Security setup
What SDI sets up on every box before it goes live. The install script does part of it.
On-site AI box · security setup checklist (draft) · Demo · dummy data. Box: ____________ · Checked by: ____________ · Date: ____________
Disk
- Disk encryptedFileVault encrypts the disk, so a stolen box gives away nothing.
- Recovery key kept by the client, not on the boxOnly the client can unlock the disk if every password is lost.
- Only agreed folders are indexedThe box can only answer from documents the client chose to share with it.
Network
- Firewall onThe macOS firewall, in stealth mode, ignores connection attempts the box doesn't expect.
- No incoming ports open from the internetNothing outside the office can start a connection to the box.
- Maintenance only through the outgoing-only tunnelSDI reaches the box only over a link the box opens, and the client can cut it.
- Apps reachable from the office network onlyStaff can use the box; guests on the guest Wi-Fi can't.
Access
- Day-to-day work runs under a standard user; installation needs an admin onceThe document app and jobs run without admin rights, so a bug in them can't change the system.
- Automatic login offAfter a power cut, someone on site unlocks the disk; nobody else can.
- Maintenance logins use keys, not passwordsSSH keys can't be guessed or reused from another leak.
- One named key per SDI engineerEvery maintenance session can be traced to a person, and one key can be revoked alone.
Updates
- Automatic security updates onSecurity fixes arrive without waiting for a maintenance visit.
- Monthly update window agreed with the clientBigger updates and restarts happen at a known time, not by surprise.
- Model and app versions pinnedAn update never silently changes how answers are produced.
Backups
- Encrypted backupsTime Machine to an encrypted disk on site: a broken box loses nothing, and the backup never leaves the office.
- Restore tested every quarterA backup only counts if it restores.
Monitoring
- Access log kept on the boxThe client can see who used the box and when, including SDI.
- Health report without document contentSDI sees disk, memory and update status, never your documents.
- Alert when the tunnel or a backup failsProblems get noticed before users notice them.