box-memory-onprem

Air-gapped Box.com agent memory. Writes only to the local Box Drive desktop-app mount; Box Drive handles compliant sync to Box cloud. Zero outbound network calls to Box during skill execution.

This is the on-prem variant of mrdulasolutions/BOX. Same agent-memory model, restricted to local FS so the agent runtime stays air-gapped from the Box network.

Need cloud-mode features?

(metadata templates, no Box Drive dependency, internet-anywhere usage)

See mrdulasolutions/BOX — the cloud variant. Both plugins coexist; plugin namespace disambiguates skills (box-memory:box-init vs box-memory-onprem:box-init).

Which variant do I want?

If you need…	Install
Agent works from any device with internet	BOX
Business+ metadata template features	BOX
Skills make zero outbound calls to Box	BOX-Onprem (this repo)
HIPAA / FedRAMP / ITAR data path through Box	BOX-Onprem
Some workflows online, some air-gapped	Install both

Requirements

• macOS (v0.0.1 — Windows in v0.0.4)
• Box Drive installed and signed into your Box account
• A Claude Code or Cowork host

Skills

9 skills, all restricted to local filesystem operations:

Skill	Slash	What it does
box-drive-detect	/box-drive-detect	Probes Box Drive mount + writability + sync state
box-airgap-status	/box-airgap-status	Reports trust boundaries for the current session
box-init	/box-init	Bootstrap a workspace on the local Box Drive folder
box-write	/box-write	Save a memory file locally
box-recall	/box-recall	Find memories via local _index.json
box-companion	/box-companion	Generate companion .md for a local binary file
box-team	/box-team	Create local team subtrees
box-status	/box-status	Read workspace state from local config + index
box-index-rebuild	/box-index-rebuild	Rebuild indexes from local FS scan

Install

Claude Code

mkdir -p ~/.claude/plugins/box-memory-onprem
curl -L -o /tmp/plugin.zip https://github.com/mrdulasolutions/BOX-Onprem/releases/latest/download/box-memory-onprem-plugin.zip
unzip -o /tmp/plugin.zip -d ~/.claude/plugins/box-memory-onprem/

Claude Cowork (admin)

Settings → Plugins → Add plugin → upload box-memory-onprem-plugin.zip.

Compliance model

The plugin closes the Box data path. Other trust boundaries (LLM API, disk encryption) are your responsibility.

See:

• references/compliance-by-deployment.md — deployment-tier compliance posture: HIPAA, FedRAMP Moderate/High, DoD IL4, ITAR, EAR, GxP, GDPR, etc. mapped to deployment model + Box plan + required add-ons. Authoritative URLs for every claim.
• references/airgap-trust-model.md — full trust-boundary breakdown
• references/supported-llm-configs.md — Anthropic + BAA, AWS Bedrock, Azure Gov AI Foundry, local models
• SECURITY.md — 5-layer release hygiene + supply chain commitments

Schema is pinned to the cloud repo

This plugin shares the workspace schema, tier matrix, architecture, and operational notes with mrdulasolutions/BOX. Those docs are pinned to a specific commit SHA in .schema-pin and fetched into synced/ via scripts/sync-shared-refs.sh. Schema changes land in BOX first; bumping the pin here is a separate, reviewable PR.

License

MIT — see LICENSE.