Skip to content
DEPLOYMENT · ON PREMISES · NO EGRESS

Air-Gapped Satellite Anomaly Investigation

Some telemetry can never leave the building. Jantar runs with the network off: local stores, deterministic reasoning, and every network data source refused. This page says what that means, and what it costs.

Deployment and pricing

Every network data source is refused

In air-gap mode, a source that would reach the internet cannot be selected: the public SatNOGS feed, live space-weather feeds, a tool server over HTTP. The deployment stops rather than quietly reaching out.

Reasoning is deterministic

Air-gap mode refuses to start with a hosted language model. The investigation runs on deterministic scaffolding: the same telemetry gives the same report, every time.

The stores are yours

The knowledge graph, the document index and the audit ledger run on your hardware. The citation checks run offline, with their models built into the image.

A station you operate is allowed

Frames your own antenna received can be read from local disk. The optional decoder must be on the same machine, because from inside the process a local name and a remote one look alike.

The same answer in both modes

Every reference investigation in the test suite runs twice, once air-gapped and once in the cloud configuration, and both must pass before a release.

Still advisory

Air-gapped or not, Jantar proposes and a human authorises. At A0, the default, it constructs no command candidate; A1 staging is an opt-in, off unless a deployment enables it. No route transmits, and nothing an LLM writes can reach a transmitter.

THE LIMIT

What air-gap mode costs

Read how an investigation runs in how to investigate a satellite anomaly, or see our security and authority model.