Sovereign / air-gapped mode

A single signed bundle that runs the entire OS inside your perimeter. Model weights pinned, updates arrive as offline signed deltas, and every telemetry byte is opt-in.

Generated manifest
{
  "version": "aios-sovereign-2026.1",
  "region": "on-prem",
  "egress": "blocked",
  "telemetry": "off",
  "autoUpdate": "manual-media",
  "seats": 250,
  "bundleGb": 42,
  "includes": [
    "router",
    "ledger",
    "vector-store",
    "webgpu-runtime",
    "policy-engine"
  ],
  "excludes": [
    "public-marketplace",
    "cloud-telemetry"
  ],
  "signature": "ed25519://53b1cf3a0e011fdae83418e8d45c5790"
}