Deploy into a customer's air-gapped, continuously-audited environment (FedRAMP/IL5-style). Design for the audit, not just the gap.

Candidates who have only done air-gapped deploys list what breaks (package pulls, telemetry) and stop. The ones who have lived through an accreditation know the deliverable is evidence: immutable audit logs, an access-broker trail showing every human touch, and a documented, reproducible model-update path the auditor can inspect. The trap follow-up is 'how does a new model version get in, and how do you prove to the auditor it is the version you tested?' The answer is signed, hash-pinned artifacts through the approved one-way ingestion path, with the in-VPC eval run captured as the acceptance record. Saying 'audit logging is a feature we add' rather than 'a control we are accountable for' reads junior at any regulated customer.