Kevin O'Gorman now summarizing the architecture of the SecureDrop Workstation, which uses Qubes OS (@QubesOS) to enable journalists to safely decrypt and view submissions, without having to physically move files to an air-gapped machine.
This is accomplished through the VM-based compartmentalization provided by Qubes.
Pilot has been underway since 2020. Next year, we expect to move it from pilot to general availability.