Air-Gapped Cloud GPU Checklist

Network boundary

• Private subnets only (no public IP on inference hosts).
• No default outbound internet route.
• Explicitly controlled service endpoints only.

Model artifact flow

• Use vetted model artifacts and checksums.
• Store artifacts in controlled internal buckets or snapshots.
• Version-pin runtime and model identifiers used in review.

Runtime controls

• Session-based admin access with full audit logging.
• Immutable base images for inference hosts.
• No direct write-back to production branches from automated fixes.

Handover checklist

1. Document architecture and routing.
2. Document startup/shutdown and rotation procedures.
3. Document incident handling and containment steps.
4. Run a supervised dry run before first production review.

Related pages

• Air-gapped code review
• Local AI code review
• Trust Center