Event details
Good question! At the moment I would pursue the PSWindowsUpdate PowerShell module which works pretty well inside air-gapped, consider Delivery Optimization within these networks and try to keep your OS and App installbase consistent.
It appears that this module is a wrapper around the Windows Update Agent, so it can't fetch updates for machines that don’t have access to Windows Update or WSUS. Therefor is seems it value on air-gapped machines is detection and orchestration, not delivery.
Hence my question about long term strategy.
thanks