Sovereign / air-gapped mode

A single signed bundle that runs the entire OS inside your perimeter. Model weights pinned, updates arrive as offline signed deltas, and every telemetry byte is opt-in.

Region profile

Egress policy

Aggregated, hashed telemetry (never raw data) Auto-apply signed delta updates when connectedSeats

Bundle manifest (pinned runtime + open models)

{
  "version": "tlearth-sovereign-2026.1",
  "region": "on-prem",
  "egress": "blocked",
  "telemetry": "off",
  "autoUpdate": "manual-media",
  "seats": 250,
  "runtime": {
    "engine": "ollama/ollama:0.3.14",
    "ui": "ghcr.io/open-webui/open-webui:v0.3.35"
  },
  "models": [
    {
      "name": "llama3.1:8b",
      "role": "chat"
    },
    {
      "name": "qwen2.5-coder:7b",
      "role": "code"
    },
    {
      "name": "nomic-embed-text",
      "role": "embeddings"
    }
  ]
}