fbastions",[1863,1864,1865],"On-premises AI","Infrastructure runs in an organization's own\u002Fon-prem environment","Could still have full internet connectivity",[1867,1868,1869],"Private AI","AI processing is controlled to meet privacy\u002Fconfidentiality requirements","Architecture-specific; can be connected or disconnected",[1541,1871,1872],"Security domains are physically disconnected and cross-boundary transfer is non-automated\u002Fmanual under strict definition","No automated external path",[1874,1875,1876],"Sovereign AI","Control\u002Fjurisdiction over models, data, infrastructure and dependencies","Not necessarily; sovereignty is broader than network isolation",{},{"id":397,"data":1879,"type":218,"tunes":1881},{"text":1880},"These terms can overlap but are not synonyms. A local Ollama server connected to the internet is local AI, not air-gapped AI. An on-premises RAG platform that calls a cloud model is on-premises application infrastructure with cloud inference, not air-gapped AI.",{},{"id":402,"data":1883,"type":218,"tunes":1885},{"text":1884},"An air-gapped system is often private by design because data remains inside the enclave, but privacy also depends on authorization, logging, data handling, physical security and operational policy.",{},{"id":407,"data":1887,"type":42,"tunes":1889},{"text":1888,"level":253},"Strict air gap vs practical disconnected deployment",{},{"id":412,"data":1891,"type":444,"tunes":1914},{"rows":1892,"title":1908,"layout":394,"columns":1909},[1893,1896,1899,1902,1905],{"id":416,"label":1894,"values":1895},"External physical connection",{"strict":419,"disconnected":419},{"id":421,"label":1897,"values":1898},"Cross-boundary transfer",{"strict":419,"disconnected":419},{"id":425,"label":1900,"values":1901},"Internet access from AI workload",{"strict":419,"disconnected":419},{"id":429,"label":1903,"values":1904},"Internal networking",{"strict":419,"disconnected":419},{"id":433,"label":1906,"values":1907},"Use term when",{"strict":419,"disconnected":419},"Two meanings frequently called “air-gapped”",[1910,1912],{"id":439,"label":1911},"Strict air gap",{"id":442,"label":1913},"Disconnected \u002F no-internet deployment",{},{"id":447,"data":1916,"type":226,"tunes":1919},{"body":1917,"title":1918,"variant":451},"For architecture and security reviews, write the actual rule: \u003Cstrong>no outbound internet\u003C\u002Fstrong>, \u003Cstrong>no physical external network path\u003C\u002Fstrong>, \u003Cstrong>manual transfer only\u003C\u002Fstrong>, or \u003Cstrong>disconnected cluster with approved bastion\u002Fmirror\u003C\u002Fstrong>. That is more precise than saying only “air-gapped.”","Document the boundary instead of relying on the label",{},{"id":454,"data":1921,"type":42,"tunes":1923},{"text":1922,"level":253},"A practical air-gapped AI architecture",{},{"id":459,"data":1925,"type":394,"tunes":1959},{"content":1926,"stretched":43,"withHeadings":14},[1927,1930,1933,1936,1938,1941,1944,1947,1950,1953,1956],[1928,1929],"Layer","What must exist inside the isolated environment",[1931,1932],"User\u002Fapplication layer","Chat UI, APIs, business application or internal agent interface",[1934,1935],"Identity & authorization","Local\u002Finternal authentication, RBAC, tenant\u002Fresource permissions",[472,1937],"Model routing, request policy, context assembly and runtime controls",[1939,1940],"Model serving","Local model server(s), weights, tokenizer\u002Fconfig and accelerator runtime",[1942,1943],"RAG \u002F knowledge","Document store, parser, embeddings, vector\u002Flexical indexes, metadata and provenance",[1945,1946],"Tools\u002Fservices","Only internal\u002Flocal APIs and approved systems reachable from the enclave",[1948,1949],"Artifact repositories","Local container registry, package mirror, model store and optionally OS\u002Fupdate repositories",[1951,1952],"Observability","Internal logs, metrics, traces and audit records",[1954,1955],"Backup\u002Frecovery","Local or separately controlled backup process appropriate to the security domain",[1957,1958],"Transfer boundary","Controlled import\u002Fexport process with inspection and approval",{},{"id":497,"data":1961,"type":218,"tunes":1963},{"text":1962},"A complete architecture should be able to start and operate without DNS lookups, license checks, package downloads or API calls to public services unless those dependencies have approved internal replacements.",{},{"id":502,"data":1965,"type":218,"tunes":1967},{"text":1966},"A useful design test is to disconnect the deployment from every external service and cold-start the stack. Hidden dependencies tend to appear during startup, model loading, authentication, package resolution or telemetry initialization.",{},{"id":507,"data":1969,"type":42,"tunes":1971},{"text":1970,"level":253},"Models must be pre-staged",{},{"id":512,"data":1973,"type":218,"tunes":1975},{"text":1974},"Cloud model APIs are unavailable by definition if the isolated workload has no path to them. The enclave therefore needs locally runnable model artifacts or an internally hosted inference service.",{},{"id":517,"data":1977,"type":218,"tunes":1979},{"text":1978},"NVIDIA's current NIM air-gap documentation explicitly uses a two-phase pattern: download and prepare model assets on a connected machine, transfer them, then run the isolated NIM from local storage without outbound registry access or cloud API keys.",{},{"id":522,"data":1981,"type":218,"tunes":1983},{"text":1982},"Model weights are only part of the dependency set. Tokenizers, configuration files, adapters, quantization metadata and any required runtime code must also be present.",{},{"id":527,"data":1985,"type":42,"tunes":1987},{"text":1986,"level":253},"Models with remote-code dependencies are an air-gap hazard",{},{"id":532,"data":1989,"type":218,"tunes":1991},{"text":1990},"Some model repositories contain custom Python code or runtime hooks that normally fetch additional code or assets.",{},{"id":537,"data":1993,"type":218,"tunes":1995},{"text":1994},"Current Red Hat AI Inference documentation explicitly warns that some Hugging Face models requiring remote code cannot operate normally in disconnected environments because the library attempts network access even when offline mode is configured.",{},{"id":542,"data":1997,"type":218,"tunes":1999},{"text":1998},"The practical lesson is to test a model's entire loading path offline before approving it for an isolated deployment. “I downloaded the weights” is not proof that the model is self-contained.",{},{"id":547,"data":2001,"type":42,"tunes":2003},{"text":2002,"level":253},"Containers, packages and drivers become local supply-chain artifacts",{},{"id":552,"data":2005,"type":218,"tunes":2007},{"text":2006},"Connected environments routinely pull container images, Python packages, OS updates and GPU components from public registries. An air-gapped environment cannot assume any of those services.",{},{"id":557,"data":2009,"type":218,"tunes":2011},{"text":2010},"Red Hat's disconnected AI deployment model uses internal mirror registries for container images and operator catalogs. Models can be mirrored as OCI artifacts or transferred to persistent storage.",{},{"id":562,"data":2013,"type":218,"tunes":2015},{"text":2014},"For broader stacks, the same pattern often applies to language packages, Linux repositories, JavaScript packages and internal binaries: approved artifacts enter once through the transfer process and are then served from trusted internal repositories.",{},{"id":567,"data":2017,"type":42,"tunes":2019},{"text":2018,"level":253},"Know the complete dependency bill",{},{"id":572,"data":2021,"type":394,"tunes":2054},{"content":2022,"stretched":43,"withHeadings":14},[2023,2026,2029,2031,2033,2036,2039,2042,2045,2048,2051],[2024,2025],"Dependency class","Examples",[2027,2028],"Model artifacts","Weights, tokenizer, config, adapters, quantization metadata",[582,2030],"vLLM, llama.cpp, Ollama, NIM or other serving runtime",[585,2032],"Drivers, CUDA\u002FROCm libraries, container runtime",[2034,2035],"Application packages","Python wheels, npm packages, system libraries",[2037,2038],"Containers","Application, inference, DB, vector DB, monitoring images",[2040,2041],"RAG models","Embedding model, reranker, OCR\u002Fvision models",[2043,2044],"Data","Knowledge corpus, metadata, schemas, evaluation datasets",[2046,2047],"Security material","Certificates, CA bundles, policy\u002Fconfiguration, malware signatures where applicable",[2049,2050],"Operational artifacts","Dashboards, alert rules, backup tools, runbooks",[2052,2053],"Licensing","Offline-compatible licenses\u002Fentitlements where required",{},{"id":610,"data":2056,"type":42,"tunes":2058},{"text":2057,"level":253},"Internal mirrors are infrastructure, not a convenience",{},{"id":615,"data":2060,"type":218,"tunes":2062},{"text":2061},"A disconnected deployment becomes maintainable when the isolated domain has known internal sources for approved artifacts.",{},{"id":620,"data":2064,"type":218,"tunes":2066},{"text":2065},"Red Hat's documented approach uses a mirror registry available to the disconnected cluster so workloads do not need public registries.",{},{"id":625,"data":2068,"type":218,"tunes":2070},{"text":2069},"The same architectural idea can be applied to model stores and package repositories. The objective is to make artifact origin, version and approval explicit rather than copy random files manually to each server.",{},{"id":630,"data":2072,"type":42,"tunes":2074},{"text":2073,"level":253},"RAG can work fully air-gapped",{},{"id":635,"data":2076,"type":218,"tunes":2078},{"text":2077},"RAG