Hardened single-user AI gateway for classified-enclave deployment. Hard fork of Enclawed with cloud channels, cloud LLM providers, and external search/web extensions removed; classification-policy framework always on.