Glossary
Air-Gapped Environment
An air-gapped environment is deliberately kept disconnected from any external network, permanently rather than intermittently, which means an authorization policy update can't be pushed to it the ordinary way at all — it has to be physically transported by some other means and applied locally. This is a fundamentally different operating condition from a device that's merely offline right now and will reconnect eventually; an air-gapped system may never reconnect by design.
Every assumption a typical authorization architecture makes about being able to push an update, revoke a credential remotely, or check a live policy source has to be re-examined for an environment like this — the update mechanism itself needs a real, physical process, not just a network call that would work fine anywhere else.