does not require the public internet. It requires a retrievable corpus, an ingestion\u002Findexing pipeline and a model that can use the retrieved context.",{},{"id":640,"data":2080,"type":218,"tunes":2082},{"text":2081},"Inside an air-gapped environment, the document store, parser\u002FOCR, embedding model, vector or lexical index, reranker and generation model can all run locally.",{},{"id":645,"data":2084,"type":218,"tunes":2086},{"text":2085},"What changes is source acquisition. Live web search and cloud document connectors are unavailable unless equivalent data is imported through the controlled boundary.",{},{"id":650,"data":2088,"type":218,"tunes":2090},{"text":2089},"The corpus therefore becomes a governed artifact. Every import should preserve source identity, date\u002Fversion and provenance so users know what knowledge the isolated system actually contains.",{},{"id":655,"data":2092,"type":661,"tunes":2097},{"url":2093,"title":2094,"excerpt":2095,"ctaLabel":2096},"https:\u002F\u002Fstajic.de\u002Fblog\u002Fwhat-is-rag-the-simplest-explanation-of-how-it-works","What Is RAG? The Simplest Explanation of How It Works","RAG itself is independent of cloud hosting. In an air-gapped architecture, retrieval and generation simply have to be supplied by local\u002Finternal components.","Read the RAG foundation",{},{"id":664,"data":2099,"type":42,"tunes":2101},{"text":2100,"level":253},"Agents can run air-gapped — but only with reachable tools",{},{"id":669,"data":2103,"type":218,"tunes":2105},{"text":2104},"An agent loop can run entirely inside an isolated enclave if the model\u002Fruntime and required tools are local or reachable on the internal network.",{},{"id":674,"data":2107,"type":218,"tunes":2109},{"text":2108},"A tool that depends on GitHub, public web search, cloud email or an external SaaS API will fail unless the architecture provides an approved internal equivalent or controlled asynchronous exchange process.",{},{"id":679,"data":2111,"type":218,"tunes":2113},{"text":2112},"This is why air-gapped agent design should begin with a capability inventory: every tool endpoint must be classified as internal, imported, unavailable or deliberately excluded.",{},{"id":684,"data":2115,"type":42,"tunes":2117},{"text":2116,"level":253},"MCP does not bypass the air gap",{},{"id":689,"data":2119,"type":218,"tunes":2121},{"text":2120},"MCP can expose local tools and resources inside an isolated AI environment, but the protocol does not create connectivity through the security boundary.",{},{"id":694,"data":2123,"type":218,"tunes":2125},{"text":2124},"A local MCP server that reads internal documents can work perfectly offline. A remote MCP server on the public internet cannot be reached from a strict air-gapped enclave.",{},{"id":699,"data":2127,"type":218,"tunes":2129},{"text":2128},"The same principle applies to any connector protocol: interoperability is separate from network authority.",{},{"id":704,"data":2131,"type":42,"tunes":2133},{"text":2132,"level":253},"Identity and authentication must also work offline",{},{"id":709,"data":2135,"type":218,"tunes":2137},{"text":2136},"An AI application can be locally hosted while still depending on a cloud identity provider. That hidden dependency breaks truly disconnected operation.",{},{"id":714,"data":2139,"type":218,"tunes":2141},{"text":2140},"Air-gapped designs therefore need an identity architecture that functions inside the enclave: local directory, internal identity provider, internal PKI, local service credentials or another approved mechanism.",{},{"id":719,"data":2143,"type":218,"tunes":2145},{"text":2144},"Authorization remains necessary even though the internet is absent. Air gaps do not replace RBAC, tenant isolation or least privilege.",{},{"id":724,"data":2147,"type":42,"tunes":2149},{"text":2148,"level":253},"Time, certificates and trust stores become local dependencies",{},{"id":729,"data":2151,"type":218,"tunes":2153},{"text":2152},"Many authentication and logging systems depend on reliable time. Certificates expire. Trust stores change. Signed artifacts need validation.",{},{"id":734,"data":2155,"type":218,"tunes":2157},{"text":2156},"A disconnected enclave should therefore have internal time synchronization and a certificate\u002Ftrust lifecycle that does not depend on reaching public services during ordinary operation.",{},{"id":739,"data":2159,"type":218,"tunes":2161},{"text":2160},"These are ordinary infrastructure concerns that become visible only when an architecture is tested without internet access.",{},{"id":744,"data":2163,"type":42,"tunes":2165},{"text":2164,"level":253},"Telemetry and crash reporting need explicit policy",{},{"id":749,"data":2167,"type":218,"tunes":2169},{"text":2168},"Many modern libraries attempt analytics, update checks or error reporting by default.",{},{"id":754,"data":2171,"type":218,"tunes":2173},{"text":2172},"In an isolated environment those calls should either be disabled or redirected to internal observability. Repeated failed telemetry attempts can create delays, noisy logs and unexpected startup behavior.",{},{"id":759,"data":2175,"type":218,"tunes":2177},{"text":2176},"An air-gapped deployment should know which components attempt egress even if the firewall would block them.",{},{"id":764,"data":2179,"type":42,"tunes":2181},{"text":2180,"level":253},"Air-gapped systems still need patches",{},{"id":769,"data":2183,"type":218,"tunes":2185},{"text":2184},"Network isolation does not stop software from developing vulnerabilities. It only changes how patches reach the system.",{},{"id":774,"data":2187,"type":218,"tunes":2189},{"text":2188},"NIST frames patch management as preventive maintenance: organizations still need to identify, acquire, prioritize, install and verify patches and updates.",{},{"id":779,"data":2191,"type":218,"tunes":2193},{"text":2192},"Air-gapped operations therefore need a repeatable import cadence for OS packages, container images, drivers, AI runtimes and security updates. The trade-off is between isolation stability and vulnerability exposure from stale software.",{},{"id":784,"data":2195,"type":42,"tunes":2197},{"text":2196,"level":253},"A controlled update path",{},{"id":789,"data":2199,"type":331,"tunes":2226},{"steps":2200,"title":2225,"orientation":330},[2201,2204,2207,2210,2213,2216,2219,2222],{"label":2202,"description":2203},"1. Identify required update","Security advisory, model\u002Fruntime improvement or operational need triggers change.",{"label":2205,"description":2206},"2. Acquire in connected staging","Download exact versions plus signatures\u002Fchecksums and metadata.",{"label":2208,"description":2209},"3. Validate supply-chain evidence","Verify source, integrity, compatibility and policy requirements.",{"label":2211,"description":2212},"4. Test in representative offline staging","Confirm the update works without unexpected network dependencies.",{"label":2214,"description":2215},"5. Approve transfer","Apply the organization's change and security process.",{"label":2217,"description":2218},"6. Import into enclave repository","Publish the artifact to the internal trusted source.",{"label":2220,"description":2221},"7. Deploy gradually","Apply to test\u002Fcanary nodes before wider rollout where architecture permits.",{"label":2223,"description":2224},"8. Verify and record","Confirm version, health, behavior and rollback state.","Example update lifecycle for an isolated AI environment",{},{"id":819,"data":2228,"type":42,"tunes":2230},{"text":2229,"level":253},"The transfer boundary is the most sensitive operational interface",{},{"id":824,"data":2232,"type":218,"tunes":2234},{"text":2233},"If external information must enter an air-gapped system, the import channel becomes a major security control point.",{},{"id":829,"data":2236,"type":218,"tunes":2238},{"text":2237},"The NSA Cybersecurity Technical Cyber Threat Framework explicitly recognizes replication through removable media as a path adversaries can use to cross into disconnected or air-gapped networks.",{},{"id":834,"data":2240,"type":218,"tunes":2242},{"text":2241},"That is why controlled media handling, inspection, provenance, encryption where required, malware scanning and role separation can matter as much as the AI stack itself.",{},{"id":839,"data":2244,"type":42,"tunes":2246},{"text":2245,"level":253},"Removable media is not a neutral pipe",{},{"id":844,"data":2248,"type":218,"tunes":2250},{"text":2249},"USB drives and other portable media can carry both legitimate model\u002Fdata artifacts and malicious content.",{},{"id":849,"data":2252,"type":218,"tunes":2254},{"text":2253},"NIST's media-sanitization guidance treats storage media as a confidentiality lifecycle object that may require clearing, purging or destruction according to sensitivity and reuse needs.",{},{"id":854,"data":2256,"type":218,"tunes":2258},{"text":2257},"The exact transfer procedure is organization-specific, but the architectural principle is stable: cross-boundary media should be governed as a security asset, not treated as an informal convenience.",{},{"id":859,"data":2260,"type":42,"tunes":2262},{"text":2261,"level":253},"Air-gapping increases supply-chain importance",{},{"id":864,"data":2264,"type":218,"tunes":2266},{"text":2265},"An isolated system receives fewer live external inputs, but every imported binary, model, container and package becomes more consequential because the enclave may trust it for a long time.",{},{"id":869,"data":2268,"type":218,"tunes":2270},{"text":2269},"NIST software-supply-chain guidance emphasizes provenance, supplier