Runs air-gapped in mission systems, command nodes and at the forward edge — containing intrusion within doctrine, with no foreign disclosure.