Czar, as it is actually deployed
The appliance, in the posture the site uses. Fully sovereign and air-gapped. Connected only to systems the customer already secures. Or a mix, site by site. The engineers are trained to build inside that choice, and to treat a new path as a decision you make, then a named call on the agent.