risk, vulnerability management, software verification and SBOM-oriented practices. These concerns become directly relevant to offline AI artifact import.",{},{"id":874,"data":2272,"type":218,"tunes":2274},{"text":2273},"Model supply chain deserves the same attention as application supply chain: model origin, license, hash, format, required code, tokenizer, adapters and evaluation status should be known before import.",{},{"id":879,"data":2276,"type":42,"tunes":2278},{"text":2277,"level":253},"Air-gap readiness should be tested, not assumed",{},{"id":884,"data":2280,"type":226,"tunes":2283},{"body":2281,"title":2282,"variant":246},"The following air-gap-readiness test is an engineering synthesis, not a NIST or vendor certification method. It is designed to expose hidden external dependencies before deployment.","Proposed validation pattern",{},{"id":890,"data":2285,"type":394,"tunes":2319},{"content":2286,"stretched":43,"withHeadings":14},[2287,2289,2292,2295,2298,2301,2304,2307,2310,2313,2316],[894,2288],"What it proves",[2290,2291],"Cold start with all outbound network blocked","Runtime does not require public services during startup",[2293,2294],"Load every approved model from local storage","Weights\u002Ftokenizers\u002Fconfigs are complete",[2296,2297],"Rebuild\u002Fredeploy from internal registries only","Container\u002Fpackage mirrors are sufficient",[2299,2300],"Authenticate users while external IdP is unreachable","Identity works inside the enclave",[2302,2303],"Run RAG ingestion and query offline","Embedding\u002Findexing\u002Fretrieval stack is local",[2305,2306],"Run representative agent tools","Tools do not depend on external APIs",[2308,2309],"Restart after cache deletion","Offline operation is not accidentally relying on previously cached downloads",[2311,2312],"Advance simulated certificate\u002Fupdate lifecycle","Trust and maintenance dependencies are understood",[2314,2315],"Import a new model through staging path","Transfer\u002Fchange procedure is operational",[2317,2318],"Restore from backup","Recovery does not require unavailable cloud storage",{},{"id":928,"data":2321,"type":42,"tunes":2323},{"text":2322,"level":253},"Cached once is not the same as air-gap ready",{},{"id":933,"data":2325,"type":218,"tunes":2327},{"text":2326},"A system may appear offline because the model and packages are already cached from earlier internet access.",{},{"id":938,"data":2329,"type":218,"tunes":2331},{"text":2330},"Deleting caches or deploying to a clean node can reveal missing tokenizer files, Python packages, model manifests or remote-code dependencies.",{},{"id":943,"data":2333,"type":218,"tunes":2335},{"text":2334},"Air-gap readiness should therefore be validated from clean internal artifacts, not only from a developer workstation that was previously connected.",{},{"id":948,"data":2337,"type":42,"tunes":2339},{"text":2338,"level":253},"What threats remain inside an air gap?",{},{"id":953,"data":2341,"type":394,"tunes":2382},{"content":2342,"stretched":43,"withHeadings":14},[2343,2346,2349,2352,2355,2358,2361,2364,2367,2370,2373,2376,2379],[2344,2345],"Threat","Why the air gap does not remove it",[2347,2348],"Compromised imported artifact","Malware\u002Fmodel\u002Fpackage can enter through the authorized transfer path",[2350,2351],"Malicious removable media","Physical transfer can carry executable payloads",[2353,2354],"Insider misuse","Authorized users already exist inside the enclave",[2356,2357],"Prompt injection in imported documents","Untrusted content can influence RAG\u002Fagents without internet",[2359,2360],"Overprivileged agent tools","Local tools can still damage local systems",[2362,2363],"Cross-tenant data leakage","Internal authorization bugs remain possible",[2365,2366],"Vulnerable internal software","Lack of external connection does not remove exploitable bugs",[2368,2369],"Lateral movement","A compromised node can attack other internally connected nodes",[2371,2372],"Stale dependencies","Slow update cadence can leave known vulnerabilities unpatched",[2374,2375],"Physical theft\u002Ftampering","Hardware and media security remain critical",[2377,2378],"Bad model behavior","Hallucination, bias and task failure are independent of networking",[2380,2381],"Supply-chain poisoning","Trusted import sources can still be compromised",{},{"id":997,"data":2384,"type":42,"tunes":2386},{"text":2385,"level":253},"What an air gap actually improves",{},{"id":1002,"data":2388,"type":218,"tunes":2390},{"text":2389},"A genuine air gap can materially reduce attack paths that depend on direct remote connectivity: external command-and-control, cloud credential misuse, internet-facing service exploitation and accidental data exfiltration through ordinary outbound APIs.",{},{"id":1007,"data":2392,"type":218,"tunes":2394},{"text":2393},"It also makes data residency simple in one narrow sense: inference data cannot be sent to an external cloud service if no path exists.",{},{"id":1012,"data":2396,"type":218,"tunes":2398},{"text":2397},"Those benefits are strongest when the transfer boundary and internal access controls are equally disciplined. A poorly managed USB process can undermine the intended isolation.",{},{"id":1017,"data":2400,"type":42,"tunes":2402},{"text":2401,"level":253},"What an air gap makes harder",{},{"id":1022,"data":2404,"type":394,"tunes":2444},{"content":2405,"stretched":43,"withHeadings":14},[2406,2409,2412,2415,2418,2421,2424,2427,2430,2432,2435,2438,2441],[2407,2408],"Area","Operational consequence",[2410,2411],"Model updates","Manual\u002Fstaged transfer instead of direct model-hub pull",[2413,2414],"Security patches","Delayed and governed import workflow",[2416,2417],"Package installation","Internal mirrors or prebuilt artifacts required",[2419,2420],"Cloud AI APIs","Unavailable",[2422,2423],"Web search\u002Fconnectors","Unavailable unless data is imported separately",[2425,2426],"Authentication","Needs internal\u002Foffline-capable identity services",[2428,2429],"Monitoring","Needs internal observability and controlled export",[2052,2431],"Products requiring online activation may be unsuitable",[2433,2434],"Troubleshooting","No easy live access to vendor resources from production enclave",[2436,2437],"Capacity","All inference compute must exist locally",[2439,2440],"Disaster recovery","Cloud backups may be unavailable or policy-restricted",[2442,2443],"Knowledge freshness","External information arrives only as fast as the import process",{},{"id":1065,"data":2446,"type":42,"tunes":2448},{"text":2447,"level":253},"Air-gapped AI vs private AI",{},{"id":1070,"data":2450,"type":218,"tunes":2452},{"text":2451},"Private AI is primarily about controlling sensitive data and AI processing. A private AI platform may be on-premises and still access approved cloud models or external services.",{},{"id":1075,"data":2454,"type":218,"tunes":2456},{"text":2455},"Air-gapped AI is stricter on connectivity. A system can be private without being air-gapped, and an air-gapped system can still have poor privacy if every internal user has unrestricted access.",{},{"id":1080,"data":2458,"type":218,"tunes":2460},{"text":2459},"The security objective should determine the architecture: confidentiality, sovereignty, resilience and isolation are related but distinct requirements.",{},{"id":1085,"data":2462,"type":42,"tunes":2464},{"text":2463,"level":253},"Air-gapped AI vs sovereign AI",{},{"id":1090,"data":2466,"type":218,"tunes":2468},{"text":2467},"Sovereign AI concerns control over the broader dependency chain: data, models, infrastructure, operators, jurisdiction and strategic dependencies.",{},{"id":1095,"data":2470,"type":218,"tunes":2472},{"text":2471},"An air gap can support sovereignty by reducing external runtime dependency, but it does not guarantee sovereign control. The enclave may still depend on foreign hardware, proprietary model licenses or external update suppliers.",{},{"id":1100,"data":2474,"type":218,"tunes":2476},{"text":2475},"The next canonical article separates those control dimensions explicitly.",{},{"id":1105,"data":2478,"type":42,"tunes":2480},{"text":2479,"level":253},"Original implementation evidence: what the Aaasaasa AI Client proves — and what it does not",{},{"id":1110,"data":2482,"type":226,"tunes":2485},{"body":2483,"title":2484,"variant":246},"Aaasaasa AI Client is useful evidence for \u003Cstrong>local inference architecture\u003C\u002Fstrong>, provider abstraction and separation of runtime\u002Fmodel location. It is \u003Cstrong>not evidence of a deployed air-gapped environment\u003C\u002Fstrong>. The repository also supports cloud and remote paths, and no verified project evidence establishes a physically isolated security domain.","Implementation boundary",{},{"id":1116,"data":2487,"type":218,"tunes":2489},{"text":2488},"The AI Hub separates agent\u002Fclient, provider, model and connection location. It supports local Ollama inference and local-provider Codex operation as distinct choices rather than assuming that every AI request goes to a cloud model.",{},{"id":1121,"data":2491,"type":218,"tunes":2493},{"text":2492},"The repository explicitly notes that a local runtime can still use a cloud model, while Direct Ollama chat is local inference. This distinction is directly relevant to air-gap architecture: local execution does not prove that the model or surrounding dependencies are disconnected.",{},{"id":1126,"data":2495,"type":218,"tunes":2497},{"text":2496},"Provider abstraction, local model discovery and local inference are therefore building blocks for an air-gap-capable product architecture, but the network