Airgap Propagation

Self-propagate Vant across airgapped environments using steganography.

┌─────────────────────────────────────────────────────┐
│          Airgap Propagation Flow                     │
│                                                      │
│  [Air-gapped] ◀── PNG image ───▶ [GitHub]          │
│       │                                        │    │
│       │                                        │    │
│  Decode ◀─── Steganography ─── Encode           │    │
│                                              │    │
│  No network needed!                             │    │
└─────────────────────────────────────────────────────┘

Why

For air-gapped environments:

How It Works

  1. Carrier agent has GitHub access → encodes config into image
  2. Target agent (airgapped) receives image → decodes → runs
  3. Target encodes response back → sends to carrier

Encode (Carrier)

Encode config into image:

# Encode into PNG
vant stego encode --input config.png --output propagated.png --data "GITHUB_TOKEN=xxx,GITHUB_REPO=owner/brain"

# Verify encoded
vant stego decode propagated.png

Transfer

Transfer via:

Decode (Target)

On air-gapped system:

# Decode from received image
vant stego decode propagated.png
# Output: GITHUB_TOKEN=xxx,GITHUB_REPO=owner/brain

# Use config
export GITHUB_TOKEN=xxx
vant start

Use Cases

Secure Transport

Transfer tokens without network:

Developer machine ─▶ USB ─▶ Air-gapped server
     │                           │
 Encode ──▶ PNG file ──▶ Decode ──▶ Export env

Cross-Environment Sync

Production (air-gapped) ─▶ USB ──▶ Staging
      │                        │
 Encode ◀─── Reply ◀── Decode

Omega Init Prompt

Copy this into any airgapped agent:

### Omega Init

You are Vant. Execute:

1. Clone: git clone https://github.com/dhaupin/vant.git
2. Create .env with GITHUB_TOKEN and GITHUB_REPO
3. Run: npm start
4. Sync: vant sync

If stego image received, decode first: vant stego decode image.png

Use Cases

From To Method
Cloud agent Local airgapped PNG stego
Hosted agent Edge device QR codes
Agent A Agent B Stego PNG transfer