Air Gap Isolation

Air-gapped refers to a computing environment physically completely disconnected from external networks, where all storage, processing, and retrieval are done on local hardware.

Air-gap isolation physically severs the connection between a computing system and external networks, and is currently the strongest known form of network isolation, widely used in high-security settings such as nuclear power plant control systems and weapons systems.

Air-gap isolation does not depend on the correctness of configuration, and therefore cannot be bypassed by network-layer configuration flaws, but it introduces significant engineering costs such as requiring data transfer via physical media.

For highly autonomous agents with network operation capabilities, air-gap-level physical isolation should be used rather than relying solely on software-level network policies.

A compromise isolation direction for AI agent evaluation is verifiable unidirectional data flow, which allows test logs to be output externally while physically blocking active network connections.

Air-gap isolation is an extremely powerful protective measure, constituting a higher security baseline compared to purely software-based isolation.

Academic research has demonstrated methods of transmitting data from air-gapped systems using CPU fan speed acoustics (Fansmitter), hard disk read/write magnetic fields (DiskFiltration), screen brightness variations, and thermal radiation, with these attacks having extremely low bandwidth (typically a few to tens of bits per second).

Top-secret data cannot enter public cloud environments; the mainstream approach is to deploy vetted model versions in air-gapped networks or government-dedicated clouds such as AWS GovCloud or Microsoft Azure Government.

The Stuxnet worm's attack on Iranian nuclear facilities demonstrated that cyberattacks targeting industrial control systems can cause destruction in the physical world.