On-premises and air-gapped

PromptGlass runs with no outbound internet access at all. Everything it needs ships in a signed offline bundle: container images, the Helm chart, detector models and the AI app catalog. Updates arrive the same way. This is the deployment model for defense, government, critical infrastructure and any organization whose policy forbids sending telemetry to a vendor.

What is in the offline bundle

Artifact	Purpose
images/*.tar	All container images (OCI archives)
charts/promptglass-<version>.tgz	Helm chart
models/	Detector and classifier model weights
catalog/ai-apps-<date>.json.sig	Signed AI app catalog snapshot
SHA256SUMS, SHA256SUMS.sig	Integrity manifest signed with the PromptGlass release key
SIGNATURE	Signature scheme used for SHA256SUMS.sig: cosign or ed25519

Install

# 1. Verify the bundle on a transfer workstation (signature + every checksum)
promptglass airgap verify --bundle ./promptglass-2026.11.0 --public-key promptglass-release.pub

# 2. Load images into your internal registry
promptglass airgap push --bundle ./promptglass-2026.11.0 \
  --registry harbor.internal.example/promptglass

# 3. Install the chart from the bundle
helm install promptglass ./charts/promptglass-2026.11.0.tgz -n promptglass --create-namespace \
  -f values.yaml \
  --set global.imageRegistry=harbor.internal.example/promptglass \
  --set global.airgapped=true

airgap verify checks the release signature over SHA256SUMS, then the SHA-256 of every file. If you prefer standard tools, verify with cosign (cosign verify-blob --key promptglass-release.pub --signature SHA256SUMS.sig SHA256SUMS) or, for ed25519 bundles, OpenSSL (openssl pkeyutl -verify -pubin -inkey promptglass-release.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig), followed by sha256sum -c SHA256SUMS.

Setting global.airgapped=true disables every outbound call: catalog sync, license phone-home and update checks. The license is validated offline from a signed file.

Updating the AI app catalog

The catalog lets the gateway and extension recognize AI apps and assign risk scores. In air-gapped mode, import new snapshots by hand:

promptglass catalog import ./catalog/ai-apps-2026-11-01.json.sig
promptglass catalog status

We publish catalog snapshots weekly. Most air-gapped sites import them monthly as part of their regular transfer process.

Keys and HSMs

Set encryption.provider: pkcs11 to wrap content data keys with an on-premises HSM (Thales Luna, Entrust nShield or any PKCS#11 device), or vault-transit for HashiCorp Vault.

encryption:
  provider: pkcs11
  pkcs11:
    libraryPath: /opt/hsm/lib/libCryptoki2_64.so
    slot: 0
    keyLabel: promptglass-kek
    pinSecret: promptglass-hsm-pin

Local and private models

Air-gapped sites usually run their own models (vLLM, Ollama, NVIDIA NIM, or Azure OpenAI in a sovereign cloud). Put them behind the gateway in API mode to get the same attribution, detection and cost accounting as for public AI. Set a cost per token for internal models so cost reports reflect your GPU spend.

Bare metal and VMs without Kubernetes

If you have no Kubernetes, PromptGlass ships an appliance image (OVA and QCOW2). It runs a single-node K3s distribution with the chart preinstalled. It suits sites up to about 2,000 users. Larger sites should use a supported Kubernetes distribution.