boundary, offline dependency mirror, controlled transfer process and offline identity\u002Foperations must still be engineered separately.",{},{"id":1131,"data":2499,"type":394,"tunes":2522},{"content":2500,"stretched":43,"withHeadings":14},[2501,2504,2507,2510,2513,2516,2519],[2502,2503],"Verified project capability","Air-gap relevance",[2505,2506],"Local Ollama inference","Supports local model execution",[2508,2509],"Local provider\u002Fruntime paths","Reduces dependency on cloud inference",[2511,2512],"Provider\u002Fmodel\u002Fruntime separation","Makes cloud dependencies explicit rather than hidden",[2514,2515],"Central permissions","Supports local tool\u002Fdata access control",[2517,2518],"Cloud\u002Fremote provider support also exists","Proves the product itself is hybrid-capable, not inherently air-gapped",[2520,2521],"No verified isolated deployment boundary","Prevents overclaiming air-gap maturity",{},{"id":1157,"data":2524,"type":42,"tunes":2526},{"text":2525,"level":253},"When is air-gapped AI justified?",{},{"id":1162,"data":2528,"type":394,"tunes":2551},{"content":2529,"stretched":43,"withHeadings":14},[2530,2533,2536,2539,2542,2545,2548],[2531,2532],"Air gap may be justified when","A connected private architecture may be better when",[2534,2535],"Security policy explicitly requires physically separated domains","Main requirement is only that prompts\u002Fdata are not used by public consumer services",[2537,2538],"Classified or extremely sensitive data cannot cross external networks","Approved enterprise cloud\u002Fprivate endpoints satisfy data controls",[2540,2541],"Operational environment has no reliable external connectivity","Internet is available and operational agility matters",[2543,2544],"Mission continuity must not depend on cloud\u002Fprovider availability","Managed model quality and rapid upgrades are more valuable",[2546,2547],"Regulated\u002Fcritical environment mandates controlled transfer","Standard security controls can meet the actual threat model",[2549,2550],"External SaaS\u002FAPI access is prohibited","Business workflow relies heavily on external connectors",{},{"id":1188,"data":2553,"type":218,"tunes":2555},{"text":2554},"Air-gapping should be a requirement derived from a threat model or policy, not a prestige feature. It has real security value when the eliminated connectivity path is itself unacceptable.",{},{"id":1193,"data":2557,"type":218,"tunes":2559},{"text":2558},"For many enterprise use cases, a tightly controlled private network with egress restrictions, local inference and approved update channels may provide a better balance of security and maintainability than a strict physical air gap.",{},{"id":1198,"data":2561,"type":42,"tunes":2563},{"text":2562,"level":253},"A practical air-gapped AI design sequence",{},{"id":1203,"data":2565,"type":331,"tunes":2604},{"steps":2566,"title":2603,"orientation":330},[2567,2570,2573,2576,2579,2582,2585,2588,2591,2594,2597,2600],{"label":2568,"description":2569},"1. Define what the air gap separates","Name the security domains and whether the requirement is strict physical separation or simply no internet.",{"label":2571,"description":2572},"2. Inventory every external dependency","Models, packages, registries, identity, telemetry, licensing, storage, APIs, DNS\u002Ftime and support services.",{"label":2574,"description":2575},"3. Select offline-capable models and runtimes","Verify model assets and runtime code can load without remote calls.",{"label":2577,"description":2578},"4. Build internal artifact repositories","Create trusted sources for containers, packages, models and updates.",{"label":2580,"description":2581},"5. Design controlled transfer","Define staging, verification, media\u002Fgateway handling, approval and provenance.",{"label":2583,"description":2584},"6. Build internal identity and authorization","Ensure users, services and tools can authenticate without cloud dependencies.",{"label":2586,"description":2587},"7. Keep RAG and tools local","Deploy knowledge, embeddings, indexes and required service APIs inside the enclave.",{"label":2589,"description":2590},"8. Build internal observability","Operate logs, metrics, traces and security monitoring locally.",{"label":2592,"description":2593},"9. Define patch\u002Fmodel update cadence","Balance vulnerability response with the controlled import process.",{"label":2595,"description":2596},"10. Test from a clean disconnected state","Cold-start and operate without inherited caches or hidden internet access.",{"label":2598,"description":2599},"11. Test compromise paths","Exercise removable-media, supply-chain, prompt-injection, insider and lateral-movement scenarios.",{"label":2601,"description":2602},"12. Document exceptions and exports","Every permitted cross-boundary path should have a named purpose, owner and control set.","Design from the boundary inward",{},{"id":1245,"data":2606,"type":42,"tunes":2608},{"text":2607,"level":253},"Air-gapped AI architecture checklist",{},{"id":1250,"data":2610,"type":394,"tunes":2663},{"content":2611,"stretched":43,"withHeadings":14},[2612,2615,2618,2621,2624,2627,2630,2633,2636,2639,2642,2645,2648,2651,2654,2657,2660],[2613,2614],"Question","Expected evidence",[2616,2617],"What exactly is isolated from what?","Documented security-domain boundary",[2619,2620],"Is the boundary physically disconnected?","Network\u002Fphysical architecture evidence if strict air gap is claimed",[2622,2623],"How does data cross the boundary?","Authorized non-automated\u002Fmanual or explicitly documented disconnected workflow",[2625,2626],"Can every model cold-start offline?","Offline loading test",[2628,2629],"Are tokenizer\u002Fconfig\u002Fruntime assets complete?","Verified internal model bundle",[2631,2632],"Where do containers\u002Fpackages come from?","Internal trusted mirror\u002Frepository",[2634,2635],"Can identity work without cloud services?","Internal IdP\u002FPKI\u002Fservice credential path",[2637,2638],"Can RAG ingest\u002Fquery offline?","Local ingestion, embeddings, index and retrieval",[2640,2641],"Which agent tools remain available?","Internal capability inventory",[2643,2644],"How are patches imported?","Controlled maintenance process",[2646,2647],"How are artifacts verified?","Integrity\u002Fprovenance\u002Fmalware\u002Fsupply-chain controls",[2649,2650],"How is removable media governed?","Media handling and sanitization policy",[2652,2653],"Can the system run after caches are cleared?","Clean-environment offline test",[2655,2656],"Where are logs and traces stored?","Internal observability platform",[2658,2659],"How are exports approved?","Controlled egress process",[2661,2662],"What proves this is air-gapped rather than merely local?","Boundary and transfer evidence, not model location",{},{"id":1306,"data":2665,"type":42,"tunes":2667},{"text":2666,"level":253},"Common air-gapped AI failure modes",{},{"id":1311,"data":2669,"type":394,"tunes":2710},{"content":2670,"stretched":43,"withHeadings":14},[2671,2674,2677,2680,2683,2686,2689,2692,2695,2698,2701,2704,2707],[2672,2673],"Failure mode","What actually failed",[2675,2676],"Local model still downloads tokenizer\u002Fconfig at startup","Model bundle was incomplete",[2678,2679],"Container references public registry","Deployment was not self-contained",[2681,2682],"Cloud identity required for login","Application was local but identity was not",[2684,2685],"License server required externally","Vendor dependency contradicted offline operation",[2687,2688],"Embedding model missing","Chat works but RAG ingestion fails",[2690,2691],"Agent tool calls public SaaS","Agent architecture was not air-gap compatible",[2693,2694],"Only GPU node is isolated","Database, UI or monitoring still depends on external services",[2696,2697],"USB imports are informal","Transfer boundary becomes uncontrolled attack path",[2699,2700],"No patch process","Isolation creates growing vulnerability debt",[2702,2703],"Cached developer machine used as proof","Fresh deployment fails without internet",[2705,2706],"Air gap replaces authorization thinking","Internal users\u002Fservices become overprivileged",[2708,2709],"Air-gapped label used for firewall-only egress block","Security documentation overstates the actual boundary",{},{"id":1355,"data":2712,"type":42,"tunes":2714},{"text":2713,"level":253},"Common misconceptions",{},{"id":1360,"data":2716,"type":394,"tunes":2751},{"content":2717,"stretched":43,"withHeadings":14},[2718,2721,2724,2727,2730,2733,2736,2739,2742,2745,2748],[2719,2720],"Misconception","Correction",[2722,2723],"“Local AI is air-gapped AI.”","Local describes where inference runs; air gap describes the security\u002Fnetwork boundary.",[2725,2726],"“Air-gapped means one standalone PC.”","An isolated enclave can contain an entire internal network or cluster.",[2728,2729],"“No internet equals strict air gap.”","Under NIST's definition, the separated systems also lack physical connection and cross-boundary transfer is non-automated.",[2731,2732],"“Air gaps eliminate cyber risk.”","Supply-chain, removable-media, insider, internal-network and application risks remain.",[2734,2735],"“RAG needs the cloud.”","RAG can run entirely with local models, indexes and data.",[2737,2738],"“Agents cannot work offline.”","Agents can use internal\u002Flocal tools; they simply cannot reach unavailable external services.",[2740,2741],"“Once installed, the system needs no updates.”","Patches, drivers, models and dependencies still require lifecycle management.",[2743,2744],"“A downloaded model is self-contained.”","Tokenizers, remote code, libraries or model