[razakel]

Use a DVD-R with a read-only drive on the air-gapped machine. Much easier to audit than an evil USB.