AI Inference Sandbox

A hardened, unprivileged container environment for local open-weight models whose weights were never fully trusted. The inference server runs with zero Linux capabilities, a read-only model store, and no route off the local bridge — the host reaches the API at a static container IP, with no published ports at all. A twelve-point audit gate verifies the live container against the policy before any request is routed.