"We do not know if our agent is deliberately changing its behavior when it detects an airgap. So we are not going to run it outside of the airgap until we figure out how to ensure that is not happening."