RESOURCES
Air-gapped, or connected only to systems the site already secures. Nothing else.
Articles in Connectivity
- Connectivity
What leaves the building from Substrate
Nothing. Not prompts, not camera frames, not documents, not adapters, not telemetry, not usage. This article walks through each category and explains why the answer is the same.
· 4 min read
- Connectivity
A mixed estate on one platform
Some sites in an estate are isolated and some are connected to the systems they already secure. Substrate runs both from the same platform, with posture set per site.
· 4 min read
- Connectivity
Running Substrate air-gapped
An air-gapped site runs every Substrate service with no path out: serving, retrieval, memory, adaptation, evaluation, and integrity checks, all from inside the enclosure.
· 4 min read
- Connectivity
Local Bridge and the systems the site secures
Local Bridge connects Substrate to the systems a site already runs and already protects: the warehouse system, the historian, the document store. It does not reach anything new.
· 4 min read
- Connectivity
Declared routes and default-deny egress
Substrate has no default path to the public internet. Every connection out of the appliance is a route someone declared, with a policy attached, and anything undeclared is refused.
· 4 min read