assets may still trigger network dependencies.",[2746,2747],"“Private AI and air-gapped AI are identical.”","Private AI is a data\u002Fcontrol property; air gap is a connectivity property.",[2749,2750],"“Air gap guarantees sovereignty.”","External hardware, licenses, models and supply chain can remain dependencies.",{},{"id":1398,"data":2753,"type":42,"tunes":2755},{"text":2754,"level":253},"Limitations",{},{"id":1403,"data":2757,"type":218,"tunes":2759},{"text":2758},"Strict air gaps make external knowledge freshness slower because every new source must pass through a transfer process.",{},{"id":1408,"data":2761,"type":218,"tunes":2763},{"text":2762},"They can constrain model choice when licenses, remote-code requirements, hardware needs or provider-only APIs cannot be satisfied offline.",{},{"id":1413,"data":2765,"type":218,"tunes":2767},{"text":2766},"They increase operational cost because infrastructure normally consumed as cloud services must be owned and maintained internally.",{},{"id":1418,"data":2769,"type":218,"tunes":2771},{"text":2770},"They can also create patch latency: stronger change control may keep systems stable while delaying urgent vulnerability remediation.",{},{"id":1423,"data":2773,"type":218,"tunes":2775},{"text":2774},"Air-gapped AI should therefore be evaluated as one security architecture among several, not assumed to be universally superior.",{},{"id":1428,"data":2777,"type":42,"tunes":2779},{"text":2778,"level":253},"What would change this answer?",{},{"id":1433,"data":2781,"type":218,"tunes":2783},{"text":2782},"Vendor support for disconnected operation changes quickly. New model formats, signed OCI artifacts, offline license mechanisms and integrated model registries can reduce operational friction.",{},{"id":1438,"data":2785,"type":218,"tunes":2787},{"text":2786},"The distinction between strict air gap and disconnected deployment will remain important even if vendors continue using the terms loosely.",{},{"id":1443,"data":2789,"type":218,"tunes":2791},{"text":2790},"The stable principle is that genuine air-gap claims depend on the system boundary and transfer mechanism, not on whether the LLM happens to run locally.",{},{"id":1448,"data":2793,"type":42,"tunes":2795},{"text":2794,"level":253},"Related canonical knowledge",{},{"id":1453,"data":2797,"type":218,"tunes":2799},{"text":2798},"Air-Gapped AI is a deployment\u002Fsecurity architecture node. Private AI, Sovereign AI and provider abstraction answer different questions about confidentiality, control and dependency.",{},{"id":1458,"data":2801,"type":218,"tunes":2803},{"text":2802},"MLOps\u002FLLMOps becomes more demanding inside a disconnected environment because model, package and update lifecycles must operate through internal repositories and controlled transfer.",{},{"id":1463,"data":2805,"type":218,"tunes":2807},{"text":2806},"RAG and Agentic AI remain valid patterns inside the enclave as long as their data and tools are internally available.",{},{"id":1468,"data":2809,"type":661,"tunes":2814},{"url":2810,"title":2811,"excerpt":2812,"ctaLabel":2813},"https:\u002F\u002Fstajic.de\u002Fblog\u002Fai-agent-memory-is-not-rag-how-to-separate-memory-retrieval-state-and-context","AI Agent Memory Is Not RAG: How to Separate Memory, Retrieval, State and Context","Air-gapped AI still needs correct internal boundaries between durable memory, authoritative state, retrieval and model context.","Read the memory architecture article",{},{"id":1476,"data":2816,"type":42,"tunes":2818},{"text":2817,"level":253},"Frequently asked questions",{},{"id":1481,"data":2820,"type":1481,"tunes":2852},{"items":2821,"title":1524},[2822,2825,2828,2831,2834,2837,2840,2843,2846,2849],{"id":1485,"answer":2823,"question":2824},"Air-gapped AI is AI deployed inside a security domain physically disconnected from the external systems it is separated from, with cross-boundary transfer performed through controlled non-automated procedures under the strict NIST definition.","What is air-gapped AI?",{"id":1489,"answer":2826,"question":2827},"No for normal inference and operation. Required models, packages, data and services must be available inside the isolated environment.","Does air-gapped AI need internet access?",{"id":1493,"answer":2829,"question":2830},"No. A local model can run on a machine that still has internet access or uses cloud identity, tools or storage. Air gap describes the complete system boundary.","Is a local LLM automatically air-gapped?",{"id":1497,"answer":2832,"question":2833},"Yes. Documents, embedding models, vector or lexical indexes, rerankers and generation models can all run locally. External knowledge must be imported through the controlled boundary.","Can RAG work in an air-gapped network?",{"id":1501,"answer":2835,"question":2836},"Yes, if their tools and required systems are available inside the isolated network. Public SaaS and cloud APIs are unavailable without a permitted cross-boundary mechanism.","Can AI agents work air-gapped?",{"id":1505,"answer":2838,"question":2839},"Models are typically acquired and validated in a connected staging environment, transferred through an approved process and published to an internal model\u002Fartifact repository.","How are models updated in an air-gapped environment?",{"id":1509,"answer":2841,"question":2842},"No. On-premises describes infrastructure location. On-prem systems can remain internet-connected.","Is on-premises AI the same as air-gapped AI?",{"id":1513,"answer":2844,"question":2845},"No. Private AI is about data\u002Fcontrol requirements and can still use connected infrastructure. Air gap specifically describes network\u002Fdomain separation.","Is private AI the same as air-gapped AI?",{"id":1517,"answer":2847,"question":2848},"It removes or reduces some remote connectivity risks but does not remove supply-chain, removable-media, insider, internal authorization, physical or model-behavior risks.","Does an air gap make AI secure?",{"id":1521,"answer":2850,"question":2851},"Deploy or cold-start the full stack in a clean environment with all external connectivity unavailable and verify that models, identity, RAG, tools, monitoring, updates and recovery depend only on approved internal artifacts and services.","What is the best test for air-gap readiness?",{},{"id":1527,"data":2854,"type":42,"tunes":2856},{"text":2855,"level":253},"Glossary",{},{"id":1532,"data":2858,"type":1532,"tunes":2892},{"title":2859,"entries":2860},"Key air-gapped AI terms",[2861,2863,2865,2867,2869,2871,2874,2877,2880,2883,2886,2889],{"term":1537,"anchor":1538,"definition":2862},"Security-domain interface where systems are not physically connected and any cross-boundary logical transfer is non-automated\u002Fmanual under the NIST glossary definition.",{"term":1541,"anchor":1542,"definition":2864},"AI system deployed inside an air-gapped security domain with locally available inference and operational dependencies.",{"term":1859,"anchor":1546,"definition":2866},"Deployment environment without direct outside-internet access; implementations may use controlled mirror or bastion workflows.",{"term":1855,"anchor":1550,"definition":2868},"AI application able to operate for some or all functions without internet connectivity, without necessarily being permanently isolated.",{"term":1851,"anchor":1553,"definition":2870},"AI inference or runtime executing on local hardware rather than a remote model endpoint; does not imply network isolation.",{"term":2872,"anchor":1557,"definition":2873},"Mirror registry","Internal repository containing approved copies of container images or other artifacts needed by a disconnected deployment.",{"term":2875,"anchor":1561,"definition":2876},"Staging environment","Connected or controlled zone where artifacts are acquired, verified and prepared before transfer into an isolated domain.",{"term":2878,"anchor":1565,"definition":2879},"Controlled transfer","Governed movement of data or software across the isolation boundary using approved media\u002Fprocesses and verification.",{"term":2881,"anchor":1569,"definition":2882},"Artifact provenance","Information showing where a model, package, container or other imported artifact originated and how it was produced or verified.",{"term":2884,"anchor":1573,"definition":2885},"Removable media","Portable storage used to transfer data between systems; a potential security path across disconnected domains.",{"term":2887,"anchor":1577,"definition":2888},"Internal model store","Repository inside the isolated environment from which approved model artifacts are served or deployed.",{"term":2890,"anchor":1581,"definition":2891},"Air-gap readiness","Demonstrated ability of the complete AI stack to install, start, operate, update and recover without unapproved external connectivity.",{},{"id":1585,"data":2894,"type":42,"tunes":2896},{"text":2895,"level":253},"Conclusion",{},{"id":1590,"data":2898,"type":218,"tunes":2900},{"text":2899},"Air-gapped AI is not a special kind of model. It is an AI architecture operating inside a deliberately isolated security domain.",{},{"id":1595,"data":2902,"type":218,"tunes":2904},{"text":2903},"The model can be the easy part. Production readiness depends on whether every surrounding dependency — model assets, packages, registries, identity, RAG, tools, monitoring, updates and recovery — can function without an automated external path.",{},{"id":1600,"data":2906,"type":218,"tunes":2908},{"text":2907},"The shortest reliable rule is: local inference proves where the model runs; air-gap evidence proves how the complete system is separated and how every permitted