Quilzomanual

Run Quilzo on an isolated or air-gapped network

No connection leaves the host, and what crosses the gap is recorded and checked.

  1. Refuse every outbound connection

    quilzo config set network.mode offline
quilzo network

  2. Use a model on this machine

    Point the gateway at a local OpenAI-compatible server on loopback (see Models). Loopback is not egress, so it keeps working offline.

  3. Mark what is published

    quilzo marking shows the classification scheme, if one is set; published pages carry the banner it requires.

  4. Carry exports across the gap

    quilzo export json --to out/
quilzo transfer record out/ --approved-by dana
quilzo transfer verify out/        # on the other side

  5. Keep self-checks current offline

    quilzo self update vulndb.zip   # a newer Go vulnerability database, read offline
quilzo self check

  6. Seal what is stored

    quilzo vault enable