Can a local Server survive a ransomware attack? Yes, if you invert the network logic. This study presents a ‘Secure Pull’ architecture that creates a logical air gap, delivering the speed of local recovery with the security of a vault. A validated, open-source blueprint for ransomware resilience.