> ## Documentation Index
> Fetch the complete documentation index at: https://doc.blueapi.ir/llms.txt
> Use this file to discover all available pages before exploring further.

# Offline Operations: Air-Gapped Environment Runbook

> Air-gapped operations with no egress, signed bundles, one-way log transfer, and forbidden operations. Runbook flowchart and security rules.

OfflineOperations defines the rules and procedures for running EMEP in an air-gapped environment. This page specifies the no-egress policy, signed bundle ingestion, dataset transfer, monitoring constraints, and the list of forbidden operations.

## No Egress Policy

Air-gapped environments permit no outbound network connections. All data entering the environment must pass through a controlled one-way transfer mechanism. Model weights, inference outputs, training checkpoints, and experiment metadata must never leave the air-gap.

## Signed Bundle Ingestion

All incoming bundles are verified before import.

1. Signature validation against the pre-installed public key
2. Manifest hash verification for every file
3. Dependency bundle completeness check
4. SBOM audit against the approved dependency list

Bundles that fail any check are quarantined and flagged for security review.

## Dataset Transfer

Datasets enter the air-gap as signed, read-only bundles. The bundle contains:

* Dataset files with per-file hashes
* License and provenance metadata
* Processing script references from [DatasetRegistry](/tracking/dataset-registry)
* Usage restrictions if applicable

Datasets are imported into [DatasetRegistry](/tracking/dataset-registry) and tagged as OFFLINE. They cannot be modified after import.

## Log Egress via One-Way Transfer

System logs and aggregated metrics may exit the air-gap through a one-way transfer mechanism. The transfer is unidirectional and physically enforced. Logs are sanitized to remove model weights, inference content, and user prompts before transfer.

| Log Type       | Sanitization               | Transfer Frequency |
| -------------- | -------------------------- | ------------------ |
| System metrics | Aggregate only             | Hourly             |
| Error logs     | Stack traces only; no data | Daily              |
| Audit logs     | Anonymized IDs             | Daily              |

## Monitoring in Air-Gap

Monitoring runs entirely inside the air-gap. [Observability](/architecture/observability) collects metrics from [InferenceBackend](/deployment/inference), [GPU Health](/operations/gpu-health), and [Monitoring](/operations/monitoring). Alerting is internal only. External paging integration is not available in air-gapped mode.

## Runbook Flowchart

The flowchart below shows the standard operational runbook for an air-gapped deployment.

```mermaid theme={null}
flowchart TD
    START([START]) --> CHECK[Check: Alert or Scheduled Task]
    CHECK --> TYPE{Task Type?}
    TYPE -->|Model Update| UPDATE[Follow Model Update Protocol]
    TYPE -->|Dataset Import| DATASET[Verify + Import Signed Dataset Bundle]
    TYPE -->|Log Export| LOG[Sanitize + One-Way Transfer]
    TYPE -->|Incident| INCIDENT[Follow Disaster Recovery Runbook]
    UPDATE --> VERIFY[Verify Integrity]
    DATASET --> VERIFY
    VERIFY --> PASS{Pass?}
    PASS -->|YES| COMPLETE[Complete + Record]
    PASS -->|NO| QUARANTINE[Quarantine + Escalate]
    LOG --> COMPLETE
    INCIDENT --> COMPLETE
    COMPLETE --> END_PASS([END])
    QUARANTINE --> END_FAIL([END: ESCALATED])
```

## Forbidden Operations

The following operations are prohibited in all air-gapped environments:

* Outbound network connections from any host
* USB or removable media write operations except by authorized transfer station
* Unverified code execution outside the signed bundle manifest
* Model weight export in any format
* Inference output storage on transferable media
* Remote shell or tunneling tools
* Automatic update checks to external repositories

<Warning>
  Violation of any forbidden operation triggers an immediate security lockdown and incident response. The lockdown isolates the affected host and preserves forensic state.
</Warning>

## Integration

OfflineOperations is enforced by [Security Requirements](/security/security-requirements) and [Offline Security](/security/offline-security). Model updates follow [Model Update Protocol](/enterprise/model-update-protocol). Rollbacks follow [Model Rollback](/enterprise/model-rollback).