Does CISGuard deploy on air-gapped networks?

More context

An air-gapped network is one with no physical or logical path to the public internet, used where the consequences of exfiltration or remote compromise are unacceptable: classified government systems, critical infrastructure control networks, and defense enclaves. Any tool intended for these environments has to assume it will never reach a vendor cloud for licensing, updates, or telemetry, because that connectivity simply does not exist by design.

Supporting air-gapped operation as a first-class mode, rather than a stripped-down fallback, means the update path is built around signed offline media and the running system expects zero outbound calls. That lets a scanner keep its benchmark content current through a controlled import process while satisfying the strict connectivity rules of high-assurance impact levels, instead of forcing operators to choose between staying current and staying isolated.