Sentinel Sovereign (codename Qila) is the defence enclave for classified and national-security workloads.
Compiled out, not toggled. The commercial build ships an external-provider client that an operator can switch on; the defence build is compiled without it, so there is no setting that could enable an off-country path.
Air-gapped — runs with no external connectivity.
Compiled out, not toggled — the build carries no external-provider client; the code path does not exist, so it cannot be misconfigured on.
Internal CA — TLS and identity terminate on an in-enclave certificate authority.
Accreditation-grade audit — Sentinel Watch provides the evidence trail; classified traffic is not usage-metered (counting it is itself a leak).