air-gapped

The One File is a self contained visual planning and replay environment for networks, smart homes, sports plays, mind maps, facilities, and infrastructure; offline first, encrypted, animated, and optionally multiplayer.

Local-first AI-powered document intelligence platform for investigative journalism

Lightweight multi-format artifact registry. 15 formats: Docker, Maven, npm, PyPI, Cargo, Go, Raw, RubyGems, Terraform, Ansible Galaxy, NuGet, Pub, Conan, RPM, and Debian/APT. Single binary, zero dependencies, < 50 MB RAM idle.

🔐 Hardware TOTP Authenticator & Password Manager | 8-layer security | AES-256 | BLE Keyboard | Offline | ESP32 T-Display | T-Display S3

Open-source offline voice dictation — a free alternative to Typeless. 100% local, zero internet, ideal for air-gapped & classified environments. SenseVoice + DirectML GPU, ~34MB, hotkey-driven. 纯离线语音输入，Typeless 免费平替，数据永不出设备，适合党政机关等涉密场景。

A local-first coding agent that doesn't take "done" on faith: the engine keeps the run going until the project's own tests pass, and every green run leaves a receipt anyone can replay. Built for one small model on one machine (LM Studio, MLX) or any OpenAI-compatible endpoint. No telemetry. macOS · Linux · Windows.

Make Instructions: Airgapped raspberry pi computer for working with blockchains featuring LUKS full disk encryption and using qr-codes to pass encrypted files and offline transaction instructions across the airgap.

Offline Ed25519 signing toolkit - sign files, verify signatures, exchange keys via QR. Pure-Python RFC 8032, scrypt passphrases, ASCII armor. Air-gapped signing playground.

Runtime-agnostic Kubernetes governance for AI agents: gVisor isolation, egress policy, cost controls, and offline audit verification primitives.

An example implementation of offline activation for air-gapped machines using QR codes, signed and encrypted license files, and a mobile device.

Offline cryptographic core of Hypervault: Argon2id, HKDF, AES-256-GCM, HV1 vault format, BIP-32/39, SLIP-10, air-gapped signing. Pure Kotlin, single dependency (Bouncy Castle).

Package any web, server, or CLI app - and on-device AI models - into a single self-extracting binary. No runtime to install on the target. SHA-256-verified, Ed25519-signed, SISR delta updates. Built for clinics, farms, and fleets with no reliable connection.

Zero-install, air-gapped, self-decrypting HTML vaults using AES-256-GCM and native WebCrypto.

Transfer files via animated QR codes. No network, no Bluetooth, no USB — just a screen and a camera.

Single-file, client-side AES-256 encryption for files, text, and BIP-39 seeds. No dependencies, no servers, works offline.

misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push/feed fetch) based on a set of customizable block rules.

Air-gapped file transfer through series of QR codes.

Hardware signer and key storage for Substrate ecosystem

Open-source Prompt Firewall — deflect up to 95% of redundant LLM traffic before it leaves your infrastructure. Documents: https://isartor-ai.github.io/Isartor/index.html

LLM proxy with built-in DLP and regulatory compliance. Redacts secrets before they reach the API. EU AI Act, GDPR, HDS/PCI DSS ready. Multi-provider failover, live TUI, virtual keys, fan-out. 6 MB, zero deps. Rust.