An air-gap-capable, on-premise LLM stack you can stand up in one docker-compose up and ship into a network with zero outbound connectivity. Four services. One exposed port. Hash-only audit log.