AIR-GAP CERTIFIED WORKFLOW

Frontier AI.
Inside your fence line.

Your data can't leave the building. Fine, the machine moves in. NetRay deploys, fine-tunes, and operates frontier-class language models entirely inside your perimeter: your racks, your rules, zero egress. The models get smarter. Your data goes nowhere.

Zero egress, provableITAR / CMMC / DFARS alignedRuns fully air-gappedYou own the weights
ITAR EAR CMMC 2.0 L2 DFARS 252.204-7012 NIST 800-171 STIG-hardened FIPS 140-2 crypto IL4/IL5 patterns AS9100 shops Zero-egress audits ITAR EAR CMMC 2.0 L2 DFARS 252.204-7012 NIST 800-171 STIG-hardened FIPS 140-2 crypto IL4/IL5 patterns AS9100 shops Zero-egress audits

“No cloud” was never the real requirement.

The requirement was always “no leaks.” Somewhere along the way, that got translated into “no AI,” and your competitors who read the requirement correctly are now three years ahead on tooling. Public copilots are off the table, one pasted paragraph of export-controlled text into a consumer chatbot is a federal reporting event, not an oops. But the alternative was never abstinence. It's ownership.

87%
of A&D firms restrict public AI tools
1 paragraph
pasted into a consumer chatbot = a reportable event
0
external calls, what your auditor wants to see

We install the machine inside your walls.

Six service lines. One outcome: a model that knows your domain, runs on your iron, and answers to nobody outside your badge system.

Forty years of test reports, MRB dispositions, tech orders, and the folder called FINAL_v7_ACTUALLY_FINAL. Fine-tuning fixes that, without a single document leaving the building.

TechniqueWhenData appetiteTypical run
Continued pretrainingDeep domain vocabulary (avionics, metallurgy, MIL-specs)100M–1B+ tokens of corpusdays–weeks, multi-GPU
SFT, full fine-tuneMaximum quality, dense weights you own outright10k–100k+ curated pairsdays
SFT: LoRA / QLoRA90% of the win at 5% of the compute; per-team adapters1k–50k pairshours
Preference alignment (DPO)Tone, safety, refusal behavior tuned to your policy5k–20k preference pairshours
Distillation → SLMPush knowledge into a small model for edge/enclave useteacher model + task setdays
Quantization (AWQ/GGUF/FP8)Same brain, half the ironnone (post-training)hours

Every run ends the same way: a signed model card, a frozen eval score, and weights in YOUR registry. We don't keep a copy. We couldn't if we wanted to, we did the work inside your perimeter, remember?

Curated dataset pipeline (dedup, marking scrub, quality filters)Training runs with full telemetryEval harness + regression gateSigned model cardRollback plan

The Fine-Tuning Lab

Configure a run. Watch the loss curve drop. Get a model card, the same artifact we hand you after a real engagement.

Base model

Technique

Corpus

Simulate your build

1 · What grade of data are you holding?

2 · Try to move it.

ITAR/EAR

This data doesn't commute. Bring the machine to it.

Every grade you selected is restricted from commercial cloud. The model, the fine-tuning run, and every query stay inside your perimeter.

on-premise or hybrid-local onlyzero-egress network policy

Illustrative. Your compliance officer outranks this widget, bring them to the assessment.

Rough hardware sizing

Daily active users250
Tokens / day (millions)5M
Hardware tier
4-GPU node
Est. power draw
~8 kW
0 bytes
of client data ever left a perimeter
+34%
domain-task lift, typical fine-tune
8.4M
tokens/day served on one 4-GPU node
6 weeks
bare rack → first fine-tuned answer

“Our NFF rate dropped 73% in the first quarter. We stopped shipping boards back that weren't actually broken, and none of the diagnosis data ever left our facility.”

Defense Contractor: PCBSpot deployment, 100% on-premise

Frequently asked

Bring the machine inside.

A 30-minute deployment assessment: your data grades, your hardware reality, a straight answer on what a fine-tuned on-prem stack costs , and what it saves. Run by people who've shipped it, not sold it.

30 min with a founderCustom ROI estimateNo commitment

Typically responds within 4 hours