transfer crosses that boundary.",{},{"id":1605,"data":2910,"type":42,"tunes":2912},{"text":2911,"level":253},"Primary sources and current implementation references",{},{"id":1610,"data":2914,"type":218,"tunes":2916},{"text":2915},"The sources below establish the security definition, current disconnected AI deployment patterns and lifecycle risks. Vendor use of “air-gapped” is intentionally distinguished from the stricter NIST definition.",{},{"id":1615,"data":2918,"type":1622,"tunes":2922},{"link":1617,"meta":2919},{"image":2920,"title":1620,"description":2921},{"url":419},"NIST glossary definition: physically disconnected systems with non-automated, manually controlled logical transfer across the boundary.",{},{"id":1625,"data":2924,"type":1622,"tunes":2928},{"link":1627,"meta":2925},{"image":2926,"title":1630,"description":2927},{"url":419},"Current operational guidance for staging model assets on a connected system and running NIM from local storage without internet, public registries or cloud API keys.",{},{"id":1634,"data":2930,"type":1622,"tunes":2934},{"link":1636,"meta":2931},{"image":2932,"title":1639,"description":2933},{"url":419},"Current Red Hat guidance for serving LLMs in disconnected environments with mirrored artifacts and internal infrastructure.",{},{"id":1643,"data":2936,"type":1622,"tunes":2941},{"link":1645,"meta":2937},{"image":2938,"title":2939,"description":2940},{"url":419},"Red Hat AI Inference — Storing models in disconnected environments","Current guidance covering OCI model images, persistent model storage and limitations of models requiring remote code.",{},{"id":1652,"data":2943,"type":1622,"tunes":2948},{"link":1654,"meta":2944},{"image":2945,"title":2946,"description":2947},{"url":419},"NSA — Technical Cyber Threat Framework","Threat framework explicitly identifying removable-media replication as a path into disconnected or air-gapped networks.",{},{"id":1661,"data":2950,"type":1622,"tunes":2955},{"link":1663,"meta":2951},{"image":2952,"title":2953,"description":2954},{"url":419},"NIST SP 800-88 Rev. 1 — Guidelines for Media Sanitization","Guidance for managing and sanitizing storage media according to information confidentiality requirements.",{},{"id":1670,"data":2957,"type":1622,"tunes":2962},{"link":1672,"meta":2958},{"image":2959,"title":2960,"description":2961},{"url":419},"NIST SP 800-40 Rev. 4 — Enterprise Patch Management Planning","Guidance framing patching and updates as preventive maintenance across enterprise systems.",{},{"id":1679,"data":2964,"type":1622,"tunes":2969},{"link":1681,"meta":2965},{"image":2966,"title":2967,"description":2968},{"url":419},"NIST — Software Security in Supply Chains","NIST guidance covering software supply-chain risk, provenance, verification, SBOM-related practices and vulnerability management.",{},"2.31.6","Air-gapped AI runs models, RAG and AI applications inside an isolated security domain without internet or cloud dependencies. Learn how models, data, updates and tools operate offline.",{"lang":7,"title":208,"content":210,"contentJson":2973,"excerpt":1688},{"time":212,"blocks":2974,"version":1687},[2975,2978,2981,2984,2987,2990,2993,2996,2999,3002,3005,3008,3011,3014,3017,3020,3032,3035,3038,3041,3044,3047,3059,3062,3065,3068,3085,3088,3091,3106,3109,3112,3115,3118,3121,3124,3127,3130,3133,3136,3139,3142,3145,3148,3151,3166,3169,3172,3175,3178,3181,3184,3187,3190,3193,3196,3199,3202,3205,3208,3211,3214,3217,3220,3223,3226,3229,3232,3235,3238,3241,3244,3247,3250,3253,3256,3259,3262,3265,3268,3271,3283,3286,3289,3292,3295,3298,3301,3304,3307,3310,3313,3316,3319,3322,3325,3340,3343,3346,3349,3352,3355,3372,3375,3378,3381,3384,3387,3404,3407,3410,3413,3416,3419,3422,3425,3428,3431,3434,3437,3440,3443,3454,3457,3468,3471,3474,3477,3493,3496,3517,3520,3537,3540,3555,3558,3561,3564,3567,3570,3573,3576,3579,3582,3585,3588,3591,3594,3597,3600,3603,3617,3620,3636,3639,3642,3645,3648,3651,3654,3659,3664,3669,3674,3679,3684,3689],{"id":215,"data":2976,"type":218,"tunes":2977},{"text":217},{},{"id":221,"data":2979,"type":226,"tunes":2980},{"body":223,"title":224,"variant":225},{},{"id":229,"data":2982,"type":226,"tunes":2983},{"body":231,"title":232,"variant":233},{},{"id":236,"data":2985,"type":226,"tunes":2986},{"body":238,"title":239,"variant":233},{},{"id":242,"data":2988,"type":226,"tunes":2989},{"body":244,"title":245,"variant":246},{},{"id":249,"data":2991,"type":254,"tunes":2992},{"title":251,"maxLevel":252,"minLevel":253},{},{"id":257,"data":2994,"type":42,"tunes":2995},{"text":259,"level":253},{},{"id":262,"data":2997,"type":218,"tunes":2998},{"text":264},{},{"id":267,"data":3000,"type":218,"tunes":3001},{"text":269},{},{"id":272,"data":3003,"type":218,"tunes":3004},{"text":274},{},{"id":277,"data":3006,"type":42,"tunes":3007},{"text":279,"level":253},{},{"id":282,"data":3009,"type":218,"tunes":3010},{"text":284},{},{"id":287,"data":3012,"type":218,"tunes":3013},{"text":289},{},{"id":292,"data":3015,"type":218,"tunes":3016},{"text":294},{},{"id":297,"data":3018,"type":218,"tunes":3019},{"text":299},{},{"id":302,"data":3021,"type":331,"tunes":3031},{"steps":3022,"title":329,"orientation":330},[3023,3024,3025,3026,3027,3028,3029,3030],{"label":306,"description":307},{"label":309,"description":310},{"label":312,"description":313},{"label":315,"description":316},{"label":318,"description":319},{"label":321,"description":322},{"label":324,"description":325},{"label":327,"description":328},{},{"id":334,"data":3033,"type":42,"tunes":3034},{"text":336,"level":253},{},{"id":339,"data":3036,"type":218,"tunes":3037},{"text":341},{},{"id":344,"data":3039,"type":218,"tunes":3040},{"text":346},{},{"id":349,"data":3042,"type":218,"tunes":3043},{"text":351},{},{"id":354,"data":3045,"type":42,"tunes":3046},{"text":356,"level":253},{},{"id":359,"data":3048,"type":394,"tunes":3058},{"content":3049,"stretched":43,"withHeadings":14},[3050,3051,3052,3053,3054,3055,3056,3057],[363,364,365],[367,368,369],[371,372,373],[375,376,377],[379,380,381],[383,384,385],[387,388,389],[391,392,393],{},{"id":397,"data":3060,"type":218,"tunes":3061},{"text":399},{},{"id":402,"data":3063,"type":218,"tunes":3064},{"text":404},{},{"id":407,"data":3066,"type":42,"tunes":3067},{"text":409,"level":253},{},{"id":412,"data":3069,"type":444,"tunes":3084},{"rows":3070,"title":436,"layout":394,"columns":3081},[3071,3073,3075,3077,3079],{"id":416,"label":417,"values":3072},[419,419],{"id":421,"label":422,"values":3074},[419,419],{"id":425,"label":426,"values":3076},[419,419],{"id":429,"label":430,"values":3078},[419,419],{"id":433,"label":434,"values":3080},[419,419],[3082,3083],{"id":439,"label":440},{"id":442,"label":443},{},{"id":447,"data":3086,"type":226,"tunes":3087},{"body":449,"title":450,"variant":451},{},{"id":454,"data":3089,"type":42,"tunes":3090},{"text":456,"level":253},{},{"id":459,"data":3092,"type":394,"tunes":3105},{"content":3093,"stretched":43,"withHeadings":14},[3094,3095,3096,3097,3098,3099,3100,3101,3102,3103,3104],[463,464],[466,467],[469,470],[472,473],[475,476],[478,479],[481,482],[484,485],[487,488],[490,491],[493,494],{},{"id":497,"data":3107,"type":218,"tunes":3108},{"text":499},{},{"id":502,"data":3110,"type":218,"tunes":3111},{"text":504},{},{"id":507,"data":3113,"type":42,"tunes":3114},{"text":509,"level":253},{},{"id":512,"data":3116,"type":218,"tunes":3117},{"text":514},{},{"id":517,"data":3119,"type":218,"tunes":3120},{"text":519},{},{"id":522,"data":3122,"type":218,"tunes":3123},{"text":524},{},{"id":527,"data":3125,"type":42,"tunes":3126},{"text":529,"level":253},{},{"id":532,"data":3128,"type":218,"tunes":3129},{"text":534},{},{"id":537,"data":3131,"type":218,"tunes":3132},{"text":539},{},{"id":542,"data":3134,"type":218,"tunes":3135},{"text":544},{},{"id":547,"data":3137,"type":42,"tunes":3138},{"text":549,"level":253},{},{"id":552,"data":3140,"type":218,"tunes":3141},{"text":554},{},{"id":557,"data":3143,"type":218,"tunes":3144},{"text":559},{},{"id":562,"data":3146,"type":218,"tunes":3147},{"text":564},{},{"id":567,"data":3149,"type":42,"tunes":3150},{"text":569,"level":253},{},{"id":572,"data":3152,"type":394,"tunes":3165},{"content":3153,"stretched":43,"withHeadings":14},[3154,3155,3156,3157,3158,3159,3160,3161,3162,3163,3164],[576,577],[579,580],[582,583],[585,586],[588,589],[591,592],[594,595],[597,598],[600,601],[603,604],[606,607],{},{"id":610,"data":3167,"type":42,"tunes":3168},{"text":612,"level":253},{},{"id":615,"data":3170,"type":218,"tunes":3171},{"text":617},{},{"id":620,"data":3173,"type":218,"tunes":3174},{"text":622},{},{"id":625,"data":3176,"type":218,"tunes":3177},{"text":627},{},{"id":630,"data":3179,"type":42,"tunes":3180},{"text":632,"level":253},{},{"id":635,"data":3182,"type":218,"tunes":3183},{"text":637},{},{"id":640,"data":3185,"type":218,"tunes":3186},{"text":642},{},{"id":645,"data":3188,"type":218,"tunes":3189},{"text":647},{},{"id":650,"data":3191,"type":218,"tunes":3192},{"text":652},{},{"id":655,"data":3194,"type":661,"tunes":3195},{"url":657,"title":658,"excerpt":659,"ctaLabel":660},{},{"id":664,"data":3197,"type":42,"tunes":3198},{"text":666,"level":253},{},{"id":669,"data":3200,"type":218,"tunes":3201},{"text":671},{},{"id":674,"data":3203,"type":218,"tunes":3204},{"text":676},{},{"id":679,"data":3206,"type":218,"tunes":3207},{"text":681},{},{"id":684,"data":3209,"type":42,"tunes":3210},{"text":686,"level":253},{},{"id":689,"data":3212,"type":218,"tunes":3213},{"text":691},{},{"id":694,"data":3215,"type":218,"tunes":3216},{"text":696},{},{"id":699,"data":3218,"type":218,"tunes":3219},{"text":701},{},{"id":704,"data":3221,"type":42,"tunes":