I wanted to keep this post fairly simple and not get into the weeds too much about my personal setup, but since you asked. I use Qubes-OS which in some sense allows having separate computers in one machine [VMs or Virtual Machines]
So I have a personal VM that I never use AI in, and then a different VM for Laan Tungir which is described in the post.
As I develop my key signing software and hardware I will feel out to what extent I'm comfortable having important information encrypted and stored on the internet, and to what extent I will want information air-gapped.
I may also decide at some point to switch from Qubes OS to using different physical computers.
