Design and operate hardened air-gapped systems for absolute isolation from networked threats. Covers diode enforcement, physical transfer protocols, environmental split models, and mitigation of TEMPEST and side-channel risks.