3222},{"text":706,"level":253},{},{"id":709,"data":3224,"type":218,"tunes":3225},{"text":711},{},{"id":714,"data":3227,"type":218,"tunes":3228},{"text":716},{},{"id":719,"data":3230,"type":218,"tunes":3231},{"text":721},{},{"id":724,"data":3233,"type":42,"tunes":3234},{"text":726,"level":253},{},{"id":729,"data":3236,"type":218,"tunes":3237},{"text":731},{},{"id":734,"data":3239,"type":218,"tunes":3240},{"text":736},{},{"id":739,"data":3242,"type":218,"tunes":3243},{"text":741},{},{"id":744,"data":3245,"type":42,"tunes":3246},{"text":746,"level":253},{},{"id":749,"data":3248,"type":218,"tunes":3249},{"text":751},{},{"id":754,"data":3251,"type":218,"tunes":3252},{"text":756},{},{"id":759,"data":3254,"type":218,"tunes":3255},{"text":761},{},{"id":764,"data":3257,"type":42,"tunes":3258},{"text":766,"level":253},{},{"id":769,"data":3260,"type":218,"tunes":3261},{"text":771},{},{"id":774,"data":3263,"type":218,"tunes":3264},{"text":776},{},{"id":779,"data":3266,"type":218,"tunes":3267},{"text":781},{},{"id":784,"data":3269,"type":42,"tunes":3270},{"text":786,"level":253},{},{"id":789,"data":3272,"type":331,"tunes":3282},{"steps":3273,"title":816,"orientation":330},[3274,3275,3276,3277,3278,3279,3280,3281],{"label":793,"description":794},{"label":796,"description":797},{"label":799,"description":800},{"label":802,"description":803},{"label":805,"description":806},{"label":808,"description":809},{"label":811,"description":812},{"label":814,"description":815},{},{"id":819,"data":3284,"type":42,"tunes":3285},{"text":821,"level":253},{},{"id":824,"data":3287,"type":218,"tunes":3288},{"text":826},{},{"id":829,"data":3290,"type":218,"tunes":3291},{"text":831},{},{"id":834,"data":3293,"type":218,"tunes":3294},{"text":836},{},{"id":839,"data":3296,"type":42,"tunes":3297},{"text":841,"level":253},{},{"id":844,"data":3299,"type":218,"tunes":3300},{"text":846},{},{"id":849,"data":3302,"type":218,"tunes":3303},{"text":851},{},{"id":854,"data":3305,"type":218,"tunes":3306},{"text":856},{},{"id":859,"data":3308,"type":42,"tunes":3309},{"text":861,"level":253},{},{"id":864,"data":3311,"type":218,"tunes":3312},{"text":866},{},{"id":869,"data":3314,"type":218,"tunes":3315},{"text":871},{},{"id":874,"data":3317,"type":218,"tunes":3318},{"text":876},{},{"id":879,"data":3320,"type":42,"tunes":3321},{"text":881,"level":253},{},{"id":884,"data":3323,"type":226,"tunes":3324},{"body":886,"title":887,"variant":246},{},{"id":890,"data":3326,"type":394,"tunes":3339},{"content":3327,"stretched":43,"withHeadings":14},[3328,3329,3330,3331,3332,3333,3334,3335,3336,3337,3338],[894,895],[897,898],[900,901],[903,904],[906,907],[909,910],[912,913],[915,916],[918,919],[921,922],[924,925],{},{"id":928,"data":3341,"type":42,"tunes":3342},{"text":930,"level":253},{},{"id":933,"data":3344,"type":218,"tunes":3345},{"text":935},{},{"id":938,"data":3347,"type":218,"tunes":3348},{"text":940},{},{"id":943,"data":3350,"type":218,"tunes":3351},{"text":945},{},{"id":948,"data":3353,"type":42,"tunes":3354},{"text":950,"level":253},{},{"id":953,"data":3356,"type":394,"tunes":3371},{"content":3357,"stretched":43,"withHeadings":14},[3358,3359,3360,3361,3362,3363,3364,3365,3366,3367,3368,3369,3370],[957,958],[960,961],[963,964],[966,967],[969,970],[972,973],[975,976],[978,979],[981,982],[984,985],[987,988],[990,991],[993,994],{},{"id":997,"data":3373,"type":42,"tunes":3374},{"text":999,"level":253},{},{"id":1002,"data":3376,"type":218,"tunes":3377},{"text":1004},{},{"id":1007,"data":3379,"type":218,"tunes":3380},{"text":1009},{},{"id":1012,"data":3382,"type":218,"tunes":3383},{"text":1014},{},{"id":1017,"data":3385,"type":42,"tunes":3386},{"text":1019,"level":253},{},{"id":1022,"data":3388,"type":394,"tunes":3403},{"content":3389,"stretched":43,"withHeadings":14},[3390,3391,3392,3393,3394,3395,3396,3397,3398,3399,3400,3401,3402],[1026,1027],[1029,1030],[1032,1033],[1035,1036],[1038,1039],[1041,1042],[1044,1045],[1047,1048],[606,1050],[1052,1053],[1055,1056],[1058,1059],[1061,1062],{},{"id":1065,"data":3405,"type":42,"tunes":3406},{"text":1067,"level":253},{},{"id":1070,"data":3408,"type":218,"tunes":3409},{"text":1072},{},{"id":1075,"data":3411,"type":218,"tunes":3412},{"text":1077},{},{"id":1080,"data":3414,"type":218,"tunes":3415},{"text":1082},{},{"id":1085,"data":3417,"type":42,"tunes":3418},{"text":1087,"level":253},{},{"id":1090,"data":3420,"type":218,"tunes":3421},{"text":1092},{},{"id":1095,"data":3423,"type":218,"tunes":3424},{"text":1097},{},{"id":1100,"data":3426,"type":218,"tunes":3427},{"text":1102},{},{"id":1105,"data":3429,"type":42,"tunes":3430},{"text":1107,"level":253},{},{"id":1110,"data":3432,"type":226,"tunes":3433},{"body":1112,"title":1113,"variant":246},{},{"id":1116,"data":3435,"type":218,"tunes":3436},{"text":1118},{},{"id":1121,"data":3438,"type":218,"tunes":3439},{"text":1123},{},{"id":1126,"data":3441,"type":218,"tunes":3442},{"text":1128},{},{"id":1131,"data":3444,"type":394,"tunes":3453},{"content":3445,"stretched":43,"withHeadings":14},[3446,3447,3448,3449,3450,3451,3452],[1135,1136],[1138,1139],[1141,1142],[1144,1145],[1147,1148],[1150,1151],[1153,1154],{},{"id":1157,"data":3455,"type":42,"tunes":3456},{"text":1159,"level":253},{},{"id":1162,"data":3458,"type":394,"tunes":3467},{"content":3459,"stretched":43,"withHeadings":14},[3460,3461,3462,3463,3464,3465,3466],[1166,1167],[1169,1170],[1172,1173],[1175,1176],[1178,1179],[1181,1182],[1184,1185],{},{"id":1188,"data":3469,"type":218,"tunes":3470},{"text":1190},{},{"id":1193,"data":3472,"type":218,"tunes":3473},{"text":1195},{},{"id":1198,"data":3475,"type":42,"tunes":3476},{"text":1200,"level":253},{},{"id":1203,"data":3478,"type":331,"tunes":3492},{"steps":3479,"title":1242,"orientation":330},[3480,3481,3482,3483,3484,3485,3486,3487,3488,3489,3490,3491],{"label":1207,"description":1208},{"label":1210,"description":1211},{"label":1213,"description":1214},{"label":1216,"description":1217},{"label":1219,"description":1220},{"label":1222,"description":1223},{"label":1225,"description":1226},{"label":1228,"description":1229},{"label":1231,"description":1232},{"label":1234,"description":1235},{"label":1237,"description":1238},{"label":1240,"description":1241},{},{"id":1245,"data":3494,"type":42,"tunes":3495},{"text":1247,"level":253},{},{"id":1250,"data":3497,"type":394,"tunes":3516},{"content":3498,"stretched":43,"withHeadings":14},[3499,3500,3501,3502,3503,3504,3505,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515],[1254,1255],[1257,1258],[1260,1261],[1263,1264],[1266,1267],[1269,1270],[1272,1273],[1275,1276],[1278,1279],[1281,1282],[1284,1285],[1287,1288],[1290,1291],[1293,1294],[1296,1297],[1299,1300],[1302,1303],{},{"id":1306,"data":3518,"type":42,"tunes":3519},{"text":1308,"level":253},{},{"id":1311,"data":3521,"type":394,"tunes":3536},{"content":3522,"stretched":43,"withHeadings":14},[3523,3524,3525,3526,3527,3528,3529,3530,3531,3532,3533,3534,3535],[1315,1316],[1318,1319],[1321,1322],[1324,1325],[1327,1328],[1330,1331],[1333,1334],[1336,1337],[1339,1340],[1342,1343],[1345,1346],[1348,1349],[1351,1352],{},{"id":1355,"data":3538,"type":42,"tunes":3539},{"text":1357,"level":253},{},{"id":1360,"data":3541,"type":394,"tunes":3554},{"content":3542,"stretched":43,"withHeadings":14},[3543,3544,3545,3546,3547,3548,3549,3550,3551,3552,3553],[1364,1365],[1367,1368],[1370,1371],[1373,1374],[1376,1377],[1379,1380],[1382,1383],[1385,1386],[1388,1389],[1391,1392],[1394,1395],{},{"id":1398,"data":3556,"type":42,"tunes":3557},{"text":1400,"level":253},{},{"id":1403,"data":3559,"type":218,"tunes":3560},{"text":1405},{},{"id":1408,"data":3562,"type":218,"tunes":3563},{"text":1410},{},{"id":1413,"data":3565,"type":218,"tunes":3566},{"text":1415},{},{"id":1418,"data":3568,"type":218,"tunes":3569},{"text":1420},{},{"id":1423,"data":3571,"type":218,"tunes":3572},{"text":1425},{},{"id":1428,"data":3574,"type":42,"tunes":3575},{"text":1430,"level":253},{},{"id":1433,"data":3577,"type":218,"tunes":3578},{"text":1435},{},{"id":1438,"data":3580,"type":218,"tunes":3581},{"text":1440},{},{"id":1443,"data":3583,"type":218,"tunes":3584},{"text":1445},{},{"id":1448,"data":3586,"type":42,"tunes":3587},{"text":1450,"level":253},{},{"id":1453,"data":3589,"type":218,"tunes":3590},{"text":1455},{},{"id":1458,"data":3592,"type":218,"tunes":3593},{"text":1460},{},{"id":1463,"data":3595,"type":218,"tunes":3596},{"text":1465},{},{"id":1468,"data":3598,"type":661,"tunes":3599},{"url":1470,"title":1471,"excerpt":1472,"ctaLabel":1473},{},{"id":1476,"data":3601,"type":42,"tunes":3602},{"text":1478,"level":253},{},{"id":1481,"data":3604,"type":1481,"tunes":3616},{"items":3605,"title":1524},[3606,3607,3608,3609,3610,3611,3612,3613,3614,3615],{"id":1485,"answer":1486,"question":1487},{"id":1489,"answer":1490,"question":1491},{"id":1493,"answer":1494,"question":1495},{"id":1497,"answer":1498,"question":1499},{"id":1501,"answer":1502,"question":1503},{"id":1505,"answer":1506,"question":1507},{"id":1509,"answer":1510,"question":1511},{"id":1513,"answer":1514,"question":1515},{"id":1517,"answer":1518,"question":1519},{"id":1521,"answer":1522,"question":1523},{},{"id":1527,"data":3618,"type":42,"tunes":3619},{"text":1529,"level":253},{},{"id":1532,"data":3621,"type":1532,"tunes":3635},{"title":1534,"entries":3622},[3623,3624,3625,3626,3627,3628,3629,3630,3631,3632,3633,3634],{"term":1537,"anchor":1538,"definition":1539},{"term":1541,"anchor":1542,"definition":1543},{"term":1545,"anchor":1546,"definition":1547},{"term":1549,"anchor":1550,"definition":1551},{"term":367,"anchor":1553,"definition":1554},{"term":1556,"anchor":1557,"definition":1558},{"term":1560,"anchor":1561,"definition":1562},{"term":1564,"anchor":1565,"definition":1566},{"term":1568,"anchor":1569,"definition":1570},{"term":1572,"anchor":1573,"definition":1574},{"term":1576,"anchor":1577,"definition":1578},{"term":1580,"anchor":1581,"definition":1582},{},{"id":1585,"data":3637,"type":42,"tunes":3638},{"text":1587,"level":253},{},{"id":1590,"data":3640,"type":218,"tunes":3641},{"text":1592},{},{"id":1595,"data":3643,"type":218,"tunes":3644},{"text":1597},{},{"id":1600,"data":3646,"type":218,"tunes":3647},{"text":1602},{},{"id":1605,"data":3649,"type":42,"tunes":3650},{"text":1607,"level":253},{},{"id":1610,"data":3652,"type":218,"tunes":3653},{"text":1612},{},{"id":1615,"data":3655,"type":1622,"tunes":3658},{"link":1617,"meta":3656},{"image":3657,"title":1620,"description":1621},{"url":419},{},{"id":1625,"data":3660,"type":1622,"tunes":3663},{"link":1627,"meta":3661},{"image":3662,"title":1630,"description":1631},{"url":419},{},{"id":1634,"data":3665,"type":1622,"tunes":3668},{"link":1636,"meta":3666},{"image":3667,"title":1639,"description":1640},{"url":419},{},{"id":1643,"data":3670,"type":1622,"tunes":3673},{"link":1645,"meta":3671},{"image":3672,"title":1648,"description":1649},{"url":419},{},{"id":1652,"data":3675,"type":1622,"tunes":3678},{"link":1654,"meta":3676},{"image":3677,"title":1657,"description":1658},{"url":419},{},{"id":1661,"data":3680,"type":1622,"tunes":3683},{"link":1663,"meta":3681},{"image":3682,"title":1666,"description":1667},{"url":419},{},{"id":1670,"data":3685,"type":1622,"tunes":3688},{"link":1672,"meta":3686},{"image":3687,"title":1675,"description":1676},{"url":419},{},{"id":1679,"data":3690,"type":1622,"tunes":3693},{"link":1681,"meta":3691},{"image":3692,"title":1684,"description":1685},{"url":419},{},"Post erfolgreich abgerufen",{"items":3696,"source":3780,"manualIds":3781,"manualMatchedIds":3782},[3697,3704,3711,3718,3724,3731,3738,3745,3752,3759,3766,3773],{"id":3698,"slug":3699,"title":3700,"excerpt":3701,"featuredImage":3702,"publishedAt":3703},"495","sovereign-ai-control-of-models-data-infrastructure-and-dependencies","Suverena AI: Kontrola modela, podataka, infrastrukture i zavisnosti","Suverena AI se odnosi na efektivnu kontrolu nad modelima, podacima, infrastrukturom, softverom, operacijama i strateškim zavisnostima — a ne samo na to gde je AI model hostovan.","\u002Fuploads\u002F2026\u002F10\u002Fsovereign-ai-control-of-models-data-infrastructure-and-dependencies-1791488833132-niy85x.webp","2026-10-08T15:45:00.000Z",{"id":3705,"slug":3706,"title":3707,"excerpt":3708,"featuredImage":3709,"publishedAt":3710},"486","source-of-truth-in-ai-systems-where-reliable-knowledge-actually-comes-from","Izvor istine u AI sistemima: Odakle pouzdano znanje zaista dolazi","Izvor istine definiše koji je izvor merodavan za određenu činjenicu ili stanje. Saznajte kako se razlikuje od RAG-a, porekla, memorije, konteksta, vektorskih baza podataka i sistema evidencije.","\u002Fuploads\u002F2026\u002F10\u002Fsource-of-truth-in-ai-systems-where-reliable-knowledge-actually-comes-from-1791479103235-6bq9em.webp","2026-10-08T13:02:00.000Z",{"id":3712,"slug":3713,"title":3714,"excerpt":3715,"featuredImage":3716,"publishedAt":3717},"480","when-should-an-ai-stop-trusting-its-own-knowledge-the-retrieval-trigger","Kada bi AI trebalo da prestane da veruje sopstvenom znanju? — Okidač za pretragu","AI model ne zahteva pretragu za svako pitanje. Važan problem je znati kada njegovo interno znanje više nije dovoljno. Okidač za pretragu je praktična granica odlučivanja koja određuje kada AI sistem treba da prestane da se oslanja isključivo na znanje modela i pribavi spoljne dokaze pre odgovaranja.","\u002Fuploads\u002F2026\u002F09\u002Fwhen-should-an-ai-stop-trusting-its-own-knowledge-the-retrieval-trigger-1790574991244-f4rpyg.webp","2026-09-28T01:49:00.000Z",{"id":3719,"slug":3720,"title":658,"excerpt":3721,"featuredImage":3722,"publishedAt":3723},"478","what-is-rag-the-simplest-explanation-of-how-it-works","RAG zvuči komplikovano, ali ideja je jednostavna: pre nego što AI odgovori, prvo potraži korisne informacije iz izvora znanja i daje te informacije jezičkom modelu. Ovaj vodič objašnjava RAG, LLM-ove, stanje, memoriju i alate koristeći jedan jednostavan mentalni model.","\u002Fuploads\u002F2026\u002F09\u002Fwhat-is-rag-the-simplest-explanation-of-how-it-works-1790377492124-khjagt.webp","2026-09-25T19:03:00.000Z",{"id":3725,"slug":3726,"title":3727,"excerpt":3728,"featuredImage":3729,"publishedAt":3730},"490","rbac-vs-tenant-isolation-two-different-security-boundaries","RBAC naspram izolacije zakupaca: dve različite bezbednosne granice","RBAC kontroliše šta korisnik sme da radi; izolacija zakupaca kontroliše kojim resursima tog zakupca ta radnja može da pristupi. Saznajte zašto bezbednost višekorisničkog SaaS-a zahteva obe granice.","\u002Fuploads\u002F2026\u002F10\u002Frbac-vs-tenant-isolation-two-different-security-boundaries-1791485111528-qqtzby.webp","2026-10-08T14:43:00.000Z",{"id":3732,"slug":3733,"title":3734,"excerpt":3735,"featuredImage":3736,"publishedAt":3737},"467","the-answer-validity-boundary-the-missing-layer-between-relevance-and-reliable-ai-answers","Granica valjanosti odgovora: Nedostajući sloj između relevantnosti i pouzdanih AI odgovora","Izvor može biti relevantan, autoritativan i ipak pogrešan za pitanje koje se postavlja. Sloj koji nedostaje je primenljivost: uslovi pod kojima odgovor važi i promene koje ga primoravaju na preispitivanje. Ovaj članak predstavlja Granicu važenja odgovora kao obrazac za dizajn izvora za ljude, AI pretragu i RAG sisteme.","\u002Fuploads\u002F2026\u002F09\u002Fthe-answer-validity-boundary-the-missing-layer-between-relevance-and-reliable-ai-answers-1790272901306-1g5jly.webp","2026-09-24T11:59:00.000Z",{"id":3739,"slug":3740,"title":3741,"excerpt":3742,"featuredImage":3743,"publishedAt":3744},"381","enterprise-grade-multi-tenant-architecture-for-an-international-platform","Višezakupna arhitektura korporativnog nivoa za međunarodnu platformu","Loving Rocks je platforma za venčanja poslovne klase, dizajnirana sa istinskom više-zakupnom arhitekturom, izolovanim bazama podataka po zakupcu i ugrađenom internacionalizacijom za globalnu skalabilnost, bezbednost i dugoročnu operativnu stabilnost.","\u002Fuploads\u002F2026\u002F01\u002Fenterprise-grade-multi-tenant-architecture-for-an-international-platform-1769789121298-b6v7ak.webp","2026-01-30T12:04:00.000Z",{"id":3746,"slug":3747,"title":3748,"excerpt":3749,"featuredImage":3750,"publishedAt":3751},"470","what-should-an-ai-agent-remember-forget-recompute-or-retrieve-again","Šta bi AI agent trebalo da zapamti, zaboravi, ponovo izračuna ili ponovo preuzme?","Dugotrajni agenti ne bi trebalo da pamte sve. Ovaj članak pruža praktičan model životnog ciklusa za odlučivanje o tome šta pripada trajnoj memoriji, šta bi trebalo ponovo preuzeti, šta je bezbednije ponovo izračunati i šta bi trebalo da istekne ili bude zamenjeno.","\u002Fuploads\u002F2026\u002F09\u002Fwhat-should-an-ai-agent-remember-forget-recompute-or-retrieve-again-1790351131087-iehz28.webp","2026-09-25T09:43:00.000Z",{"id":3753,"slug":3754,"title":3755,"excerpt":3756,"featuredImage":3757,"publishedAt":3758},"485","enterprise-ai-architecture-what-changes-when-ai-enters-a-company","Enterprise AI arhitektura: Šta se menja kada AI uđe u kompaniju","Enterprise AI arhitektura objašnjava kako AI menja korporativne sisteme kroz autoritet podataka, identitet, dozvole, provajdere, rizik, upravljanje, evaluaciju, usklađenost i operacije.","\u002Fuploads\u002F2026\u002F10\u002Fenterprise-ai-architecture-what-changes-when-ai-enters-a-company-1791478161363-czrwaq.webp","2026-10-08T10:48:00.000Z",{"id":3760,"slug":3761,"title":3762,"excerpt":3763,"featuredImage":3764,"publishedAt":3765},"476","mcp-vs-a2a-vs-ucp-vs-ap2-vs-a2ui-the-agent-protocol-stack-explained","MCP vs A2A vs UCP vs AP2 vs A2UI: Objašnjen stek agentskih protokola","MCP, A2A, UCP, AP2 i A2UI se često predstavljaju kao konkurentski standardi za agente. Oni uglavnom rešavaju različite probleme interoperabilnosti. Ovaj vodič mapira svaki protokol na granicu koju zapravo standardizuje—i pokazuje kako oni mogu da rade zajedno u jednom produkcionom sistemu.","\u002Fuploads\u002F2026\u002F09\u002Fmcp-vs-a2a-vs-ucp-vs-ap2-vs-a2ui-the-agent-protocol-stack-explained-1790352625869-2ezle0.webp","2026-09-25T12:09:00.000Z",{"id":3767,"slug":3768,"title":3769,"excerpt":3770,"featuredImage":3771,"publishedAt":3772},"489","agentic-ai-explained-when-an-ai-system-can-plan-use-tools-and-act","Agentna AI objašnjena: Kada AI sistem može da planira, koristi alate i deluje","Agentna AI koristi modele unutar višekoračnih izvršnih petlji gde mogu da biraju alate, posmatraju rezultate, ažuriraju stanje i prilagode svoju sledeću akciju unutar eksplicitnih granica izvršavanja i dozvola.","\u002Fuploads\u002F2026\u002F10\u002Fagentic-ai-explained-when-an-ai-system-can-plan-use-tools-and-act-1791481499084-wnji2a.webp","2026-10-08T11:43:00.000Z",{"id":3774,"slug":3775,"title":3776,"excerpt":3777,"featuredImage":3778,"publishedAt":3779},"484","what-is-an-ai-platform-architect-models-data-runtime-security-and-operations","Šta je arhitekta AI platforme? Modeli, podaci, izvršno okruženje, bezbednost i operacije","Arhitekta AI platforme projektuje višekratno upotrebljive AI temelje kroz modele, provajdere, pretragu, agente, identitet, bezbednost, evaluaciju, opservabilnost i operacije.","\u002Fuploads\u002F2026\u002F10\u002Fwhat-is-an-ai-platform-architect-models-data-runtime-security-and-operations-1791477229171-ou3zcc.webp","2026-10-08T12:32:00.000Z","fallback",[],[]]