It is enforced, not promised
Airgap mode is a firewall rule dropping outbound traffic at the machine itself — not a preference inside an application that the next thing you install could ignore.
Garnet
Cut the cable. It keeps working.
Garnet is a private AI system that runs on hardware you own, in your building. It can be taken fully off the network — not throttled, not sandboxed, disconnected — and it carries on answering, because nothing it does needed the outside.
The airgap
One switch, and nothing can leave
Most “private” AI means a different company's server with a better contract. This is the other kind: the network can be cut at the machine, and the system is built to notice and carry on.
The software knows
The application reads the airgap state and shows it for as long as it is on. Anything that would have needed the outside says so plainly, rather than hanging or failing in a way you have to interpret.
The work is unaffected
Chat, documents, search across your own material, generation and code all run on the machine. Cutting the network does not degrade them, because none of them was reaching out to begin with.
And what stops
Web search, fetching a page, and pulling new models or updates. Those need the outside by definition. You turn the airgap off to do them, deliberately, and turn it back on.
The application
One program, not a stack you assemble
Garnet is a desktop application that opens on the machine. Everything below is a surface inside it, sharing the same models, the same documents and the same approvals.
Talk to it
Chat, with your own models
A full chat workspace against models running on your machine — switch between them, compare them, keep the thread. Nothing is metered, and nothing is sent anywhere to be answered.
Make things
A production studio, not a toy
Images, video, 3D and audio, generated locally: stills, motion and image-to-video, mesh generation, music and speech. The same card that answers your questions renders the work.
Write code
It can build
A coding surface with an agent that reads the repository, proposes changes and runs them past you. It works on the code already on the machine, not on a copy someone else is holding.
Know things
Your material, indexed
Documents ingested, chunked, embedded and searchable with their sources shown. Contracts, case files, correspondence, drawings — the things that were never going to be pasted into a public chat box.
Run the work
Agents that ask permission
Standing agents handle recurring work and queue anything outward for a person. Decisions are signed when you make them and written to an audit trail.
Watch it
Nothing is hidden from you
Model manager, engine monitor, benchmarks and system health are part of the application. You can see which models are loaded, what they cost in memory, and what the machine is doing now.
Control
It asks before it acts
Agents can do a great deal on their own. What they cannot do is anything outward or irreversible without a person saying yes: publishing, deploying, spending, or sending mail. Four switches, and they start off.
Decisions queue where you will see them, are signed when you make them, and are written to an audit trail. This is the screen as it ships, not a concept.
The machine
Delivered, installed, yours
A single workstation-class machine with a high-end GPU, specified to the work you actually do and built before it ships. It arrives, it is installed where you want it, and it stays. No tenancy, no region to choose, no per-token bill.
We don't publish part lists — ours or yours. The specification is part of the conversation about what you need it to handle.
In build · Garnet Law
The same machine, for a law firm.
A separate application sharing the same hardware: matters, privileged documents, discovery and correspondence, with citations shown and privilege enforced. Offline by architecture — the shell ships with no network plugins and no updater.
It is not finished and we are not selling it yet. There are no deployments and no customers, and the screens we can show you use synthetic matters.
Before you ask
What we don't do
Published here rather than left for a call.
We don't sell a download
There is no public build to install this afternoon. A Garnet is specified, built and handed over, which takes time and is the reason it fits.
Airgapped costs you things
With the network cut there is no web search, no fetching a page and no pulling new models. That is the trade, and we would rather you knew it before buying than discovered it after.
We don't pretend it's finished
Parts of the system are in daily use and parts are still being built. We will tell you which is which for the things you care about, before money changes hands.
We don't publish our internals
You won't find our infrastructure on this website. If you need that depth for due diligence, ask, and we will take you through it properly.